Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cAL1n9A7tqbwzDifqJc6SNR9ymE.cer
File:                     cAL1n9A7tqbwzDifqJc6SNR9ymE.cer (raw, json)
Hash identifier:          a/GtYQVlpH+z4/RMbAuhGNpzQLG67RPX95U5wZ5dfJs=
Subject key identifier:   70:02:F5:9F:D0:3B:B6:A6:F0:CC:38:9F:A8:97:3A:48:D4:7D:CA:61
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0185701D963ABC2361E6265DB7608CC787F5
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/bf/526249-aec9-4c98-8184-96366bd0f5fb/1/cAL1n9A7tqbwzDifqJc6SNR9ymE.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/bf/526249-aec9-4c98-8184-96366bd0f5fb/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 02 Jan 2023 01:34:25 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    AS: 207230

Validation:               Failed, certificate revoked on Wed 23 Aug 2023 09:56:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:1d:96:3a:bc:23:61:e6:26:5d:b7:60:8c:c7:87:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 01:34:25 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=7002f59fd03bb6a6f0cc389fa8973a48d47dca61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:bc:d9:6a:11:ce:1f:7d:0a:f5:ab:bb:d9:b3:
                    45:cf:71:7b:96:12:cc:d8:e9:1d:24:43:22:ff:99:
                    6d:08:fb:2c:f0:05:ed:7c:e3:8a:c2:09:03:66:b0:
                    77:09:74:09:54:66:dc:eb:90:01:e3:5c:84:2f:04:
                    be:5e:4b:fb:a3:29:35:42:ab:96:f2:eb:83:e0:d1:
                    c3:2c:2b:30:dd:57:5b:58:b0:37:ba:46:0c:64:71:
                    33:0f:d3:41:cf:72:ab:fd:4b:b9:8c:21:6e:c8:fb:
                    c4:4c:a0:d5:66:2c:e9:42:82:ff:b8:d0:86:72:91:
                    95:9d:83:22:00:68:f3:50:38:a1:65:d0:c5:75:b0:
                    f0:8a:f9:ce:0b:7e:fb:a4:ba:91:96:b4:3e:49:58:
                    d0:67:17:f0:e0:a7:47:60:6f:f0:50:d3:41:c1:21:
                    99:82:64:94:86:98:f0:10:ed:0c:2a:bf:4c:99:b4:
                    36:ca:15:1b:16:7d:26:0b:1e:03:00:9e:dd:91:e0:
                    2d:fd:0a:11:c5:fc:d6:44:36:ef:21:f9:62:43:3a:
                    38:4c:c0:e7:02:1a:63:e7:99:e5:aa:79:32:1c:e2:
                    9f:55:f4:d4:c5:20:a8:14:ee:3c:c6:d4:28:11:a1:
                    72:d0:82:11:d2:69:6b:6d:6f:4b:4d:31:98:5b:a1:
                    6c:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:02:F5:9F:D0:3B:B6:A6:F0:CC:38:9F:A8:97:3A:48:D4:7D:CA:61
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/526249-aec9-4c98-8184-96366bd0f5fb/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/526249-aec9-4c98-8184-96366bd0f5fb/1/cAL1n9A7tqbwzDifqJc6SNR9ymE.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  207230

    Signature Algorithm: sha256WithRSAEncryption
         37:bd:f1:43:b7:7d:9d:6c:1a:51:7c:e0:b8:67:4d:99:9a:c3:
         33:8e:40:91:00:be:02:49:de:3d:91:14:03:07:12:1b:fd:4b:
         80:ec:42:bb:96:7a:50:fa:7c:f5:31:fa:89:33:9d:70:8c:0a:
         80:58:50:9c:5b:a1:92:f0:e0:81:d2:0f:16:db:c7:74:0e:f7:
         a5:63:1a:49:11:ad:8a:cc:90:f9:fa:66:d9:d3:2c:2a:0a:d1:
         9f:a7:9e:9e:a6:e7:04:eb:07:a9:e9:bf:69:19:84:3e:3e:fa:
         cf:2f:22:fe:5f:f2:05:76:6a:4e:6c:07:2a:33:b9:c0:45:f2:
         6c:30:6e:49:c5:95:1d:70:25:cc:f8:2b:67:44:59:8a:89:43:
         2a:55:43:44:00:bc:74:f7:84:7d:20:cf:93:18:b5:80:a7:cc:
         78:41:b5:59:7a:d8:d8:f8:82:4d:4d:f1:cd:27:c3:1e:fb:b2:
         e5:81:01:c1:19:d7:dc:c6:64:d1:fa:a1:ee:94:ea:e6:de:5e:
         e5:9a:20:7a:50:23:fd:04:da:3a:04:65:c3:16:57:84:b8:9e:
         df:97:fc:45:cf:6a:5b:ac:e9:7a:23:84:76:1d:6f:32:de:6e:
         0c:3f:08:ca:23:66:2d:a8:0a:bb:be:e7:ab:1f:51:58:82:1b:
         04:20:fb:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----