Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/j5GhXsjoOPacjw1kHRxUo1wt7cM.cer
File:                     j5GhXsjoOPacjw1kHRxUo1wt7cM.cer (raw, json)
Hash identifier:          iD/w/r7jsQmabg6vZWBE2OARLDAibQ7UCjeXvgdGgcQ=
Subject key identifier:   8F:91:A1:5E:C8:E8:38:F6:9C:8F:0D:64:1D:1C:54:A3:5C:2D:ED:C3
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018719DBCADDB4A3548B5C9B446FC551EB3B
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/ce/685f02-1d15-488d-9936-62b0b1af42a8/1/j5GhXsjoOPacjw1kHRxUo1wt7cM.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/ce/685f02-1d15-488d-9936-62b0b1af42a8/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sat 25 Mar 2023 17:40:47 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    AS: 199310

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:19:db:ca:dd:b4:a3:54:8b:5c:9b:44:6f:c5:51:eb:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Mar 25 17:40:47 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=8f91a15ec8e838f69c8f0d641d1c54a35c2dedc3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:c5:56:05:e9:3f:fd:d1:9f:ae:5c:5f:10:26:
                    46:1c:bf:46:7a:97:ed:fd:37:61:32:6c:1d:4f:96:
                    bd:48:d7:29:72:ca:64:21:e6:72:a1:81:a3:94:0c:
                    47:ed:ee:97:dc:ad:7c:b6:0b:56:5c:f6:b4:ef:fa:
                    3c:c1:be:90:ee:d3:24:5d:78:14:59:b0:68:8a:32:
                    8c:af:0e:06:a7:05:b2:ee:8a:93:0c:8c:e3:ab:85:
                    ce:a2:e8:1a:85:da:b0:67:d3:9a:c1:e1:c3:fb:ab:
                    fc:bb:18:05:e0:b7:cc:34:8f:49:ee:46:f7:87:34:
                    4e:8c:36:34:a6:95:b7:46:1f:6c:87:d6:c5:bc:82:
                    e7:2f:3a:0b:36:10:cb:7e:a9:7a:26:59:9a:45:14:
                    0d:f8:5d:44:18:57:dd:99:c7:26:89:5d:88:fa:90:
                    f5:bd:b9:37:9c:7a:4a:92:24:85:93:ee:29:6c:99:
                    b2:d2:4d:24:84:36:70:30:c9:ed:0d:ff:28:26:f4:
                    e8:dc:b0:fd:51:59:70:4e:f7:03:ba:8d:ad:a6:7f:
                    fb:87:b7:10:1e:9d:80:44:1a:f4:78:16:a7:05:2a:
                    a7:a8:6f:7b:4c:8e:d2:d8:e1:67:bd:29:2f:d1:1e:
                    c4:79:8c:a9:fd:7b:7a:0a:25:72:b3:3a:83:4e:ac:
                    97:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:91:A1:5E:C8:E8:38:F6:9C:8F:0D:64:1D:1C:54:A3:5C:2D:ED:C3
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/685f02-1d15-488d-9936-62b0b1af42a8/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/685f02-1d15-488d-9936-62b0b1af42a8/1/j5GhXsjoOPacjw1kHRxUo1wt7cM.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  199310

    Signature Algorithm: sha256WithRSAEncryption
         1a:fe:24:64:a9:6b:1e:42:4b:17:5b:93:10:b4:73:d0:67:3a:
         03:92:55:6d:7c:fe:d5:04:6b:25:7d:32:f6:2e:3f:e8:dd:ff:
         f5:de:d9:d8:57:61:b2:76:88:5d:7e:c9:da:68:67:ab:1a:a1:
         0b:92:5c:05:60:19:cb:f3:87:30:98:d8:c8:7a:95:94:f1:f1:
         b4:74:bb:1c:d4:f8:06:5d:8b:bf:89:bb:0e:9f:17:eb:92:8b:
         ec:cd:db:9b:6a:b8:53:24:6c:ce:04:d1:61:99:ae:e6:e1:25:
         73:64:b6:47:c3:58:3e:ac:70:ed:d1:38:cd:82:29:c7:e5:09:
         dd:4c:cc:18:b5:f4:51:04:fc:8f:83:ef:38:37:80:e9:62:34:
         8f:5a:07:ed:d3:d3:5b:fa:98:5b:fa:1d:e1:96:d4:29:42:cc:
         40:11:f6:46:b9:54:6d:8e:73:ca:3a:22:34:9a:c4:4c:93:e6:
         41:9f:2c:d1:ee:ea:0a:4c:f6:4c:db:b7:ed:a1:89:41:31:8e:
         b9:b7:93:c7:d7:0e:e9:50:90:b9:4f:69:0d:3c:1d:8e:d8:02:
         d5:c0:b2:a3:31:99:f9:90:e2:76:d8:f7:57:58:b4:d9:40:96:
         62:b3:5e:97:ea:fb:86:87:8f:8c:82:e9:4a:b4:ce:6a:3e:f3:
         e9:75:22:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----