Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cDuKPV09LmZhIF0-H6Wx3bihfRc.cer
File:                     cDuKPV09LmZhIF0-H6Wx3bihfRc.cer (raw, json)
Hash identifier:          rzjlYq2n2drdNnF/mjTSb3G/s+/i7yJF0z6ANxjY4VU=
Subject key identifier:   70:3B:8A:3D:5D:3D:2E:66:61:20:5D:3E:1F:A5:B1:DD:B8:A1:7D:17
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018A9344202DB84362FDE8ABC8D839C05249
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/e2/fb39b4-b695-4e54-9326-700743324485/1/cDuKPV09LmZhIF0-H6Wx3bihfRc.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/e2/fb39b4-b695-4e54-9326-700743324485/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 14 Sep 2023 10:37:10 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    AS: 203466

Validation:               Failed, certificate revoked on Fri 15 Sep 2023 06:52:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:93:44:20:2d:b8:43:62:fd:e8:ab:c8:d8:39:c0:52:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Sep 14 10:37:10 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=703b8a3d5d3d2e6661205d3e1fa5b1ddb8a17d17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:a0:b8:b4:f6:0b:9b:f9:2d:6c:71:52:89:dc:
                    74:05:dc:1b:56:f2:b0:84:5a:6a:a8:ed:cb:22:77:
                    05:6b:67:35:ba:27:00:38:9f:04:be:a9:0a:ea:a0:
                    15:b1:22:49:d1:54:64:4a:5f:0a:49:a6:f5:4c:da:
                    12:2c:25:c9:a3:51:ac:22:7c:41:25:08:da:32:0c:
                    9b:f5:d8:74:ff:5b:fc:8d:eb:51:5c:be:05:13:b2:
                    ef:ce:0d:c2:e3:95:bb:59:28:d2:c7:26:5a:01:7c:
                    25:01:fc:52:fe:e2:32:97:ec:e1:06:d9:b1:e6:fb:
                    80:b4:39:b0:79:6e:1c:35:b2:79:36:2d:23:0e:1f:
                    bf:de:ef:cf:b5:ac:47:c4:4e:3f:3a:43:b7:2e:45:
                    2b:ea:03:bc:4e:f6:cc:a3:4b:cb:20:63:48:14:77:
                    38:bc:0d:91:a0:3e:a3:ec:b9:a9:b8:e2:8d:01:6c:
                    bb:ec:d2:6e:89:bf:a3:e7:1e:87:15:9e:43:48:3a:
                    a1:ba:8f:16:e2:ef:79:da:f6:bc:2c:3a:e7:39:30:
                    58:fb:5d:7d:5e:96:c1:87:6e:dd:a9:02:e1:87:22:
                    bc:34:c8:9e:58:28:22:d5:f0:4d:4f:80:97:e8:4a:
                    01:61:b5:86:5a:f7:98:5a:aa:4c:82:fd:6c:e0:09:
                    2f:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:3B:8A:3D:5D:3D:2E:66:61:20:5D:3E:1F:A5:B1:DD:B8:A1:7D:17
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/fb39b4-b695-4e54-9326-700743324485/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/fb39b4-b695-4e54-9326-700743324485/1/cDuKPV09LmZhIF0-H6Wx3bihfRc.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  203466

    Signature Algorithm: sha256WithRSAEncryption
         10:a6:b1:ae:ed:46:e1:82:48:ff:c9:b4:25:df:2e:22:29:d7:
         86:d0:d4:c6:e6:27:79:84:f6:ce:19:ad:b8:34:f1:12:35:23:
         14:db:51:fd:25:4a:04:65:69:31:67:98:83:9a:2b:0c:9d:be:
         b7:39:ff:4b:ee:f4:ee:e4:bf:56:2b:d1:d1:d6:b7:f1:56:a6:
         5b:3f:9c:e1:95:cd:9c:fb:ca:d2:d0:fa:ea:ce:cf:74:2a:29:
         8c:54:6f:81:4c:97:8f:ae:63:da:55:22:ba:87:6c:68:f8:f3:
         8f:29:30:9e:bb:45:1b:24:2f:d5:4d:df:3c:1c:3a:0f:98:14:
         b5:c8:27:05:75:2c:2c:04:a7:ba:cf:ee:aa:cc:fc:fb:a3:f0:
         13:2a:0c:7d:3c:69:72:25:a5:6c:38:07:e5:fc:be:82:cf:80:
         ef:59:a7:9c:ff:ec:d7:38:1d:c8:7b:38:a5:a9:1d:6f:8d:7b:
         82:dd:4d:c9:6e:25:27:2b:c7:79:f4:ae:54:cd:17:31:5e:b4:
         a7:55:ee:02:95:3b:d3:e2:db:09:dd:ef:25:84:b3:c2:e3:62:
         dd:b0:cb:b7:32:d5:ce:fa:dd:d2:22:be:26:ce:16:b6:46:c1:
         b5:c9:dc:82:ae:fe:58:23:20:e3:9f:c3:45:25:ca:ff:ee:a3:
         c8:ec:2e:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----