Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/laOVEwI9s5n8za9-o1fsB7VTBs8.cer
File:                     laOVEwI9s5n8za9-o1fsB7VTBs8.cer (raw, json)
Hash identifier:          QupmpaA0x1M4wme8I6r3VQgr9XaT36dyOZ3ruC5cvtw=
Subject key identifier:   95:A3:95:13:02:3D:B3:99:FC:CD:AF:7E:A3:57:EC:07:B5:53:06:CF
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856F4066C58E07B43776418BBEFBC97CF4
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/08/c0f6f1-2ee2-41d6-b6ab-086cb9d1a5cf/1/laOVEwI9s5n8za9-o1fsB7VTBs8.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/08/c0f6f1-2ee2-41d6-b6ab-086cb9d1a5cf/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 21:32:49 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    AS: 211411

Validation:               Failed, certificate revoked on Sun 18 Jun 2023 09:58:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:40:66:c5:8e:07:b4:37:76:41:8b:be:fb:c9:7c:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 21:32:49 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=95a39513023db399fccdaf7ea357ec07b55306cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:c8:b6:6b:b0:f5:24:13:d6:c7:61:a0:dc:c9:
                    72:f2:68:26:14:d7:dd:ab:6f:50:12:11:60:7b:f0:
                    83:4d:44:5f:c3:9c:54:d7:58:9a:e2:4c:68:70:cb:
                    d5:0b:c1:61:5b:7e:2a:d9:b0:fd:5c:6c:fd:3e:07:
                    41:a6:15:a5:75:23:d5:a4:e9:b2:29:80:31:a1:e5:
                    13:bd:dd:a1:a3:ad:cb:e0:9d:35:81:2b:7f:7b:a3:
                    79:d2:7b:00:a8:d2:62:d6:fb:44:b3:31:e3:47:19:
                    fb:19:07:07:0b:98:2d:70:a9:60:c5:9a:67:25:57:
                    62:6d:07:ab:7f:1b:18:f7:8d:63:3a:cd:ac:3d:49:
                    6b:cb:6e:7b:60:27:b8:5f:d5:5f:4d:12:42:f5:73:
                    25:e3:fa:54:19:f3:b0:4c:35:09:57:50:2b:c5:7f:
                    cd:e5:cc:8e:05:44:e1:eb:5e:2b:4e:f5:27:9d:df:
                    01:b2:8f:92:6b:c4:2d:0f:55:8d:d7:9f:b7:45:37:
                    fe:9d:8f:f7:2d:32:96:db:bf:d9:da:4b:99:d3:72:
                    23:10:52:23:ef:b0:83:d4:e1:74:82:62:eb:b7:37:
                    f6:81:4f:89:1d:a0:f3:35:0b:42:95:a0:31:5a:06:
                    c0:85:1d:8a:ae:b4:a2:a1:b4:e4:10:97:26:d1:9f:
                    80:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:A3:95:13:02:3D:B3:99:FC:CD:AF:7E:A3:57:EC:07:B5:53:06:CF
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c0f6f1-2ee2-41d6-b6ab-086cb9d1a5cf/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c0f6f1-2ee2-41d6-b6ab-086cb9d1a5cf/1/laOVEwI9s5n8za9-o1fsB7VTBs8.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  211411

    Signature Algorithm: sha256WithRSAEncryption
         80:e8:c7:de:b3:49:23:ee:d2:46:ac:eb:b6:8a:5c:a0:91:cd:
         e2:a3:04:b9:36:34:d3:52:b3:d1:d8:e5:2b:fb:a5:e2:25:9f:
         ea:55:0d:11:e8:22:95:97:2e:e3:f6:bc:86:aa:5e:2e:ff:53:
         ec:f3:7f:89:b9:2e:79:f2:34:2b:a3:1c:7f:5e:d7:ee:5b:0d:
         b4:f7:04:64:93:17:73:23:db:11:10:0c:a1:1b:90:41:b6:b5:
         66:6f:fa:1b:af:95:0c:9a:30:82:a3:0a:0b:7e:c6:30:99:81:
         7b:a0:bd:b0:2a:27:ec:f1:ea:ed:ed:bc:89:6e:2c:8e:a7:46:
         db:1f:15:b2:64:30:4d:04:68:41:b2:1d:36:e9:ab:e4:67:29:
         63:67:53:cb:91:c2:ba:d8:b9:3a:6b:f6:e4:31:e2:35:96:79:
         22:c8:c3:0d:7f:37:01:c0:51:08:13:1b:24:7e:96:0c:af:f6:
         3e:27:6b:b6:bc:27:80:f5:27:90:22:89:c2:06:58:af:17:7a:
         ec:47:dd:c0:4f:b3:7b:9c:be:03:b6:76:29:d0:e4:2c:7b:92:
         ae:2e:bf:26:25:09:c5:ae:2d:d1:62:a5:8a:85:63:a5:7c:77:
         0d:68:51:21:ad:1f:2f:74:37:21:fa:06:2f:99:82:8b:81:6f:
         64:45:0a:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----