Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/nAThdXKzeNy_LoQMHPuhszEBY2A.cer
File:                     nAThdXKzeNy_LoQMHPuhszEBY2A.cer (raw, json)
Hash identifier:          MyiDM70Bw8QsIFCZyDxrfbkYVLqB1dlsV02qw2djQHc=
Subject key identifier:   9C:04:E1:75:72:B3:78:DC:BF:2E:84:0C:1C:FB:A1:B3:31:01:63:60
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0188456EFD64C0C24D500468B710B57BDC4D
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.co/repo/Jizbel/1/9C04E17572B378DCBF2E840C1CFBA1B331016360.mft
caRepository:             rsync://rpki.co/repo/Jizbel/1/
Notify URL:               https://rrdp.rpki.co/rrdp/notification.xml
Certificate not before:   Mon 22 May 2023 21:48:01 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    AS: 59523

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:45:6e:fd:64:c0:c2:4d:50:04:68:b7:10:b5:7b:dc:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: May 22 21:48:01 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=9c04e17572b378dcbf2e840c1cfba1b331016360
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:8f:41:5b:47:6d:1e:7b:11:62:42:74:af:75:
                    ed:bd:31:20:2e:d6:97:cb:26:f0:39:84:15:ae:af:
                    e2:b3:d8:ff:65:d6:49:ab:a8:59:fd:05:cb:3c:66:
                    b3:71:c1:b9:7e:97:57:03:65:e5:5f:79:01:d4:02:
                    34:6e:57:05:51:73:8a:08:1d:d4:df:54:2e:46:c0:
                    83:2b:e4:d6:5c:75:b7:20:cb:78:2f:63:34:f9:e1:
                    75:6a:78:eb:dc:2c:1e:51:dc:0b:5f:03:17:3c:22:
                    a9:5b:85:c7:f2:ec:25:96:85:97:f7:9f:6e:b1:62:
                    e3:ee:c4:53:00:6d:85:8a:d4:4d:63:87:8d:eb:b9:
                    a3:63:84:d7:be:77:6b:43:25:b2:4e:74:77:b2:95:
                    19:e5:5d:6f:cf:2d:59:4f:12:c5:85:f7:52:46:d6:
                    79:2a:90:8e:8a:40:bf:04:d5:2d:a6:d3:e6:36:19:
                    ae:39:dc:fd:2d:fd:2d:ac:99:c5:f0:d2:85:ca:ca:
                    49:71:94:9c:c9:71:00:94:8b:33:e0:37:3d:3e:aa:
                    e9:4c:88:6b:a4:20:12:1f:fc:ba:b8:39:90:f8:b7:
                    77:d7:49:23:29:20:34:b7:ec:1e:32:8c:a3:ba:8e:
                    bd:8c:f6:87:7d:27:bf:18:fb:c5:d3:47:53:0d:9c:
                    ea:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:04:E1:75:72:B3:78:DC:BF:2E:84:0C:1C:FB:A1:B3:31:01:63:60
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.co/repo/Jizbel/1/
                RPKI Manifest - URI:rsync://rpki.co/repo/Jizbel/1/9C04E17572B378DCBF2E840C1CFBA1B331016360.mft
                RPKI Notify - URI:https://rrdp.rpki.co/rrdp/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  59523

    Signature Algorithm: sha256WithRSAEncryption
         96:44:f6:c3:44:98:78:d1:85:ca:90:bf:01:c3:4f:b2:d5:52:
         44:3e:3b:51:3c:d8:44:6b:22:f6:f2:ec:df:19:ff:98:12:b3:
         b5:0d:31:2c:12:e4:e0:ec:16:31:94:94:08:53:95:fb:b2:a9:
         2f:37:51:4f:fa:09:5a:7c:30:ed:68:ae:a0:66:8c:1a:cd:a3:
         77:a8:86:6f:ad:c1:24:c7:49:dd:0e:a1:7f:de:68:9f:fd:42:
         04:04:3e:fc:04:69:3d:1c:10:4f:80:74:db:95:8a:55:68:79:
         d7:31:7f:cc:51:a0:05:5b:73:f2:3c:81:3b:d6:2c:b8:62:37:
         1c:7c:2d:02:76:75:95:73:3a:9b:45:69:d7:5c:ca:31:ab:5b:
         0b:2b:ff:09:09:67:3c:b7:6e:a0:3d:c8:a7:37:ea:6d:10:47:
         23:0c:1c:36:c6:94:66:40:cb:e4:a3:43:a6:71:3c:39:dd:f0:
         7b:d2:81:ae:30:cc:4f:f8:77:3a:c4:f8:04:eb:3c:69:d0:25:
         e7:60:7d:46:2e:41:8e:15:08:97:69:f3:14:6d:d9:dd:ab:5e:
         f1:78:b5:b8:32:0a:b1:2f:55:b1:e7:db:c5:37:53:a9:34:e0:
         e3:f7:be:9a:8d:be:11:21:b5:44:94:66:b7:e7:8c:46:68:7a:
         fc:a2:df:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----