Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/iBOcQ4AiRApQHgsJaHubN1ST5mM.cer
File:                     iBOcQ4AiRApQHgsJaHubN1ST5mM.cer (raw, json)
Hash identifier:          hRvSia8voEmLd82b8rFapoAYzw+ya1qy+F7E6PcqasY=
Subject key identifier:   88:13:9C:43:80:22:44:0A:50:1E:0B:09:68:7B:9B:37:54:93:E6:63
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018CD692D9970E8F0DB8A9BF502A808C415F
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rsync.paas.rpki.ripe.net/repository/055d7e77-7696-450c-95e5-be8cc30e40a7/0/88139C438022440A501E0B09687B9B375493E663.mft
caRepository:             rsync://rsync.paas.rpki.ripe.net/repository/055d7e77-7696-450c-95e5-be8cc30e40a7/0/
Notify URL:               https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before:   Thu 04 Jan 2024 22:23:17 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    AS: 203236

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:d6:92:d9:97:0e:8f:0d:b8:a9:bf:50:2a:80:8c:41:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  4 22:23:17 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=88139c438022440a501e0b09687b9b375493e663
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:95:aa:06:bf:fb:5a:9d:ee:00:25:3a:16:d0:
                    88:69:a7:63:3c:b8:3c:82:f7:86:a2:b8:14:b4:4b:
                    89:d4:56:93:bb:d4:ae:20:27:37:84:1b:08:83:83:
                    4e:bd:a9:d8:20:5b:30:ab:ce:e8:fd:da:0a:86:4a:
                    90:f0:91:da:53:5e:28:bc:95:67:a7:a4:c4:f0:de:
                    fd:02:c1:46:36:f3:1b:21:bd:82:2c:5e:77:9d:46:
                    12:07:6a:96:9f:fb:43:66:8a:bb:93:99:a7:9d:27:
                    1c:71:e0:4f:44:ad:95:75:73:b2:1e:8c:43:c5:14:
                    03:16:89:af:7b:94:72:20:67:81:34:2b:e3:59:37:
                    75:e9:2f:80:41:7f:c4:c6:6e:66:e8:87:d4:30:9e:
                    29:4f:48:b1:77:16:91:47:44:c4:57:1f:3d:99:e1:
                    64:d5:7b:c0:6c:09:11:f9:e9:d9:2a:cf:dc:b0:18:
                    60:38:c6:89:d1:96:62:f0:7b:48:62:e3:16:07:8f:
                    55:92:33:ad:a3:d4:63:f9:f7:42:e4:45:85:69:b9:
                    f7:92:49:a0:dd:76:b8:53:e4:9b:d7:3a:be:c4:fb:
                    10:47:ec:82:d1:ef:d6:cd:95:f4:45:bb:0b:6c:c1:
                    79:5a:62:e5:0a:db:45:2a:d3:5a:03:50:14:5c:17:
                    af:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:13:9C:43:80:22:44:0A:50:1E:0B:09:68:7B:9B:37:54:93:E6:63
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/055d7e77-7696-450c-95e5-be8cc30e40a7/0/
                RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/055d7e77-7696-450c-95e5-be8cc30e40a7/0/88139C438022440A501E0B09687B9B375493E663.mft
                RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  203236

    Signature Algorithm: sha256WithRSAEncryption
         70:5d:2b:57:b4:c8:3b:f0:d4:00:2f:64:e2:65:74:91:d7:49:
         56:1d:57:5e:ed:cd:b2:b2:93:7b:6d:f3:6f:b6:bd:0d:a9:8d:
         94:e6:91:05:a3:f9:cb:01:9e:88:ac:b6:ea:0d:7a:52:8b:21:
         2c:41:9d:65:6a:8a:7a:2e:a0:12:1e:8b:d4:b0:fd:a3:63:17:
         b7:60:90:c6:75:aa:53:ab:6f:0c:46:d8:e5:e3:81:73:01:ea:
         65:55:60:fe:f1:99:57:fc:2f:d7:8f:df:6c:b1:21:9d:cc:5c:
         3d:d4:7d:ce:37:38:80:fb:8a:e1:fe:ac:9b:ca:98:50:c1:f6:
         5f:dd:43:d8:e1:a6:3b:2c:a8:d7:87:0e:ba:c5:03:36:9d:cf:
         f5:21:1a:3f:1e:f9:31:54:ea:4c:12:b6:9d:6c:79:5b:6d:d9:
         07:df:2d:34:2d:29:0c:fe:eb:22:d4:9a:15:1c:71:45:bd:d4:
         37:5c:05:84:32:b6:8f:4e:39:1c:9f:bd:d7:b6:6f:df:91:03:
         60:80:e2:9c:d7:77:ca:b6:65:83:23:89:e9:ed:6e:ff:1b:b8:
         df:a0:0d:10:fb:39:f5:95:60:39:4a:67:81:e4:aa:d1:d2:1d:
         bd:9a:a2:6f:a5:97:cb:c0:f5:c1:2d:7b:f1:20:6f:39:66:97:
         7a:99:e0:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----