Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/j_jBL-3U7XoKhO-zZXNXWgbocwc.cer
File:                     j_jBL-3U7XoKhO-zZXNXWgbocwc.cer (raw, json)
Hash identifier:          w9V/Imo+wfU+9coFNIAcJmKI7f0zGDxbTUMTAL01gvc=
Subject key identifier:   8F:F8:C1:2F:ED:D4:ED:7A:0A:84:EF:B3:65:73:57:5A:06:E8:73:07
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018BB44B5E7F37AD2E432E153FBF8486C0C3
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/11/a9e127-b52d-4b81-8bea-bf769f08fe71/1/j_jBL-3U7XoKhO-zZXNXWgbocwc.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/11/a9e127-b52d-4b81-8bea-bf769f08fe71/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 09 Nov 2023 13:35:20 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    AS: 211979

Validation:               Failed, certificate revoked on Mon 27 Nov 2023 11:13:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:b4:4b:5e:7f:37:ad:2e:43:2e:15:3f:bf:84:86:c0:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Nov  9 13:35:20 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=8ff8c12fedd4ed7a0a84efb36573575a06e87307
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:66:08:d6:59:23:d3:1b:db:73:d1:cb:cb:ea:
                    6e:d3:0e:3c:35:23:bb:da:5e:22:d0:b8:f4:29:7f:
                    b2:11:54:42:6a:df:9d:00:05:1c:f1:db:c5:5c:3b:
                    b1:95:91:02:de:aa:78:78:5a:19:81:bb:41:cf:92:
                    92:5b:88:8f:e0:e4:4e:91:ac:e5:8d:c8:7e:76:99:
                    59:4c:40:d8:48:0f:82:24:e3:4b:c4:f2:6b:ba:f5:
                    df:c9:c2:73:0b:08:9f:8a:83:6d:38:d7:53:29:e9:
                    aa:d5:90:8a:b1:87:3f:c6:55:7f:f1:57:c4:3a:b3:
                    66:25:ed:f2:0f:45:64:f7:a3:43:41:c3:eb:37:89:
                    e9:9f:d4:f5:fe:ac:63:a1:1c:3f:a8:25:71:63:b8:
                    2e:45:21:3e:d1:67:93:58:08:09:c3:6d:2c:0f:1c:
                    34:bd:b0:94:13:63:cf:fd:10:98:ea:12:73:55:b9:
                    df:aa:59:5c:ee:19:7a:30:59:b6:ff:39:78:27:fe:
                    5a:75:b6:87:59:2d:57:83:d1:22:38:99:e8:b1:94:
                    e1:7a:6c:a9:1f:e7:a7:db:db:52:dd:0c:b5:f8:22:
                    e9:a7:e4:3a:9c:64:b0:01:fe:46:5e:e7:a0:e8:78:
                    b4:65:57:4b:47:4d:f9:3a:42:d2:21:5d:85:82:17:
                    44:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:F8:C1:2F:ED:D4:ED:7A:0A:84:EF:B3:65:73:57:5A:06:E8:73:07
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/a9e127-b52d-4b81-8bea-bf769f08fe71/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/a9e127-b52d-4b81-8bea-bf769f08fe71/1/j_jBL-3U7XoKhO-zZXNXWgbocwc.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  211979

    Signature Algorithm: sha256WithRSAEncryption
         82:bf:c1:9b:ba:69:ec:76:1a:fa:b6:04:f5:8e:38:34:d0:4e:
         32:4b:a5:6a:4f:3b:8c:1e:d6:c4:09:88:18:a2:3a:a4:da:6e:
         9f:f3:ee:32:7a:72:a0:e8:1c:43:3d:f2:75:ec:41:82:43:74:
         44:bf:ea:8c:d0:69:95:7c:4e:a5:ea:d0:14:f5:93:8b:7b:e2:
         76:36:9f:27:15:50:16:1b:0f:c7:74:6f:f7:4f:e5:71:f9:d2:
         a7:1f:79:38:0a:00:a7:37:98:f7:de:02:4b:ae:dd:54:68:a0:
         a7:c6:09:46:c1:8b:34:87:9b:73:fc:c0:73:9c:42:14:66:43:
         41:22:c3:9c:18:5d:22:61:0f:7f:da:12:47:80:a0:01:07:1d:
         ae:60:ac:1c:8a:a2:df:ae:67:66:e7:fe:71:6c:dc:3c:d1:7f:
         2a:e3:db:60:6a:21:5f:b3:c8:9f:d8:10:18:e3:68:87:bf:5a:
         40:2b:da:2d:30:ba:b4:7b:53:aa:c2:44:de:02:00:a5:b8:7a:
         db:bf:54:80:20:18:81:d1:48:7c:05:ed:a1:0b:d3:d9:ce:c7:
         ce:ef:38:74:13:93:19:0c:f8:77:db:91:3a:cc:48:f4:61:07:
         69:b1:d8:dd:89:8e:1d:44:84:63:e5:a6:83:40:66:87:0b:8b:
         b8:cb:2b:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----