Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/XDJn1tzaqd33--SLOI4lR7G9LVY.cer
File:                     XDJn1tzaqd33--SLOI4lR7G9LVY.cer (raw, json)
Hash identifier:          XMCjuFYRXV4l4DBbJJZdUP2yeu2Z8bzKBbirlmuoW6M=
Subject key identifier:   5C:32:67:D6:DC:DA:A9:DD:F7:FB:E4:8B:38:8E:25:47:B1:BD:2D:56
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856C3F57B723772620E2E8151A6F3DDA8B
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/68/7777f8-b97d-4bea-8fba-ce0bc2dec169/1/XDJn1tzaqd33--SLOI4lR7G9LVY.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/68/7777f8-b97d-4bea-8fba-ce0bc2dec169/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 07:32:48 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    AS: 212871

Validation:               Failed, certificate revoked on Mon 13 Feb 2023 08:23:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6c:3f:57:b7:23:77:26:20:e2:e8:15:1a:6f:3d:da:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 07:32:48 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=5c3267d6dcdaa9ddf7fbe48b388e2547b1bd2d56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:ae:22:28:0b:97:06:2c:06:7b:30:e6:41:01:
                    5c:19:d5:11:48:fa:9c:a4:c1:4d:1a:27:60:19:e9:
                    8b:a6:1d:8e:6b:70:ff:bc:05:fb:1a:01:42:b0:4d:
                    66:c7:c7:63:70:aa:85:b4:b6:92:76:a4:c0:3b:4a:
                    e0:f2:cf:0d:45:65:a3:21:a1:25:97:58:23:c7:bc:
                    6b:1d:21:73:48:8f:be:0d:40:54:c8:01:59:70:97:
                    9a:ce:b4:36:fb:41:b5:bf:b9:b6:18:c8:7a:3c:88:
                    5b:1f:f8:23:99:7e:af:db:95:aa:4a:c6:87:b2:dd:
                    3c:c6:c8:f3:5b:96:05:ca:01:d3:5d:85:1a:b1:9f:
                    fd:ec:df:bd:b4:ea:8a:10:09:0c:71:78:98:d4:93:
                    98:dd:25:98:eb:ac:fe:11:13:a3:b3:a4:58:4b:f9:
                    0f:43:b0:15:a9:d4:b4:17:ee:70:d6:ea:6d:30:a9:
                    74:7c:82:e2:d2:7a:ea:82:87:71:d3:15:78:18:f3:
                    fd:00:8f:02:d0:91:ed:d7:be:7d:5d:bf:ba:ad:32:
                    70:45:b1:24:ee:97:1c:1e:99:85:50:30:93:ed:1c:
                    14:eb:54:70:36:a9:02:5f:ac:2c:e3:e5:4b:53:d5:
                    50:7f:cc:39:21:f6:d9:7a:b3:85:31:04:41:5c:2b:
                    20:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:32:67:D6:DC:DA:A9:DD:F7:FB:E4:8B:38:8E:25:47:B1:BD:2D:56
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/7777f8-b97d-4bea-8fba-ce0bc2dec169/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/7777f8-b97d-4bea-8fba-ce0bc2dec169/1/XDJn1tzaqd33--SLOI4lR7G9LVY.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  212871

    Signature Algorithm: sha256WithRSAEncryption
         0a:db:8d:a7:25:24:16:62:c1:0f:92:12:bc:ed:9a:83:ab:1e:
         33:b7:6a:50:52:de:ad:c4:7f:f3:4d:24:4c:25:c7:6f:c5:2b:
         ea:a3:fe:ba:a1:df:a0:aa:90:cd:39:2c:24:49:dd:a3:e6:98:
         b4:9f:4b:ce:1b:69:b8:21:82:12:2f:d8:a4:f6:d4:cd:41:b3:
         23:c6:45:39:ec:31:b6:fb:7a:18:41:cb:d1:1f:45:07:44:72:
         8c:03:69:f6:e0:bd:5f:04:04:b8:97:bb:2c:ae:d1:f6:42:1f:
         78:d1:91:b4:b6:11:af:17:65:84:d4:cd:43:89:6b:f2:9a:06:
         c6:8b:bd:3e:bf:17:c3:b5:fa:3e:4b:da:bf:9b:83:55:fd:6b:
         46:84:aa:2a:a3:af:9b:f9:d6:40:ba:22:dd:ab:81:2f:70:55:
         cd:5d:b8:e3:7b:6f:3c:f0:d4:e8:20:c5:0b:1c:5d:88:74:4c:
         50:88:9c:0b:bd:f6:82:10:43:9f:80:9e:82:98:b2:34:19:0e:
         1b:df:d1:5b:51:8a:93:1b:f8:e3:50:7d:ce:e9:18:26:a7:5f:
         ed:14:43:4f:f5:15:40:79:f5:f8:6a:23:0f:41:6e:27:d9:05:
         22:cc:94:30:ab:9e:53:20:78:16:b1:ac:d4:5f:77:28:de:c8:
         3e:59:71:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----