Certificate

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/04803608395707A6C4A762643198A52C49DF6017.cer
File:                     04803608395707A6C4A762643198A52C49DF6017.cer (raw, json)
Hash identifier:          mVW3sD6A6fKotBoIf2SGToTnsa820cWIDu1NWjmdDwQ=
Subject key identifier:   04:80:36:08:39:57:07:A6:C4:A7:62:64:31:98:A5:2C:49:DF:60:17
Authority key identifier: E9:6D:85:99:6E:93:54:D1:00:5E:44:C7:81:D3:8A:DC:F1:08:28:73
Certificate issuer:       /CN=e96d85996e9354d1005e44c781d38adcf1082873
Certificate serial:       0BA656D8F1F5A4C63AB3743A32A207B89E0DDB4F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6W2FmW6TVNEAXkTHgdOK3PEIKHM.cer
Manifest:                 rsync://rsync.paas.rpki.ripe.net/repository/bc90f4f6-f2c4-4882-91cf-9b8f0b38d7da/2/04803608395707A6C4A762643198A52C49DF6017.mft
caRepository:             rsync://rsync.paas.rpki.ripe.net/repository/bc90f4f6-f2c4-4882-91cf-9b8f0b38d7da/2/
Notify URL:               https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before:   Fri 22 Sep 2023 18:59:23 +0000
Certificate not after:    Fri 20 Sep 2024 19:04:23 +0000
Subordinate resources:    IP: 2a11:29c0:9000::/36

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:a6:56:d8:f1:f5:a4:c6:3a:b3:74:3a:32:a2:07:b8:9e:0d:db:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e96d85996e9354d1005e44c781d38adcf1082873
        Validity
            Not Before: Sep 22 18:59:23 2023 GMT
            Not After : Sep 20 19:04:23 2024 GMT
        Subject: CN=04803608395707A6C4A762643198A52C49DF6017
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:6b:53:8e:07:f7:09:20:7b:29:62:d7:a7:97:
                    2d:a7:60:23:d0:84:de:8b:9f:17:6d:3e:74:80:e1:
                    2b:47:2a:cc:85:e3:35:bf:cd:ab:0d:e2:d2:73:34:
                    f0:81:92:f5:ad:5b:36:b5:63:97:ce:f1:8f:59:3e:
                    9d:9e:db:e3:01:ac:df:f5:45:55:ba:1a:db:e3:55:
                    8d:1a:b7:77:d4:f6:99:d5:06:2d:90:50:3f:7a:46:
                    38:09:0a:04:00:de:f6:67:fe:7f:11:76:bd:a6:32:
                    f7:e8:c3:67:13:5e:5f:59:e9:d1:f7:f6:8a:39:86:
                    8d:be:6a:2f:3b:32:df:5b:f7:1b:7c:1f:cb:58:d6:
                    bd:85:61:c4:79:07:3a:12:ca:20:ae:1d:36:e0:09:
                    6c:c2:2c:ce:c5:fd:4c:aa:a1:29:d0:3c:0e:8a:7e:
                    c0:49:9e:ae:28:d3:70:72:e7:69:f4:17:dd:23:19:
                    d5:7f:19:f6:7d:43:51:67:88:dc:4f:fe:8c:0c:bb:
                    e8:98:ae:7d:cb:53:92:af:26:8e:84:e5:20:1e:9a:
                    dc:25:c7:6d:c8:29:72:57:42:6f:d4:c2:4d:8d:f0:
                    7e:e6:ef:50:74:40:38:ce:46:c2:29:31:20:ec:90:
                    e5:ff:32:1e:93:ec:b2:fa:de:94:52:00:37:c1:ee:
                    d9:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                04:80:36:08:39:57:07:A6:C4:A7:62:64:31:98:A5:2C:49:DF:60:17
            X509v3 Authority Key Identifier:
                keyid:E9:6D:85:99:6E:93:54:D1:00:5E:44:C7:81:D3:8A:DC:F1:08:28:73

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/E96D85996E9354D1005E44C781D38ADCF1082873.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6W2FmW6TVNEAXkTHgdOK3PEIKHM.cer

            Subject Information Access:
                CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/bc90f4f6-f2c4-4882-91cf-9b8f0b38d7da/2/
                RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/bc90f4f6-f2c4-4882-91cf-9b8f0b38d7da/2/04803608395707A6C4A762643198A52C49DF6017.mft
                RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a11:29c0:9000::/36

    Signature Algorithm: sha256WithRSAEncryption
         4b:59:88:e4:74:20:c0:f2:dd:4e:33:c9:90:8d:df:b4:eb:59:
         4a:95:b6:23:2a:37:ff:d0:58:c3:a4:5b:7b:1a:ed:e1:8b:ef:
         03:22:49:ba:e4:72:db:8b:3f:eb:0b:bb:d8:d2:39:58:df:3a:
         9b:a3:17:22:bd:58:6c:a3:b7:95:39:fc:88:a0:b2:9b:dd:c0:
         3b:40:8f:6e:03:33:8b:e9:96:11:c0:b8:21:7d:77:cc:21:f4:
         49:e8:89:3b:a4:06:77:d3:30:10:38:7a:c1:97:29:16:90:8c:
         00:37:12:72:6a:e0:a0:b6:9b:ce:8a:8e:90:04:9f:e6:32:fa:
         c2:88:ba:15:75:1f:3a:16:03:37:53:3a:26:f2:09:3c:19:d3:
         f5:af:65:fb:e5:ae:14:ff:21:b7:3a:34:7a:32:92:f3:95:17:
         4c:43:46:2b:93:31:6d:f2:25:ab:5c:11:fb:b4:7a:c6:cd:4e:
         7f:80:16:aa:63:98:a1:3e:8c:db:40:24:c8:e4:c6:f8:34:a7:
         c8:c6:50:f0:55:f1:70:f1:07:77:90:81:3b:d2:5b:0e:d0:b4:
         a2:c3:30:ab:07:e3:fe:fc:ed:27:4a:fc:6e:b8:df:c2:59:7e:
         88:39:75:e1:76:42:4a:0d:a8:c0:17:fa:f8:74:4e:cd:6b:be:
         28:3e:d7:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----