Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/lyRVuw14H6sDfLSJ-JnUedKQkbU.cer
File:                     lyRVuw14H6sDfLSJ-JnUedKQkbU.cer (raw, json)
Hash identifier:          3NRs5tijIMvC8RQeZphOC3jwX/6BvFjfNqLjEAE55sQ=
Subject key identifier:   97:24:55:BB:0D:78:1F:AB:03:7C:B4:89:F8:99:D4:79:D2:90:91:B5
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018571D68F45B2B6C466ED594ADA800D16F5
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/83/3edaea-e5ce-4ccc-8d97-9342eb771b6b/1/lyRVuw14H6sDfLSJ-JnUedKQkbU.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/83/3edaea-e5ce-4ccc-8d97-9342eb771b6b/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 02 Jan 2023 09:36:04 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    AS: 57087

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:71:d6:8f:45:b2:b6:c4:66:ed:59:4a:da:80:0d:16:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 09:36:04 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=972455bb0d781fab037cb489f899d479d29091b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:40:94:5d:dd:d8:57:c3:de:e5:6d:9f:17:7b:
                    12:3c:6c:8e:87:61:1b:8e:70:fe:54:98:68:ab:ce:
                    8a:ec:d9:e9:92:99:e4:66:ec:b6:35:be:c2:03:8d:
                    77:57:23:47:6f:3a:8e:b9:13:40:a6:21:a8:b4:88:
                    3a:58:fc:ed:7c:5e:a8:a3:46:30:1e:3c:61:be:2b:
                    9c:8f:26:68:bc:d5:a5:33:7c:90:fc:aa:09:f9:fc:
                    3e:a8:ab:eb:bf:69:75:25:e9:b4:df:8b:f6:86:71:
                    9c:35:32:01:4e:a7:ab:91:63:d2:92:0b:30:dd:56:
                    0e:b7:ca:cb:40:35:86:d0:58:d2:a8:99:d0:87:93:
                    2f:8a:c2:d5:7a:aa:44:02:72:ed:98:c8:c5:22:42:
                    13:34:8f:64:b4:cb:53:15:69:9d:87:a7:5c:19:b7:
                    d1:8d:5d:7e:95:99:3f:d5:8c:be:18:54:8e:fd:5e:
                    36:8f:11:18:8b:4d:e4:26:eb:ce:49:49:86:60:d0:
                    7d:3a:a0:0e:7e:ba:d4:d1:b4:e3:5a:ae:32:31:c6:
                    d4:64:19:ef:34:e6:12:ec:1b:24:4f:b8:11:83:cc:
                    f3:c1:98:58:b3:a3:7c:c3:fc:c8:d5:32:fa:0a:8e:
                    fc:bd:eb:46:9d:99:6a:75:8f:70:de:93:6d:de:27:
                    22:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:24:55:BB:0D:78:1F:AB:03:7C:B4:89:F8:99:D4:79:D2:90:91:B5
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/3edaea-e5ce-4ccc-8d97-9342eb771b6b/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/3edaea-e5ce-4ccc-8d97-9342eb771b6b/1/lyRVuw14H6sDfLSJ-JnUedKQkbU.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  57087

    Signature Algorithm: sha256WithRSAEncryption
         99:56:33:67:39:44:24:68:41:cb:c2:5d:f0:09:cc:c4:98:48:
         ff:d7:9a:f3:a9:ab:ff:48:f2:6e:b1:f4:79:f8:a7:c8:e6:d2:
         46:b5:a0:a3:b3:22:74:09:5f:6d:b5:22:20:79:3d:69:bf:22:
         da:25:97:f6:32:08:24:1b:86:8a:63:ba:09:4d:3f:24:9e:0c:
         1b:24:1f:38:42:8f:70:f9:4d:66:45:ce:5b:56:54:12:a4:b4:
         bf:7a:b6:27:07:d6:fc:aa:9e:e8:04:d5:c9:84:d6:0c:c0:5b:
         6f:e9:dc:18:c6:6a:7f:4e:91:c9:3a:e6:f7:75:a4:6f:e5:10:
         91:33:2b:3e:4f:e5:d4:32:3f:0a:e3:fd:61:c0:52:72:1e:0d:
         da:52:06:4b:e9:44:79:63:a6:7a:47:19:85:2e:c1:41:72:f3:
         1f:39:b6:4d:3e:fc:24:ea:1f:e7:21:f7:a4:6f:91:56:4b:ed:
         5f:5c:e8:3b:37:bd:8e:01:30:d7:0e:2b:3d:7f:33:6c:d6:7e:
         9a:08:0f:ec:37:01:6a:ee:48:59:f5:38:c3:30:af:2e:ee:62:
         a7:7f:a8:63:a7:50:be:43:ed:88:7f:3c:9a:13:f1:21:2e:89:
         de:4e:2a:8c:f2:6a:75:a0:db:ce:ba:9f:9e:57:74:ea:e1:80:
         45:ba:a4:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----