Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/kUIxERDvPCR7QDRIQ07SdRFjywg.cer
File:                     kUIxERDvPCR7QDRIQ07SdRFjywg.cer (raw, json)
Hash identifier:          RBs+aNJbWJ3haZGUEeimkStPPPPI0h8XEgAnuL5Tclg=
Subject key identifier:   91:42:31:11:10:EF:3C:24:7B:40:34:48:43:4E:D2:75:11:63:CB:08
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0186E4317B862261575037CC7AD1F9FFE0B0
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/38/285984-6a0f-488e-8c89-cdf21a07493e/1/kUIxERDvPCR7QDRIQ07SdRFjywg.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/38/285984-6a0f-488e-8c89-cdf21a07493e/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 15 Mar 2023 07:34:53 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    AS: 199436

Validation:               Failed, certificate revoked on Wed 15 Mar 2023 08:08:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:e4:31:7b:86:22:61:57:50:37:cc:7a:d1:f9:ff:e0:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Mar 15 07:34:53 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=9142311110ef3c247b403448434ed2751163cb08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:6d:ef:fd:2e:71:58:a4:37:96:7f:95:8d:8f:
                    8b:fc:a3:b5:dd:d1:bd:3a:5a:1b:c3:3b:72:51:7b:
                    40:ce:02:5b:fd:1f:55:28:c5:30:c3:c9:46:fe:67:
                    81:31:b9:46:5d:0d:46:54:8c:4e:f1:3e:c8:fd:dd:
                    f7:34:54:75:22:51:00:6f:08:92:91:81:34:4b:19:
                    33:82:c3:60:2b:4c:08:25:40:9a:7d:d0:13:a1:e7:
                    a2:7a:82:d5:2b:a4:f9:6f:90:77:4c:6d:5c:5e:eb:
                    03:8f:e5:22:27:da:d0:7d:2d:7b:e7:20:a6:cf:f9:
                    25:b6:6e:3d:70:7c:b0:89:f5:b4:c5:75:ea:bc:38:
                    01:9d:4a:18:54:66:af:82:95:eb:03:04:2e:f3:de:
                    4d:64:a6:16:ca:86:c2:cf:4d:3b:9f:b9:01:cc:dd:
                    2b:f1:a7:5a:15:6f:c6:13:10:20:5c:30:29:3c:af:
                    67:ca:66:0b:10:c8:42:66:76:5c:f5:28:5b:ac:80:
                    bf:fc:54:8f:35:24:24:a2:1a:cb:07:a8:22:58:54:
                    a2:78:ec:da:6d:05:f8:59:3e:70:f7:c9:91:8d:ec:
                    76:77:74:2b:ea:35:05:8f:cf:67:a9:d0:46:f0:78:
                    13:46:76:4f:cd:bc:f8:b9:a5:87:8f:a4:24:78:a0:
                    f5:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:42:31:11:10:EF:3C:24:7B:40:34:48:43:4E:D2:75:11:63:CB:08
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/285984-6a0f-488e-8c89-cdf21a07493e/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/285984-6a0f-488e-8c89-cdf21a07493e/1/kUIxERDvPCR7QDRIQ07SdRFjywg.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  199436

    Signature Algorithm: sha256WithRSAEncryption
         08:8a:9c:54:b7:a0:1b:bb:21:5e:59:b3:e7:7b:32:47:ef:aa:
         fa:1e:8c:49:ba:4e:a3:27:4b:89:70:5b:d5:d7:d3:d5:cb:16:
         b0:15:1c:3b:bf:49:e9:13:42:15:c0:c6:33:d7:3e:7c:e1:a3:
         18:6f:03:0b:fc:08:37:12:5e:e1:70:f7:4c:35:39:75:aa:d6:
         06:fb:27:60:7f:ca:4a:9c:dd:3c:fa:68:6f:ff:96:9e:a4:1f:
         33:13:c0:1e:b9:60:24:bb:04:f9:8e:9a:19:d9:9f:1c:0c:40:
         f1:ec:56:70:d7:68:40:61:23:e6:d0:35:49:78:42:d6:aa:e2:
         da:ae:39:4f:8f:42:5f:d9:0e:6f:9b:6a:53:24:72:65:16:e8:
         69:e7:46:e4:21:76:4e:40:a2:bd:eb:b7:05:1c:dd:29:17:55:
         7d:cb:e1:ed:10:d6:86:ec:38:d7:70:e2:1b:5d:43:41:85:c6:
         ec:4f:2e:f1:0d:b4:d3:39:f5:21:bb:89:92:f4:e7:66:cb:a4:
         43:75:4a:a2:6b:70:cb:4f:fe:b0:67:fc:8e:de:d6:41:38:4b:
         ca:50:da:3c:4f:83:ac:81:7f:c1:6e:fc:3a:e3:aa:8e:e5:11:
         cc:f5:eb:fe:55:d9:88:36:49:d6:ba:60:4a:ea:e1:c2:3c:46:
         ee:cb:61:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----