Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/mI9dYHnAwUxaX_lCk1psc5aVatc.cer
File:                     mI9dYHnAwUxaX_lCk1psc5aVatc.cer (raw, json)
Hash identifier:          fvKMHCT+jc9PSYoDsM0sQW6RuO3/7KSgTqD+e/deJoA=
Subject key identifier:   98:8F:5D:60:79:C0:C1:4C:5A:5F:F9:42:93:5A:6C:73:96:95:6A:D7
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01882974835F6F02959CA59B3334CB666CF4
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/2a/d8c770-748d-443e-8faf-4e844dea8779/1/mI9dYHnAwUxaX_lCk1psc5aVatc.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/2a/d8c770-748d-443e-8faf-4e844dea8779/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 17 May 2023 11:24:41 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    AS: 61254
                          AS: 208673

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:29:74:83:5f:6f:02:95:9c:a5:9b:33:34:cb:66:6c:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: May 17 11:24:41 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=988f5d6079c0c14c5a5ff942935a6c7396956ad7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:48:e5:a7:60:42:73:a5:36:2d:54:00:c3:ca:
                    9f:bd:8c:71:78:0a:06:ea:c4:aa:bf:0a:05:d7:96:
                    84:5b:4c:12:90:e6:cc:8a:42:c4:7f:c3:15:7d:dd:
                    2c:0d:00:a5:b5:98:18:e4:2a:44:cb:df:c8:a1:f4:
                    9d:5e:b8:48:13:40:bc:37:2a:bb:09:c8:e5:d4:a3:
                    6f:bd:cf:84:d9:06:4d:9a:f1:23:c0:19:58:ce:d1:
                    a8:a3:35:65:59:11:bd:57:22:c5:e4:c7:5f:d2:9c:
                    06:c0:f6:13:9c:10:ef:61:4d:1c:4b:cc:61:7a:60:
                    56:70:31:2d:f1:d4:9f:e8:2e:f4:e9:79:16:4d:d7:
                    5b:10:6b:d2:fe:fd:67:3d:b3:e9:1d:b7:59:31:a6:
                    4b:5c:9c:b0:e7:9e:ad:c8:26:b3:9e:92:be:23:87:
                    62:94:69:8a:57:dd:d9:02:eb:f2:4d:41:a2:e8:db:
                    79:d9:01:9a:4c:95:c4:c6:81:2a:58:63:a3:d2:44:
                    31:bb:b0:54:aa:92:2a:91:42:aa:b7:ff:ef:67:92:
                    e5:f1:70:9c:a1:15:78:a2:fe:4d:a4:72:3a:c8:64:
                    87:4d:b5:19:fd:07:9e:08:8d:db:b4:c4:5c:fb:90:
                    e4:91:72:29:57:6a:ea:fd:58:71:5d:d0:ad:cd:c9:
                    33:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:8F:5D:60:79:C0:C1:4C:5A:5F:F9:42:93:5A:6C:73:96:95:6A:D7
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/d8c770-748d-443e-8faf-4e844dea8779/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/d8c770-748d-443e-8faf-4e844dea8779/1/mI9dYHnAwUxaX_lCk1psc5aVatc.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61254
                  208673

    Signature Algorithm: sha256WithRSAEncryption
         a0:db:87:fc:2d:5f:c4:d4:28:59:3b:2c:e2:26:de:04:e1:b7:
         90:d8:50:02:57:6f:65:74:80:eb:ae:1e:76:08:d2:5c:0a:7b:
         6c:be:e5:31:dc:28:ee:0f:c3:1d:1b:ae:90:5b:06:f7:fa:e3:
         b5:35:4c:81:08:de:7c:bf:ca:3b:ad:16:ba:94:74:d0:c4:ea:
         b8:7b:1f:b9:0f:4c:e6:18:d4:62:7a:1a:9b:51:7a:25:12:13:
         b4:2e:43:af:22:a0:ae:5d:79:0d:05:3a:9d:28:c1:22:bb:28:
         ff:49:13:ac:80:ef:62:ac:73:0c:19:f8:ca:c7:a2:92:d0:ae:
         2a:91:d3:de:29:15:ab:43:d7:79:78:09:11:53:fc:ab:fe:6e:
         a6:11:e8:08:55:66:9c:d5:32:a2:50:0c:53:a2:e6:92:fa:e9:
         66:d1:d0:9d:4c:83:7e:9b:bb:82:4e:c4:78:6d:ec:d4:c6:e7:
         f6:56:01:aa:3b:08:d9:a1:89:83:48:ab:73:fc:b0:05:6a:ef:
         80:1c:29:08:1e:0b:5c:84:99:19:89:13:6f:e9:5d:dc:a1:a2:
         68:fc:82:ff:d7:dc:5c:cd:04:d8:81:3c:8c:c7:36:64:10:63:
         31:68:01:eb:ac:6b:22:e4:c8:f6:9d:75:d4:e2:01:66:14:c5:
         a9:92:05:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----