Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/UoIehJbfUWAz73YZvsw9VV7MgTI.cer
File:                     UoIehJbfUWAz73YZvsw9VV7MgTI.cer (raw, json)
Hash identifier:          oHRwdgkoSOdaJnK1N5qDtRMavOpTEG/MRC0sA/yE8dI=
Subject key identifier:   52:82:1E:84:96:DF:51:60:33:EF:76:19:BE:CC:3D:55:5E:CC:81:32
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018CC802D9E636B9A4473AC345282CBBC2F5
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/3a/bd0d2d-68c4-4b0e-b0f2-1e1e39033508/1/UoIehJbfUWAz73YZvsw9VV7MgTI.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/3a/bd0d2d-68c4-4b0e-b0f2-1e1e39033508/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Tue 02 Jan 2024 02:31:19 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    AS: 211738

Validation:               Failed, certificate revoked on Fri 19 Jan 2024 23:12:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c8:02:d9:e6:36:b9:a4:47:3a:c3:45:28:2c:bb:c2:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 02:31:19 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=52821e8496df516033ef7619becc3d555ecc8132
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:4e:dd:9c:97:ba:6e:62:f9:82:32:b8:35:9b:
                    88:b0:33:43:dd:89:98:e6:41:36:05:a3:6c:b8:01:
                    cd:c5:a9:3d:f0:40:29:92:65:db:5a:ef:7a:d5:da:
                    0b:a0:2e:9d:bc:cf:31:db:6c:77:d3:19:ae:3d:dd:
                    a5:ac:67:6b:24:2a:b1:e5:90:6d:11:dd:a1:ee:d9:
                    92:0f:3e:08:21:d9:0d:d4:6b:c7:bc:c0:d8:16:e9:
                    f6:e3:ad:92:33:9d:90:74:b4:d5:ec:69:ab:3b:50:
                    4e:a2:3d:e5:65:fc:35:ee:9c:94:67:1c:07:f4:81:
                    47:d5:07:bc:31:58:b0:c6:03:25:15:f6:67:a8:81:
                    54:4b:b2:09:22:77:64:17:66:e2:fd:1a:3e:49:09:
                    2c:ff:cb:a0:f2:87:95:d3:7f:cb:7c:00:7b:1d:6e:
                    46:da:6a:e8:c1:58:2d:be:79:f5:e6:bb:a7:40:9b:
                    c2:72:b0:b7:4c:1e:b3:83:32:61:2a:1e:ab:5a:92:
                    e1:80:b5:53:a0:44:49:ba:9e:e3:9a:0f:79:05:e6:
                    b5:2e:aa:da:f6:bc:46:56:0a:67:ab:7b:66:07:84:
                    1d:36:e2:5f:0f:18:90:30:11:ff:22:7c:c2:95:b4:
                    f8:4e:d1:60:29:77:c3:56:f1:cc:ff:14:8b:79:f6:
                    e2:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:82:1E:84:96:DF:51:60:33:EF:76:19:BE:CC:3D:55:5E:CC:81:32
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/bd0d2d-68c4-4b0e-b0f2-1e1e39033508/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/bd0d2d-68c4-4b0e-b0f2-1e1e39033508/1/UoIehJbfUWAz73YZvsw9VV7MgTI.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  211738

    Signature Algorithm: sha256WithRSAEncryption
         b1:5a:cd:7c:49:a7:3c:22:90:3b:15:b0:05:92:e5:80:77:be:
         3b:bc:5b:e4:28:7c:8f:7c:7d:15:57:c5:d4:87:fa:e0:26:f1:
         6e:ab:69:5a:55:25:01:ff:bd:78:f2:7a:ad:c3:50:ef:24:d0:
         bf:32:d5:0b:a2:d2:78:b2:df:4e:e6:80:24:d9:33:e7:56:b6:
         00:cb:e8:91:d8:d4:93:65:78:8b:63:e7:90:11:9c:27:48:90:
         24:d7:c1:ab:96:1f:79:43:fa:7d:5a:70:f8:ed:51:f0:44:b1:
         49:81:92:8b:8a:9e:e1:7e:67:a2:9b:16:e2:15:f7:96:18:19:
         9d:82:5e:dd:8b:bf:cf:5a:98:84:2b:e6:d2:6e:41:f9:b1:ac:
         57:1f:eb:2b:66:a7:dc:37:1c:ad:79:69:83:44:a0:f2:19:09:
         d3:86:e3:ed:f8:47:30:be:ca:ba:94:8e:a3:1b:81:5a:37:42:
         3b:d1:53:6c:4f:fd:27:54:bb:12:94:a3:01:13:c1:74:ee:79:
         75:75:4c:c2:ce:43:f0:50:0d:2f:08:57:1a:ec:c2:0c:ba:df:
         de:2f:5c:34:e8:2a:52:0e:d3:33:e5:76:c1:8b:5e:d8:b5:7b:
         10:4f:f4:3d:1c:c0:f2:4d:d4:7f:24:2d:cf:57:31:94:29:55:
         7b:ce:96:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----