Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0WltJzHhTVxCuzV0l7ddo6rOIIU.cer
File:                     0WltJzHhTVxCuzV0l7ddo6rOIIU.cer (raw, json)
Hash identifier:          pv5TJroeOQ8H+lwNlPhdd/pf/qeQ1MqVZ3NHMaN7r1U=
Subject key identifier:   D1:69:6D:27:31:E1:4D:5C:42:BB:35:74:97:B7:5D:A3:AA:CE:20:85
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0185DEE17F0BE01B0E67DAD2920B1F0C229D
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/29/bd2b75-566c-4f14-90d5-a3a944cb14c8/1/0WltJzHhTVxCuzV0l7ddo6rOIIU.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/29/bd2b75-566c-4f14-90d5-a3a944cb14c8/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 23 Jan 2023 13:46:38 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    AS: 200179

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:de:e1:7f:0b:e0:1b:0e:67:da:d2:92:0b:1f:0c:22:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan 23 13:46:38 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=d1696d2731e14d5c42bb357497b75da3aace2085
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:a9:80:74:53:09:6b:6d:f9:5d:9d:50:16:af:
                    5d:ba:14:f5:33:1c:f8:e6:d2:44:87:2e:59:b3:7f:
                    96:7f:39:4e:46:b7:84:7f:91:fa:a3:3f:d4:62:fc:
                    8b:6a:f2:92:05:09:29:51:b7:15:31:4e:34:f6:cf:
                    94:ea:ea:5d:2a:c6:a3:2e:10:a9:ce:e0:9a:c0:ca:
                    79:db:8e:62:60:39:de:65:a7:83:cb:57:50:7c:74:
                    5e:0d:b2:96:71:27:a7:82:a9:0d:d0:c6:0d:e2:f1:
                    50:5e:fe:50:bc:20:de:94:1c:25:68:ef:1d:28:7f:
                    f1:b3:97:df:82:76:44:cf:09:cc:f7:42:41:17:4a:
                    68:a6:77:ff:07:f0:76:f0:e7:64:f3:43:19:a6:fe:
                    92:fa:fa:6c:6b:ab:db:78:5a:99:1a:8e:07:d1:43:
                    16:a3:bc:75:c7:a6:1e:6d:e7:6f:06:8e:54:05:4d:
                    b2:22:d7:1c:6b:ee:23:0b:cc:dd:1b:f0:19:99:c2:
                    44:41:95:2b:41:16:67:fa:52:d3:38:c1:f0:5c:dc:
                    c8:21:2d:06:8b:85:e5:1b:f1:e2:dd:23:7a:ec:66:
                    93:fc:1f:ba:36:9d:59:2e:f2:ab:8a:8e:26:8e:ed:
                    c0:e7:c4:d4:75:00:d2:14:8d:fe:fb:39:ab:4f:9e:
                    60:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:69:6D:27:31:E1:4D:5C:42:BB:35:74:97:B7:5D:A3:AA:CE:20:85
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/bd2b75-566c-4f14-90d5-a3a944cb14c8/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/bd2b75-566c-4f14-90d5-a3a944cb14c8/1/0WltJzHhTVxCuzV0l7ddo6rOIIU.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  200179

    Signature Algorithm: sha256WithRSAEncryption
         85:bc:dc:14:26:96:81:25:52:b5:4a:3e:e1:54:42:bb:52:3c:
         39:d6:e3:83:6d:24:8b:0d:77:a9:da:72:1c:cb:52:e6:66:5b:
         a5:09:60:51:5e:76:9f:f0:9d:3b:25:15:b4:9a:9d:cd:56:26:
         c6:d4:77:17:20:98:d4:e0:ae:0d:36:40:2b:dd:e6:80:11:82:
         16:b9:f7:9b:ea:1d:7a:b4:43:02:0e:d6:ae:48:6b:2c:5c:a4:
         0d:7b:8a:db:5e:5c:2f:84:ff:c3:ab:ef:af:b7:7b:13:6e:76:
         87:1e:bb:90:07:ff:d2:57:3a:4c:26:11:36:bb:d9:32:19:8e:
         3f:42:3f:da:32:d2:34:b0:53:b7:a0:5d:d4:2b:39:b4:22:20:
         a2:65:96:cb:11:d9:4b:3c:68:3e:fb:11:1e:f2:ee:d2:e6:1a:
         0f:04:35:ec:b3:6e:fd:e5:6f:77:68:fe:54:36:45:ed:5f:db:
         9e:a4:1d:a5:54:ea:51:c9:75:0c:1b:13:21:2b:77:c3:11:3e:
         89:b7:38:a6:89:94:b0:f8:03:ff:55:93:98:f9:d8:35:d4:3e:
         31:7b:bf:52:30:e0:4f:2a:8d:df:68:f8:e6:5d:95:ba:ef:ea:
         5a:88:a9:9d:5c:cc:16:12:59:7c:06:2c:13:26:26:ef:0d:36:
         af:46:81:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 22 16:58:57 2023 by rpki-client on console-fra.rpki-client.org