Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/oVg32zVpA0cqiu3dbeZQ7UptsgY.cer
File:                     oVg32zVpA0cqiu3dbeZQ7UptsgY.cer (raw, json)
Hash identifier:          gBJN2my8p6iikzsdr9UeyfPmtX3Sk0v3eA37QAT4D/s=
Subject key identifier:   A1:58:37:DB:35:69:03:47:2A:8A:ED:DD:6D:E6:50:ED:4A:6D:B2:06
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018CC5DD13E342E56F97464ED52255DE573E
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/94/860b23-92d2-41b1-9889-18dc1ae0dae4/1/oVg32zVpA0cqiu3dbeZQ7UptsgY.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/94/860b23-92d2-41b1-9889-18dc1ae0dae4/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 16:30:49 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    AS: 203271

Validation:               Failed, certificate revoked on Wed 03 Jan 2024 08:02:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c5:dd:13:e3:42:e5:6f:97:46:4e:d5:22:55:de:57:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 16:30:49 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=a15837db356903472a8aeddd6de650ed4a6db206
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:27:90:dc:39:af:59:65:e3:d4:7a:7a:b6:c1:
                    8c:e6:e3:ea:b6:12:bc:0b:a4:14:17:ab:ef:74:62:
                    a9:ad:50:f8:ee:63:80:95:e7:65:07:da:fd:30:52:
                    85:33:a5:ec:cd:08:82:98:ff:9b:5a:d1:bc:10:a6:
                    cb:20:bb:22:82:87:a8:74:c8:9e:5f:da:13:7b:e3:
                    37:74:4e:ee:e9:29:69:46:72:74:86:57:7d:19:78:
                    58:40:12:2a:3d:80:8d:cc:f0:a5:58:9e:4d:5c:a5:
                    36:1f:5c:a9:74:24:cf:39:29:d7:7e:56:f7:00:08:
                    57:2c:de:2d:d3:3b:7c:77:c5:cf:26:39:05:5b:56:
                    b3:fe:cd:8e:f4:ab:f0:47:a1:ab:a6:df:b3:37:fc:
                    f0:f1:6e:57:f5:26:14:93:41:34:71:3e:b9:35:9c:
                    cd:ed:1c:d4:12:db:57:4f:2c:27:be:1f:92:ce:63:
                    e1:75:cc:29:26:c2:0b:ed:88:19:fb:8d:5e:2d:47:
                    b5:58:60:ba:29:b0:93:ad:4b:3a:19:ab:76:f8:92:
                    31:63:e7:9e:e8:c8:85:a4:c0:78:04:86:fa:f5:42:
                    54:10:40:d9:23:e3:c9:a2:bc:43:42:c7:f5:e2:8d:
                    06:aa:ed:dd:95:e4:df:93:2c:0a:2f:ac:68:c9:89:
                    b5:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:58:37:DB:35:69:03:47:2A:8A:ED:DD:6D:E6:50:ED:4A:6D:B2:06
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/860b23-92d2-41b1-9889-18dc1ae0dae4/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/860b23-92d2-41b1-9889-18dc1ae0dae4/1/oVg32zVpA0cqiu3dbeZQ7UptsgY.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  203271

    Signature Algorithm: sha256WithRSAEncryption
         9e:5c:75:08:c7:10:bc:ad:7d:cd:91:d7:2a:0b:29:f9:72:f3:
         00:48:b2:47:9a:e2:8e:f9:0b:ac:62:c4:c1:f4:38:b4:9f:ec:
         e5:02:6d:64:b0:bd:aa:a1:7b:70:4a:69:2a:c6:83:14:34:c7:
         18:5e:30:8c:5d:0b:9e:de:89:93:7c:20:f0:78:18:10:e1:80:
         40:b2:87:c3:6c:e6:1f:b7:f8:9d:e9:d6:40:d9:27:1e:8a:0b:
         92:a3:35:04:74:35:ee:e8:10:ff:89:d5:bc:fb:8b:87:c3:f4:
         e5:56:b8:47:b1:c0:7f:ee:c7:fc:81:b9:fd:9b:a2:4c:80:a7:
         21:97:94:d7:27:76:c0:41:95:25:9d:68:af:18:c2:c0:b1:fd:
         60:b6:76:92:d6:3a:1b:2a:6d:3a:6f:bd:d8:9a:dc:21:73:46:
         91:8a:37:73:c2:aa:82:eb:1a:ab:b7:db:13:52:eb:b2:b6:a3:
         a3:1b:e7:00:2e:3c:8c:5c:52:c1:04:08:2d:6f:41:e0:a1:1a:
         4f:87:2b:c3:14:ad:d7:13:25:9d:ae:4b:6a:a9:7d:7c:67:e9:
         e5:fc:c5:70:7e:bb:95:be:33:8f:d3:74:fc:e1:77:8c:c8:04:
         f9:62:88:0c:ba:0a:2e:5b:5b:32:e5:6c:c4:5f:d8:d1:ae:0e:
         b7:dc:08:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----