Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/KeaGPzy4OpIm7qPU6lVYPke1B5g.cer
File:                     KeaGPzy4OpIm7qPU6lVYPke1B5g.cer (raw, json)
Hash identifier:          isuKESs6Y1REdVJPfLUl2p0F5dJ4VhbD0hcbXIcJf1Y=
Subject key identifier:   29:E6:86:3F:3C:B8:3A:92:26:EE:A3:D4:EA:55:58:3E:47:B5:07:98
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856C3F63825A9835F263E6A97538D3811D
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/89/4d1e09-2d3b-455d-97e6-ef6926fcabd1/1/KeaGPzy4OpIm7qPU6lVYPke1B5g.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/89/4d1e09-2d3b-455d-97e6-ef6926fcabd1/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 07:32:51 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    AS: 206434

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6c:3f:63:82:5a:98:35:f2:63:e6:a9:75:38:d3:81:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 07:32:51 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=29e6863f3cb83a9226eea3d4ea55583e47b50798
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:00:a9:44:d5:26:ec:af:f7:55:16:d4:f1:cb:
                    28:ad:01:45:50:89:45:e7:72:b5:e5:b3:e6:e1:3b:
                    5b:92:1a:d6:ce:6e:df:41:66:2f:82:4a:99:c2:7c:
                    3a:1d:0d:ae:42:d0:c4:40:c3:62:fe:b9:9c:90:ff:
                    dc:bb:15:92:e5:d3:af:84:47:a7:88:98:d7:94:5b:
                    79:13:31:eb:be:cb:af:87:49:bd:a1:48:48:b8:bc:
                    a5:7d:d4:22:b0:90:39:51:d4:ea:12:b2:c7:ba:22:
                    58:ba:ae:80:2d:8b:07:b9:71:1e:5f:f9:04:a3:6e:
                    7c:2d:e3:d2:f4:98:01:9d:3e:d6:c7:bf:42:1c:5e:
                    e8:32:11:d3:e7:b4:b9:2f:54:e4:6d:9d:60:a4:90:
                    62:d1:d3:6d:6b:68:ff:d4:85:f0:7e:bf:ea:03:e8:
                    5b:10:13:53:05:6a:10:8f:06:9d:a6:53:5a:cd:d2:
                    3f:b0:2d:7f:f7:db:7a:2f:69:5d:19:8b:ad:f8:db:
                    9f:b0:f6:5c:40:ed:4c:bc:69:07:4e:05:08:bf:5f:
                    e0:26:56:73:88:51:70:49:db:1c:44:f9:66:fa:ce:
                    56:19:0d:a8:58:09:8f:9c:33:bf:bb:8e:d8:67:19:
                    5f:80:38:cd:d5:1c:c5:43:15:b1:54:9b:5b:79:ca:
                    a6:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:E6:86:3F:3C:B8:3A:92:26:EE:A3:D4:EA:55:58:3E:47:B5:07:98
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/4d1e09-2d3b-455d-97e6-ef6926fcabd1/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/4d1e09-2d3b-455d-97e6-ef6926fcabd1/1/KeaGPzy4OpIm7qPU6lVYPke1B5g.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  206434

    Signature Algorithm: sha256WithRSAEncryption
         1d:f4:57:4a:49:63:42:c9:52:93:bb:bd:64:2f:34:42:00:d5:
         ee:7c:dd:2d:a0:8d:60:1a:18:74:50:89:a5:95:82:15:8f:a6:
         74:cc:b2:c2:2c:f8:11:6d:4e:b3:d9:dc:55:10:39:b4:65:2a:
         3e:0a:dd:a3:e3:b4:75:da:c2:1d:c5:7a:c9:de:b3:23:0d:39:
         0b:33:f4:70:04:f8:bf:c5:0c:3f:47:2f:a2:c9:a6:f0:9f:40:
         78:72:0a:63:ca:82:85:ce:9a:1b:10:f6:3c:ec:2e:40:00:c9:
         27:e9:c4:9b:ca:47:e8:0d:fe:43:0a:1a:42:e4:dd:df:3b:fe:
         61:4d:ec:a1:ed:6b:a4:e4:1d:f9:84:64:25:d5:c6:af:6d:51:
         2e:9b:f3:1c:ab:23:70:a9:ca:fa:13:d4:e5:7d:4e:1a:32:d0:
         1c:36:fe:65:66:a8:91:b2:d1:b5:96:e2:31:0f:e0:3a:43:6d:
         d3:53:2f:ec:47:d6:c3:6a:52:be:99:94:e9:8d:85:f1:f3:dc:
         03:09:2a:25:85:01:ef:0f:ed:71:e0:9c:93:b3:4c:19:fe:78:
         97:61:62:43:a4:49:75:5b:76:f3:84:23:e9:0d:42:d5:69:cf:
         df:66:6f:c8:89:24:7e:10:6d:94:5c:fb:ec:3c:c1:09:ec:4b:
         a2:c1:d6:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----