Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/rm8TbfPo_GU4paDP6Dj-dkpBY0Q.cer
File:                     rm8TbfPo_GU4paDP6Dj-dkpBY0Q.cer (raw, json)
Hash identifier:          YCfOYyZ9nkRS4J5bWeuaDufq9zc6JZr1WUmFB870Cgc=
Subject key identifier:   AE:6F:13:6D:F3:E8:FC:65:38:A5:A0:CF:E8:38:FE:76:4A:41:63:44
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018CC348C35D9C0B8433B8B4D7BFF1C3E189
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/fb/540685-0af1-4edd-9221-1dd7b6da85e8/1/rm8TbfPo_GU4paDP6Dj-dkpBY0Q.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/fb/540685-0af1-4edd-9221-1dd7b6da85e8/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 04:29:34 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    AS: 211038

Validation:               Failed, certificate revoked on Tue 02 Jan 2024 10:47:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c3:48:c3:5d:9c:0b:84:33:b8:b4:d7:bf:f1:c3:e1:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 04:29:34 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=ae6f136df3e8fc6538a5a0cfe838fe764a416344
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:4a:ed:5b:23:a1:a3:6f:5f:c7:f7:9a:03:e1:
                    b2:72:94:0e:e5:c2:75:d1:e7:9e:54:81:a7:a3:d3:
                    c6:e2:f7:4d:f8:7a:08:c5:60:7d:c5:6b:4a:f2:5c:
                    a1:52:c7:96:f8:e2:28:23:eb:13:c2:a0:23:60:e8:
                    b4:96:e4:a7:b5:d9:25:08:12:d0:32:40:65:44:15:
                    85:76:a3:18:b9:14:35:51:61:41:e8:e9:88:b2:e7:
                    02:d9:b5:d6:db:bc:6f:7f:78:43:5b:76:71:be:6f:
                    de:5a:0f:0d:a3:61:17:fe:84:0f:e4:18:86:d4:f1:
                    db:71:ab:34:f6:df:f6:17:2b:b3:ea:ce:35:4d:c5:
                    fe:27:97:fe:9e:f5:ee:ec:f7:63:00:06:d0:e2:67:
                    3f:61:40:96:6b:20:eb:b0:a9:ac:e3:79:53:33:6f:
                    45:cc:03:19:51:7a:2c:06:89:7f:c6:17:2b:3c:63:
                    82:3b:04:6f:e3:a8:e0:1c:c0:9f:50:60:59:6a:17:
                    da:24:9a:9c:49:9c:65:5d:a5:2b:57:a4:e9:17:2f:
                    c0:df:c2:ff:80:8d:c7:d8:3b:c7:89:9c:bc:b6:df:
                    cc:7a:f2:0d:47:91:76:d6:10:04:c6:e2:86:14:a6:
                    c1:8f:ce:3d:57:d6:e1:b6:0c:69:c9:46:61:40:45:
                    e2:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:6F:13:6D:F3:E8:FC:65:38:A5:A0:CF:E8:38:FE:76:4A:41:63:44
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/540685-0af1-4edd-9221-1dd7b6da85e8/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/540685-0af1-4edd-9221-1dd7b6da85e8/1/rm8TbfPo_GU4paDP6Dj-dkpBY0Q.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  211038

    Signature Algorithm: sha256WithRSAEncryption
         ab:ea:70:ec:7b:4f:36:e1:cf:8f:3b:e5:6f:43:e5:54:cb:c8:
         6a:b8:2d:63:2a:a6:b8:93:cb:77:86:82:00:e4:a3:06:5b:96:
         b3:c9:6a:7a:07:96:33:c2:93:08:f3:c1:8d:8c:d0:62:1a:3a:
         67:e6:1a:9a:d4:7c:40:d5:62:3a:b1:15:4e:12:18:9d:79:b4:
         9d:30:cd:47:71:c1:b5:f4:20:3d:b1:fa:e9:2e:9a:b1:02:a4:
         01:4e:ef:0c:0e:c1:cc:70:99:50:87:e9:7c:f1:df:20:08:b7:
         c1:e8:ac:1e:ff:8a:1f:49:fa:45:98:0c:e9:f5:f0:2c:9a:b8:
         66:6a:c5:51:f4:32:27:6f:84:f5:89:3a:21:a0:aa:b5:66:53:
         39:7d:d8:c5:3a:16:89:00:a2:73:72:fc:e8:a7:84:0a:fe:96:
         82:a7:08:c8:bc:3d:77:6b:8e:02:3d:05:3b:29:a5:8b:ef:f3:
         bf:98:cd:be:9a:96:76:0a:75:fd:0b:35:c1:0e:08:98:72:c8:
         a4:ce:c0:7d:97:fc:74:84:da:e1:d8:f0:aa:83:0b:e8:7a:d2:
         9b:2a:e1:ef:f8:d6:7e:27:ae:f8:8e:ba:29:f6:da:45:e6:98:
         4b:8d:5d:b2:e4:8c:c0:51:03:2f:e9:8b:23:09:49:39:78:79:
         ae:08:6b:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----