Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/xnB39MTLLk2vDafpnvb2hlYwCSE.cer
File:                     xnB39MTLLk2vDafpnvb2hlYwCSE.cer (raw, json)
Hash identifier:          k62bw/9Mmd2Edt5osBdRzY+OuXP87GED5+aJ8lpGzGI=
Subject key identifier:   C6:70:77:F4:C4:CB:2E:4D:AF:0D:A7:E9:9E:F6:F6:86:56:30:09:21
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856FB0947A7929D4F9CAB19517CAA6A604
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/30/d23fb2-5039-4ac9-9208-ef362ad932a8/1/xnB39MTLLk2vDafpnvb2hlYwCSE.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/30/d23fb2-5039-4ac9-9208-ef362ad932a8/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 23:35:21 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    AS: 197015

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:b0:94:7a:79:29:d4:f9:ca:b1:95:17:ca:a6:a6:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 23:35:21 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=c67077f4c4cb2e4daf0da7e99ef6f68656300921
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:ff:9b:80:4e:ad:c2:27:55:59:bb:4a:08:63:
                    d8:d3:a6:32:8a:d1:3d:1a:5d:95:cd:3b:de:b2:2e:
                    9b:ed:4d:80:bd:9a:72:3c:3e:c0:c4:cb:ec:27:94:
                    ff:58:86:b0:fc:ab:b7:18:50:2a:9b:3d:82:ad:63:
                    f6:8b:96:c0:83:a3:56:c0:3d:d3:7a:55:1b:7b:2b:
                    dc:cf:c4:88:25:19:ed:3e:f2:bd:4b:4b:79:5c:0b:
                    7f:45:f7:3d:67:17:9a:68:8a:3e:c8:ac:10:0f:e7:
                    6d:1b:d1:b8:05:e3:88:c4:7d:7e:37:a8:03:04:29:
                    bc:6c:e0:fa:1d:29:92:19:d7:7a:f0:52:50:21:77:
                    23:00:68:64:83:95:12:fe:89:8e:7f:bb:6e:a6:97:
                    bf:22:82:4e:8e:35:b4:32:2e:bd:bc:ae:af:bc:b0:
                    b6:40:cd:b0:2f:98:06:f4:52:c9:64:26:8f:b6:ee:
                    91:61:0a:55:84:5f:78:fd:b7:3a:0e:ca:ff:95:20:
                    75:8d:5a:2f:d8:67:75:9e:f9:d0:d0:60:d1:fc:6a:
                    52:9f:9e:df:40:f8:3c:d8:0c:a0:7a:06:c8:d0:c8:
                    9b:c5:7c:9a:a1:cb:f2:12:b7:33:ed:ff:1e:a7:3c:
                    7a:44:f8:03:58:15:c1:a5:ab:6d:1b:9f:f8:11:c3:
                    18:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:70:77:F4:C4:CB:2E:4D:AF:0D:A7:E9:9E:F6:F6:86:56:30:09:21
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/d23fb2-5039-4ac9-9208-ef362ad932a8/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/d23fb2-5039-4ac9-9208-ef362ad932a8/1/xnB39MTLLk2vDafpnvb2hlYwCSE.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  197015

    Signature Algorithm: sha256WithRSAEncryption
         39:c9:1a:6c:be:e5:ae:48:4d:c2:0b:62:a6:38:0e:f4:25:17:
         af:91:41:35:07:d6:8e:d4:72:64:b3:2e:50:18:eb:25:01:42:
         9c:70:8c:54:66:ed:4f:e5:3e:8c:d0:56:47:fb:76:d9:8a:ae:
         7c:98:b0:54:9d:56:b4:fc:b4:b1:2b:ea:16:42:c4:c1:d9:8c:
         e2:0d:b7:8b:d1:de:0e:86:23:91:0b:a3:c3:10:3f:0c:af:ea:
         18:b5:fb:18:09:be:9b:25:5b:b0:99:a7:be:ba:12:7b:1a:ab:
         ee:f1:bd:d7:84:bd:1a:94:08:05:87:99:d4:fb:b9:a0:d6:23:
         c3:7f:7b:8a:a7:64:5b:fb:24:23:be:cd:fe:85:34:ed:67:75:
         50:f1:e6:a2:8d:dd:57:87:8a:35:33:a5:59:a3:78:77:fd:92:
         db:74:44:40:1f:f7:73:6d:8c:5e:89:74:9a:2c:81:c9:d0:55:
         db:e2:95:57:b2:e4:b8:cf:db:4b:50:10:9e:4f:c1:b3:88:5e:
         1a:b5:dd:41:e0:72:bb:92:3f:61:60:0a:00:be:c2:a6:6d:6c:
         70:f8:5b:c0:73:e9:44:5b:2d:38:57:8d:52:17:d1:a2:fc:ca:
         37:a5:ee:e8:b3:d4:84:11:81:d5:bf:83:8e:e3:c4:23:e5:a6:
         ea:2d:75:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----