Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/tzbOIPenxVstS-bKSvzDPKi79BQ.cer
File:                     tzbOIPenxVstS-bKSvzDPKi79BQ.cer (raw, json)
Hash identifier:          YEM8JkeI3oCMSXdjBW3PA5qY1VJDQNR0qrvNOfpocRk=
Subject key identifier:   B7:36:CE:20:F7:A7:C5:5B:2D:4B:E6:CA:4A:FC:C3:3C:A8:BB:F4:14
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018897C997C616D47FAB5A6B19FBE682327E
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/00/d1ec71-997d-4212-8058-133a9df16aeb/1/tzbOIPenxVstS-bKSvzDPKi79BQ.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/00/d1ec71-997d-4212-8058-133a9df16aeb/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 07 Jun 2023 21:35:51 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    AS: 213216

Validation:               Failed, certificate revoked on Mon 12 Jun 2023 13:06:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:97:c9:97:c6:16:d4:7f:ab:5a:6b:19:fb:e6:82:32:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jun  7 21:35:51 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=b736ce20f7a7c55b2d4be6ca4afcc33ca8bbf414
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:a0:d8:70:14:e0:7f:92:c4:bd:d3:3f:1f:d3:
                    75:32:f0:81:51:aa:bc:66:69:16:3d:12:67:b6:28:
                    3d:c4:f1:d7:06:51:2a:50:a2:f9:aa:ca:de:7e:f7:
                    74:d5:54:a5:a4:98:72:b4:bd:11:13:f4:76:ca:2a:
                    37:b8:cb:08:e2:99:4f:d6:25:8d:41:3c:b7:da:48:
                    54:c4:dc:b9:fa:51:34:8b:1c:c9:ef:30:2b:52:11:
                    34:b3:4d:19:f1:f1:d3:96:b3:d0:02:d9:12:98:20:
                    a5:97:86:6b:c7:f1:72:05:0f:92:6d:26:ec:d2:63:
                    2f:48:28:95:e7:66:16:78:60:8f:dc:66:74:ba:75:
                    77:f9:ec:7b:a7:ed:c6:84:ba:2f:81:1d:03:0a:eb:
                    66:c1:30:76:1c:f2:46:54:82:c9:4a:1e:68:51:3c:
                    7f:2c:95:2d:29:a2:99:56:7c:cf:5d:ea:5a:c7:9d:
                    c1:fa:74:ab:30:c3:33:12:0d:c6:6e:9e:e7:42:bc:
                    4b:ac:bd:81:d0:3f:52:19:ef:5a:2e:73:82:0c:03:
                    c1:94:14:9c:63:72:e0:62:ea:c2:3f:e5:91:c5:6a:
                    19:44:59:1d:34:76:f9:e8:6e:74:13:0c:74:e6:11:
                    1b:54:19:a9:ec:bf:1e:04:da:b0:69:82:5e:37:9c:
                    b7:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:36:CE:20:F7:A7:C5:5B:2D:4B:E6:CA:4A:FC:C3:3C:A8:BB:F4:14
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/d1ec71-997d-4212-8058-133a9df16aeb/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/d1ec71-997d-4212-8058-133a9df16aeb/1/tzbOIPenxVstS-bKSvzDPKi79BQ.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  213216

    Signature Algorithm: sha256WithRSAEncryption
         0e:ed:3a:2a:2c:bf:04:f0:26:b0:0e:e7:a5:6d:72:d5:77:92:
         79:d2:06:19:40:42:f9:f7:24:75:00:d4:67:4c:e8:20:22:28:
         df:1d:cb:65:e6:06:56:a9:96:e9:4c:34:01:95:62:7f:51:8d:
         fb:97:40:72:ee:4d:3c:dd:cb:04:72:8c:20:f2:5f:35:20:bd:
         3e:e1:b6:52:4d:4e:00:ce:06:26:55:80:21:86:47:e2:5c:e3:
         a4:aa:f0:d0:44:c7:03:d0:12:f5:b0:fe:df:56:d4:90:0d:c8:
         8a:83:3c:d2:13:79:da:fc:fc:a8:d6:79:2e:bd:7c:a0:76:ea:
         81:64:63:a2:c6:80:cc:00:e7:72:58:ea:f8:7d:94:94:26:c5:
         63:63:5c:27:a3:54:48:75:e8:32:c0:0e:5f:b5:c2:88:d6:aa:
         00:68:25:e7:31:69:26:89:93:1b:e1:ef:b3:03:a3:ee:4f:01:
         70:1a:6f:46:66:cf:f5:e2:56:84:9f:dc:fb:9a:05:f2:55:48:
         3c:36:81:d8:e7:93:a1:02:39:66:b8:17:78:59:9c:dc:ed:c6:
         16:a0:9f:a8:b5:3b:97:87:e7:71:74:f4:6e:de:ff:7e:47:d4:
         08:9f:2a:64:9e:94:10:16:85:8b:ce:2f:15:fb:6d:6b:4e:0e:
         3e:d0:28:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----