Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/gvbPv8X2ezD6xFcSw8QYs6R_-8Q.cer
File:                     gvbPv8X2ezD6xFcSw8QYs6R_-8Q.cer (raw, json)
Hash identifier:          5xYtda/tRR4EZcHM8NNb8jwIZyt60EJHurZn5XDopBI=
Subject key identifier:   82:F6:CF:BF:C5:F6:7B:30:FA:C4:57:12:C3:C4:18:B3:A4:7F:FB:C4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0188E665434ABCA59437C2EB044BAFDA87B8
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/bf/946128-0cca-4cc1-a3b9-e1f1ade65f3e/1/gvbPv8X2ezD6xFcSw8QYs6R_-8Q.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/bf/946128-0cca-4cc1-a3b9-e1f1ade65f3e/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 23 Jun 2023 03:56:16 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    AS: 198057

Validation:               Failed, certificate revoked on Sat 18 Nov 2023 14:30:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:e6:65:43:4a:bc:a5:94:37:c2:eb:04:4b:af:da:87:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jun 23 03:56:16 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=82f6cfbfc5f67b30fac45712c3c418b3a47ffbc4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:88:d0:d5:cf:6b:ba:99:7b:1d:b1:5a:7d:aa:
                    97:a3:ac:e0:77:f2:48:40:32:29:61:6b:a7:60:dc:
                    26:fb:07:c9:3f:e0:1b:8d:1a:7b:02:8b:2a:62:55:
                    d4:8d:89:db:40:20:44:b2:73:ec:75:8a:b3:1f:5e:
                    80:b2:42:45:37:fd:41:1f:b0:01:fc:52:e9:28:3c:
                    26:b5:ae:3f:84:74:9d:20:a1:32:1c:d3:db:42:cf:
                    08:a1:48:15:85:e7:06:83:7c:46:8d:a9:4f:60:2c:
                    6a:a5:60:7e:09:e2:28:10:30:68:e2:c2:3b:cb:75:
                    01:6b:9c:84:de:17:b1:ef:fd:39:51:9e:4c:9b:3a:
                    9b:c0:90:9b:69:a0:5b:ec:bf:9f:df:60:1c:be:7a:
                    dd:cc:35:7f:92:02:a5:eb:7e:76:47:0a:83:12:66:
                    ba:59:06:6e:78:ef:20:04:92:b8:00:86:90:65:ae:
                    c4:7e:46:66:66:14:fa:07:4c:87:d0:16:0c:cf:6e:
                    48:d6:3c:d5:b5:1d:83:fc:c2:30:f1:2f:63:f5:e4:
                    b8:09:12:eb:14:be:2f:d4:f4:06:e5:b1:f6:e2:2f:
                    8c:73:24:85:a1:3f:d2:c9:fa:58:f4:9f:3b:d3:5f:
                    52:73:a0:cd:ab:79:de:a7:76:6b:3b:a2:ba:55:fc:
                    19:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:F6:CF:BF:C5:F6:7B:30:FA:C4:57:12:C3:C4:18:B3:A4:7F:FB:C4
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/946128-0cca-4cc1-a3b9-e1f1ade65f3e/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/946128-0cca-4cc1-a3b9-e1f1ade65f3e/1/gvbPv8X2ezD6xFcSw8QYs6R_-8Q.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  198057

    Signature Algorithm: sha256WithRSAEncryption
         00:cf:9b:ad:0e:79:2f:fc:d9:80:b3:18:7e:b1:ef:71:0b:07:
         2c:49:60:ca:b9:39:7c:da:a4:23:38:2c:90:28:be:a4:c3:0a:
         90:f9:54:f4:e1:6b:d1:a6:14:b9:63:0d:25:f6:41:be:f5:ca:
         27:92:ff:ed:5d:40:46:00:b8:d7:01:63:77:1c:8f:6e:89:a2:
         de:64:8a:74:35:bb:3b:10:97:15:c1:52:17:cd:b4:f9:b1:9b:
         62:13:de:28:d4:ae:c3:71:d5:33:92:37:46:98:6f:dd:5a:a1:
         42:bc:f9:d9:58:fd:54:4e:b5:0b:10:09:f3:68:4f:0f:a1:c4:
         c0:8a:46:b8:17:e7:2c:f8:6d:31:45:7d:99:d5:c0:d7:34:d3:
         de:89:de:45:a7:23:23:de:8d:67:f6:7a:60:f0:c9:3f:e0:64:
         6b:e1:c0:17:ee:81:78:29:da:91:5a:77:b3:1f:db:e9:de:97:
         79:a7:5b:d9:b9:ba:dd:37:1b:e3:04:f5:6d:46:23:5c:78:3c:
         19:3b:3a:c2:f3:3e:04:8c:76:80:ed:10:4c:a0:95:96:f8:89:
         76:21:50:c4:a7:f3:aa:eb:54:ce:ea:dd:c0:7a:d4:78:20:03:
         50:4e:dd:20:87:89:1e:74:32:99:68:a7:01:18:8d:69:19:cc:
         70:4d:1c:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----