Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/oCDNh5zUBIBZk1Zr393SdWiOzGU.cer
File:                     oCDNh5zUBIBZk1Zr393SdWiOzGU.cer (raw, json)
Hash identifier:          VdsUxfyD8Cw42RD5rbWsBBfJP3tjVLZCgmbxsdG7h0k=
Subject key identifier:   A0:20:CD:87:9C:D4:04:80:59:93:56:6B:DF:DD:D2:75:68:8E:CC:65
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856AF53602879DF95F8D492A7DABCCA8C2
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/90/47f8cb-e1df-4494-849e-5c41a09d1951/1/oCDNh5zUBIBZk1Zr393SdWiOzGU.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/90/47f8cb-e1df-4494-849e-5c41a09d1951/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 01:32:13 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    AS: 39710

Validation:               Failed, certificate revoked on Mon 13 Feb 2023 11:03:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6a:f5:36:02:87:9d:f9:5f:8d:49:2a:7d:ab:cc:a8:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 01:32:13 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=a020cd879cd404805993566bdfddd275688ecc65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:5b:b8:58:39:2c:65:6e:3f:ac:ab:04:ed:07:
                    f5:76:2d:8b:d0:aa:8f:d9:1b:f4:58:07:f6:85:1b:
                    09:28:73:fb:56:50:eb:b8:97:ce:6b:09:ef:ea:7c:
                    9c:54:41:2c:33:19:a8:1a:9f:53:46:5b:9f:c2:eb:
                    f5:44:95:70:77:0c:b3:3b:29:24:1a:db:ad:a8:c8:
                    35:75:e7:01:54:12:60:7f:ca:a7:76:cb:8e:ec:1a:
                    00:d7:a0:21:80:16:ef:cd:5a:12:1d:59:9e:5e:af:
                    80:63:19:98:58:1a:25:b1:f3:98:93:e3:92:11:29:
                    2a:46:78:cc:31:4d:9e:5e:13:de:92:97:5a:22:01:
                    2b:4c:e7:0e:55:17:cb:d9:af:ef:6a:44:c5:e1:e0:
                    d6:ad:cb:00:8f:88:07:fd:17:c2:d0:7f:a4:d1:cb:
                    1f:bf:42:3a:f9:b6:bb:46:49:94:28:3b:70:fd:a8:
                    e4:ff:aa:47:f6:7a:70:4e:83:69:10:f3:14:b2:d5:
                    c0:17:61:cf:36:72:3c:f5:d4:60:8f:83:2e:47:bd:
                    f0:08:00:ba:27:03:1e:81:99:78:2b:e3:ec:1d:dc:
                    ec:8d:e4:cb:e9:7e:c2:bb:59:58:a4:d2:d6:a5:30:
                    d4:f4:88:5e:bf:3d:a8:d9:ea:65:63:2c:5f:49:46:
                    0b:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:20:CD:87:9C:D4:04:80:59:93:56:6B:DF:DD:D2:75:68:8E:CC:65
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/47f8cb-e1df-4494-849e-5c41a09d1951/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/47f8cb-e1df-4494-849e-5c41a09d1951/1/oCDNh5zUBIBZk1Zr393SdWiOzGU.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  39710

    Signature Algorithm: sha256WithRSAEncryption
         3f:d6:26:95:fb:da:36:1c:e7:ef:46:24:3c:0b:f8:ca:a9:0c:
         d4:94:e9:9b:cf:38:49:bc:e0:aa:b4:dc:36:e2:56:b2:3c:21:
         e2:9a:c3:1e:31:50:80:2d:57:75:b2:37:7a:78:58:c7:f2:0e:
         d3:a5:68:e1:87:ed:d9:7f:f1:9d:0b:27:f8:5f:5a:10:0a:22:
         dc:ec:26:35:36:3b:ba:3c:cb:a7:01:e7:ba:9d:32:df:58:c9:
         a3:0c:90:88:7a:ba:53:c2:05:45:4d:11:b1:ea:8f:ff:26:fb:
         eb:2c:07:27:19:37:78:d8:89:f6:14:24:69:b6:63:4e:57:fa:
         14:ce:12:33:d0:7a:41:26:57:0c:fc:8e:ff:0f:a8:70:d6:2e:
         fe:1f:f6:2b:3b:e7:06:1c:ec:3e:73:9c:7d:f4:4b:76:f1:1c:
         7f:b8:1b:6e:00:6d:c9:c5:87:3a:2c:7a:f0:40:8e:ea:fb:dd:
         a4:1a:b6:49:a1:a4:2b:e6:96:37:e0:e7:e8:9a:62:eb:e3:f5:
         92:62:f9:9a:c4:7a:ba:f6:66:8e:ca:bd:bf:f4:d9:78:be:ea:
         50:0b:ca:67:1a:3d:9c:00:8a:6a:9a:3a:5b:f7:1e:8a:30:65:
         c8:ac:c9:37:e2:b8:55:7e:6a:f5:e4:73:cc:1c:42:55:85:91:
         09:07:7e:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----