Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/D08YMtKZ0l7XdC5AzfLubovd3sk.cer
File:                     D08YMtKZ0l7XdC5AzfLubovd3sk.cer (raw, json)
Hash identifier:          nUIBH0tkhUVUtoIghbf1dRsg8d7zAKWCJhRgvLct5sE=
Subject key identifier:   0F:4F:18:32:D2:99:D2:5E:D7:74:2E:40:CD:F2:EE:6E:8B:DD:DE:C9
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018571683271B2AEDAA90B7215B13D575471
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/7b/a1b971-7b76-4521-b01d-5e0ddf3b4176/1/D08YMtKZ0l7XdC5AzfLubovd3sk.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/7b/a1b971-7b76-4521-b01d-5e0ddf3b4176/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 02 Jan 2023 07:35:32 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    AS: 206174

Validation:               Failed, certificate revoked on Mon 04 Sep 2023 12:43:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:71:68:32:71:b2:ae:da:a9:0b:72:15:b1:3d:57:54:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 07:35:32 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=0f4f1832d299d25ed7742e40cdf2ee6e8bdddec9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:eb:5f:7a:92:f0:f4:12:4b:c2:c0:a7:a2:f6:
                    7a:90:6c:67:29:f7:e4:39:cc:2b:da:5e:47:be:25:
                    3c:53:e0:34:54:bb:08:2e:17:18:3e:f6:98:f5:8f:
                    c0:2e:11:64:d6:7e:02:21:df:8a:b4:60:07:99:94:
                    49:44:ef:cb:51:39:d9:a7:d2:26:68:fd:87:f4:56:
                    72:e3:48:9a:b7:4f:4e:90:16:93:f2:14:a4:a6:32:
                    7c:f9:d9:a7:31:dd:6f:13:57:8a:be:b0:14:12:5c:
                    53:05:b5:75:42:d1:46:b6:05:d9:22:8e:be:6c:94:
                    73:cd:19:ab:38:f2:70:b4:eb:c1:69:eb:db:dc:ec:
                    db:b9:10:d9:51:86:56:99:c4:91:92:5a:a1:04:d6:
                    b8:90:f7:5a:ed:f7:72:bb:87:68:c6:2a:6a:f8:03:
                    20:d3:59:93:fa:e7:15:fb:f3:af:45:1e:82:b4:75:
                    36:60:82:1b:5d:9f:3f:91:df:67:5f:14:93:da:bd:
                    c0:83:16:8a:b4:42:65:94:d7:31:64:5f:4c:3f:fa:
                    f0:1d:d5:33:6e:1b:7c:6b:29:09:67:f2:1b:40:df:
                    aa:0f:52:c9:c4:fb:fd:80:a6:1e:9d:2b:14:d4:87:
                    19:c8:da:24:73:f9:e5:92:13:24:20:3d:01:17:ba:
                    f4:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:4F:18:32:D2:99:D2:5E:D7:74:2E:40:CD:F2:EE:6E:8B:DD:DE:C9
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/a1b971-7b76-4521-b01d-5e0ddf3b4176/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/a1b971-7b76-4521-b01d-5e0ddf3b4176/1/D08YMtKZ0l7XdC5AzfLubovd3sk.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  206174

    Signature Algorithm: sha256WithRSAEncryption
         a6:3c:a5:32:f5:a5:95:fe:73:e5:8b:df:c7:07:b5:29:b9:74:
         33:57:4f:1f:49:d8:40:b2:22:da:a2:09:31:92:8d:73:23:51:
         64:02:4e:36:a9:c2:ed:66:ec:ce:ca:b9:55:e4:03:6c:97:84:
         7f:5a:9e:2d:73:9d:1b:f6:86:f5:8e:53:3a:02:19:fd:25:f8:
         f5:97:db:d4:e6:21:7e:1f:93:27:06:2c:5e:7c:fc:ea:e2:b2:
         ce:79:fd:e3:d4:92:76:d7:29:2e:67:50:49:14:8e:61:9b:5b:
         57:b3:1a:6e:91:bf:4e:8b:5c:0c:f3:78:4f:39:e5:1b:a7:99:
         4a:c3:7c:25:e9:bb:b0:e9:ca:26:2f:51:a6:79:b1:21:23:13:
         06:59:31:db:4a:38:f0:b3:a8:92:90:17:61:f8:fd:50:04:c2:
         5b:ca:41:0f:24:21:76:1b:f4:ec:84:7e:d3:87:af:4b:01:de:
         ea:6e:a3:22:af:e8:e3:cc:f0:62:48:cc:c9:59:4b:9c:18:45:
         16:6e:f7:e3:63:6e:a9:e0:7c:0a:d1:ae:53:67:9e:6e:11:a1:
         3b:66:34:d9:4c:2d:be:1e:6c:a1:93:d0:04:e4:75:52:06:d7:
         40:24:a9:ed:07:57:2b:a7:06:72:18:dd:ba:be:b5:08:9a:89:
         02:e3:6a:1b
-----BEGIN CERTIFICATE-----
MIIFczCCBFugAwIBAgISAYVxaDJxsq7aqQtyFbE9V1RxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjMwMTAyMDczNTMyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZjRmMTgzMmQyOTlkMjVlZDc3NDJlNDBjZGYyZWU2ZThiZGRkZWM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg+tfepLw9BJLwsCnovZ6kGxnKffk
Ocwr2l5HviU8U+A0VLsILhcYPvaY9Y/ALhFk1n4CId+KtGAHmZRJRO/LUTnZp9Im
aP2H9FZy40iat09OkBaT8hSkpjJ8+dmnMd1vE1eKvrAUElxTBbV1QtFGtgXZIo6+
bJRzzRmrOPJwtOvBaevb3OzbuRDZUYZWmcSRklqhBNa4kPda7fdyu4doxipq+AMg
01mT+ucV+/OvRR6CtHU2YIIbXZ8/kd9nXxST2r3AgxaKtEJllNcxZF9MP/rwHdUz
bht8aykJZ/IbQN+qD1LJxPv9gKYenSsU1IcZyNokc/nlkhMkID0BF7r0kwIDAQAB
o4ICfzCCAnswHQYDVR0OBBYEFA9PGDLSmdJe13QuQM3y7m6L3d7JMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzdiL2ExYjk3
MS03Yjc2LTQ1MjEtYjAxZC01ZTBkZGYzYjQxNzYvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvN2IvYTFiOTcx
LTdiNzYtNDUyMS1iMDFkLTVlMGRkZjNiNDE3Ni8xL0QwOFlNdEtaMGw3WGRDNUF6
Zkx1Ym92ZDNzay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwMlXjANBgkqhkiG9w0BAQsFAAOCAQEApjylMvWllf5z
5Yvfxwe1Kbl0M1dPH0nYQLIi2qIJMZKNcyNRZAJONqnC7Wbszsq5VeQDbJeEf1qe
LXOdG/aG9Y5TOgIZ/SX49Zfb1OYhfh+TJwYsXnz86uKyznn949SSdtcpLmdQSRSO
YZtbV7MabpG/TotcDPN4TznlG6eZSsN8Jem7sOnKJi9RpnmxISMTBlkx20o48LOo
kpAXYfj9UATCW8pBDyQhdhv07IR+04evSwHe6m6jIq/o48zwYkjMyVlLnBhFFm73
42NuqeB8CtGuU2eebhGhO2Y02Uwtvh5soZPQBOR1UgbXQCSp7QdXK6cGchjdur61
CJqJAuNqGw==
-----END CERTIFICATE-----