Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/oYvecRp9u5ybcmr-JQXyZnOxFNY.cer
File:                     oYvecRp9u5ybcmr-JQXyZnOxFNY.cer (raw, json)
Hash identifier:          RbxiPCITwmz2X8WzbjDDdhfsgXbgcQKSrR80ynsfwV4=
Subject key identifier:   A1:8B:DE:71:1A:7D:BB:9C:9B:72:6A:FE:25:05:F2:66:73:B1:14:D6
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018B3DD17043AAF35518E629DDAB42549CDD
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/5e/07f49a-3410-4930-895a-9da5f3d3963a/1/oYvecRp9u5ybcmr-JQXyZnOxFNY.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/5e/07f49a-3410-4930-895a-9da5f3d3963a/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Tue 17 Oct 2023 13:26:57 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    AS: 216147

Validation:               Failed, certificate revoked on Wed 25 Oct 2023 09:20:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:3d:d1:70:43:aa:f3:55:18:e6:29:dd:ab:42:54:9c:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Oct 17 13:26:57 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=a18bde711a7dbb9c9b726afe2505f26673b114d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:b9:4d:de:4b:44:e9:25:5b:a1:76:6b:ee:15:
                    1d:e0:b2:aa:44:76:d8:57:15:97:ad:8f:71:b0:7a:
                    e6:f9:59:b8:0c:c4:b7:1f:72:7b:d1:d4:6d:e3:02:
                    0e:dc:ec:0d:2e:e0:54:74:42:ae:28:e7:9a:44:86:
                    3e:d6:cd:e0:4e:27:cc:df:76:9f:69:d2:36:48:44:
                    2d:03:32:0f:9d:79:86:5d:0d:ed:42:15:6d:47:78:
                    e6:08:0e:e6:76:d6:60:f0:c3:52:15:b0:3e:6e:42:
                    e5:f5:57:c4:03:15:40:f8:cb:22:a1:4c:2f:51:ac:
                    ab:4d:56:80:74:80:69:7c:6d:4e:d6:cd:c2:a9:d2:
                    02:eb:19:70:36:4d:e2:3a:ae:1b:cc:2a:7d:21:f5:
                    56:e1:16:8a:40:da:65:03:88:90:ad:18:6c:90:43:
                    fc:31:f0:7b:8e:3a:54:2d:1f:b3:cb:f1:34:9d:6c:
                    23:b1:86:36:1a:32:90:15:78:10:2e:07:05:7a:39:
                    af:55:34:a8:ff:91:bf:bc:2b:8f:81:2d:b1:71:08:
                    91:f8:6e:6a:3c:7a:06:62:19:b9:c5:ee:d0:ae:45:
                    1f:f2:1f:dc:0c:5e:51:ff:00:23:1e:84:93:2e:63:
                    71:dd:3e:d6:fe:91:fb:a8:03:63:d4:ff:a3:73:45:
                    de:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:8B:DE:71:1A:7D:BB:9C:9B:72:6A:FE:25:05:F2:66:73:B1:14:D6
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/07f49a-3410-4930-895a-9da5f3d3963a/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/07f49a-3410-4930-895a-9da5f3d3963a/1/oYvecRp9u5ybcmr-JQXyZnOxFNY.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  216147

    Signature Algorithm: sha256WithRSAEncryption
         29:22:da:aa:02:31:e4:13:12:14:f7:5a:fa:a6:20:e6:c7:dc:
         95:29:68:dc:e7:93:9c:8b:eb:e5:ed:02:57:fb:bd:46:fd:08:
         8b:c6:f3:da:62:f1:c1:f8:d7:e8:a3:15:a4:39:aa:3d:fb:49:
         bf:73:97:fe:84:96:85:74:b0:ef:82:67:84:a9:2f:2f:19:e4:
         e9:a3:ec:66:f9:2b:80:0b:29:11:96:30:bb:74:ec:14:fe:05:
         7c:28:b1:3d:23:dd:6d:ce:ae:05:5e:7a:1e:a7:3a:25:8a:d4:
         56:0f:ac:a4:b1:b4:3d:29:43:00:f0:8f:3e:bb:96:41:dd:02:
         cc:7e:dd:af:be:87:56:5e:e9:b8:a4:af:61:bc:6a:43:30:5d:
         f1:75:67:db:12:2e:e2:e5:4b:a2:34:7a:e8:50:67:ca:9e:d2:
         cc:db:17:23:7a:06:64:9c:f4:56:56:05:3e:7f:b3:a3:91:4b:
         b9:2c:42:f5:d0:0b:15:33:0c:43:05:87:0f:e7:9e:1e:13:7e:
         67:57:65:31:3a:32:76:e1:69:fd:c6:27:c2:ce:5c:4f:da:0a:
         96:ed:66:63:b6:c2:ea:7c:52:15:e1:21:03:bc:f8:87:93:ad:
         d7:60:06:1d:4d:f2:2f:21:af:5b:d8:fd:08:1f:59:c8:14:1f:
         f0:dd:00:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----