Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/btLpE2rHcRW_CzQ_lHOxXMDE8SU.cer
File:                     btLpE2rHcRW_CzQ_lHOxXMDE8SU.cer (raw, json)
Hash identifier:          NxphJf8N6Za1SIx2Vqtd7Q56qtiipFgP20YuZL+Mdmo=
Subject key identifier:   6E:D2:E9:13:6A:C7:71:15:BF:0B:34:3F:94:73:B1:5C:C0:C4:F1:25
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018E2CC740431BEA2A0C4CDC31BD6A27FCC9
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/2d/216524-389d-426c-a4b1-701b94c9ca1d/1/btLpE2rHcRW_CzQ_lHOxXMDE8SU.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/2d/216524-389d-426c-a4b1-701b94c9ca1d/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 11 Mar 2024 09:10:39 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    AS: 204256

Validation:               Failed, certificate revoked on Mon 11 Mar 2024 11:18:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8e:2c:c7:40:43:1b:ea:2a:0c:4c:dc:31:bd:6a:27:fc:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Mar 11 09:10:39 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=6ed2e9136ac77115bf0b343f9473b15cc0c4f125
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:d8:09:8c:f2:0b:92:b2:16:37:6b:31:a8:3d:
                    91:50:a7:54:31:43:b7:26:74:8b:fd:51:ae:4b:3d:
                    be:d0:c7:ae:07:0a:de:f6:bf:35:9b:2a:9d:c2:33:
                    3d:62:05:a9:73:62:06:03:67:0d:02:3d:42:ec:5d:
                    2f:18:22:47:ec:32:08:50:a4:9e:db:75:ab:f6:52:
                    da:51:b9:a3:8a:09:e8:1b:f2:47:fb:79:da:6f:d8:
                    76:16:cd:26:aa:be:56:40:7c:8a:41:f6:68:f6:d0:
                    6f:59:a6:86:b6:ec:90:58:f8:d0:9e:a9:43:30:9d:
                    49:ea:1a:cc:ff:dd:2a:f3:2f:8c:8e:0d:5c:74:3e:
                    5f:b9:00:a0:1f:10:3f:89:b9:a9:ac:3a:7d:78:2c:
                    cd:be:49:70:22:42:e3:e5:5b:b0:9d:91:30:f3:40:
                    21:67:d5:ae:0b:74:2e:86:db:7a:4e:da:c5:c9:59:
                    c8:0b:f7:4d:1d:14:98:2e:e1:39:2e:ca:cd:c3:25:
                    45:40:5f:2f:65:dd:48:18:ae:84:80:9e:5f:8a:db:
                    32:bf:8d:fe:b5:8a:0c:10:68:72:1a:af:98:b3:54:
                    59:8a:7c:45:6f:83:dd:47:79:25:1c:00:e5:43:6a:
                    e5:55:8c:29:6a:69:63:b7:1c:7e:5a:dd:d4:c8:96:
                    8a:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:D2:E9:13:6A:C7:71:15:BF:0B:34:3F:94:73:B1:5C:C0:C4:F1:25
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/216524-389d-426c-a4b1-701b94c9ca1d/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/216524-389d-426c-a4b1-701b94c9ca1d/1/btLpE2rHcRW_CzQ_lHOxXMDE8SU.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  204256

    Signature Algorithm: sha256WithRSAEncryption
         16:38:0b:5a:ef:8c:00:54:51:86:27:9f:9c:1b:0e:b6:00:6e:
         c0:4b:9c:05:b4:38:cb:1b:0e:41:78:83:f2:58:eb:49:f1:3d:
         b5:d6:8e:5f:bd:a5:77:cc:23:c6:71:40:b0:ef:1f:b6:91:1a:
         f0:ad:ee:11:da:55:9f:cb:d7:97:a2:41:5c:1c:f0:b2:c7:4b:
         6c:45:f1:e7:c8:85:49:dc:b3:f6:57:8a:38:53:ea:a7:27:c6:
         56:8d:d6:2f:62:78:41:66:98:10:1e:35:84:10:b7:a0:f1:10:
         0a:c3:4b:49:ed:18:8c:a6:d6:f3:68:72:7c:55:4f:fc:e0:51:
         15:4e:90:2b:ef:96:04:60:71:a7:c6:db:db:49:0e:88:93:f2:
         59:86:90:8d:3e:db:0e:ef:a2:ca:53:5a:00:a9:bb:0d:8d:d7:
         23:d1:38:cd:cf:06:08:7a:f5:b7:db:5c:c1:47:be:3c:99:ee:
         af:7e:f1:82:10:29:93:2b:e5:3a:80:e7:ae:63:3c:c6:49:40:
         92:a2:a8:15:e4:07:b9:37:e0:21:0d:5c:b2:2d:8a:ea:5c:a6:
         68:00:8d:e8:0d:07:5b:6f:a7:fe:36:33:64:da:bb:3f:e5:3d:
         69:ce:55:d3:39:16:f0:50:37:14:7a:aa:01:1c:4d:b7:c7:1f:
         17:97:44:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----