Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-ifG0KBsLBwskZX9mprbzk-GW4c.cer
File:                     1-ifG0KBsLBwskZX9mprbzk-GW4c.cer (raw, json)
Hash identifier:          UZDonuc2XqNIQda6PW6AeFmZp3trA+T8ER2qMyEIpWI=
Subject key identifier:   FA:27:C6:D0:A0:6C:2C:1C:2C:91:95:FD:9A:9A:DB:CE:4F:86:5B:87
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018B8FC55EB5282DE44C67BA058361E1F89B
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/8f/805412-63ba-470a-89c9-562b490110e0/1/1-ifG0KBsLBwskZX9mprbzk-GW4c.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/8f/805412-63ba-470a-89c9-562b490110e0/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Nov 2023 11:22:38 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    AS: 29376

Validation:               Failed, certificate revoked on Tue 12 Dec 2023 15:54:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:8f:c5:5e:b5:28:2d:e4:4c:67:ba:05:83:61:e1:f8:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Nov  2 11:22:38 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=fa27c6d0a06c2c1c2c9195fd9a9adbce4f865b87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:ec:3e:0a:e2:89:5d:61:e8:1a:1c:7e:45:20:
                    a3:29:5b:09:5a:c8:79:b4:e1:49:44:48:67:0d:0c:
                    cb:5b:8c:84:b3:96:6c:2c:60:68:4a:f0:d0:bb:2e:
                    4d:a9:3f:22:e0:c7:63:73:7d:3a:62:4e:4e:6a:86:
                    eb:40:2f:3d:3c:a2:29:57:81:4f:7b:51:75:1c:be:
                    45:be:19:a8:a1:a3:51:2b:e9:f2:ce:7b:df:3d:59:
                    5a:da:14:15:e7:3c:86:80:69:45:37:77:3c:ec:1f:
                    e8:1b:87:d7:10:fc:51:09:be:7f:64:1f:4d:f7:c1:
                    69:ad:41:50:5e:e2:11:27:0e:f9:ad:67:cb:4a:1d:
                    2c:0f:d8:20:ec:91:b3:2b:0c:00:de:56:e9:c3:a7:
                    98:cf:a4:3e:33:b6:1d:98:ee:f1:3e:81:d6:70:7e:
                    07:d7:80:7b:b1:b1:4c:b6:40:25:6e:2e:25:50:af:
                    6e:62:ad:4e:27:bc:ff:43:b4:b4:ab:31:66:6e:b3:
                    fd:17:bc:e2:3f:92:ef:01:ea:3d:7f:28:dd:31:24:
                    7d:46:8a:65:b4:92:66:26:e7:bf:28:05:af:e8:26:
                    be:1f:2b:e1:2b:b8:7f:dc:74:09:8e:b3:26:64:c6:
                    34:95:74:f3:d3:d1:34:0f:10:48:b5:c9:2d:dc:1d:
                    d2:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:27:C6:D0:A0:6C:2C:1C:2C:91:95:FD:9A:9A:DB:CE:4F:86:5B:87
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/805412-63ba-470a-89c9-562b490110e0/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/805412-63ba-470a-89c9-562b490110e0/1/1-ifG0KBsLBwskZX9mprbzk-GW4c.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  29376

    Signature Algorithm: sha256WithRSAEncryption
         6c:29:5a:4c:79:e8:32:38:48:f3:a3:74:d6:ce:96:5c:87:d0:
         b3:c8:5e:c6:48:0c:bd:cb:58:ee:54:e7:fa:7e:3b:67:21:04:
         78:da:3e:c6:37:35:56:d5:de:73:2e:ee:69:aa:26:82:50:3f:
         59:c6:96:93:8f:0a:74:6c:89:68:70:56:9b:86:89:49:ac:ad:
         fe:60:a5:e3:74:30:22:7e:0a:08:5a:25:bb:23:2c:09:f1:0d:
         89:52:87:c8:3b:cd:41:f0:e9:34:04:1d:de:6e:96:46:8a:89:
         7a:93:41:5b:1d:76:dc:5d:94:1c:4a:47:07:e9:23:1c:47:2a:
         16:6e:fc:da:ed:6e:6a:33:43:27:10:55:a8:62:17:ad:52:e5:
         30:c6:74:20:e8:e1:5e:72:8d:e6:a5:b2:b0:14:af:78:c6:de:
         bc:39:ef:f1:68:f1:5f:69:aa:de:76:d4:28:81:82:e2:f5:f3:
         30:12:2d:ef:29:d7:e4:57:a5:c4:1e:28:00:2d:4e:79:04:53:
         e6:2f:6b:ef:fe:4e:da:53:81:08:6f:de:65:61:21:d5:6a:e8:
         5e:53:06:e1:5e:a4:75:66:3b:1c:53:53:83:d3:67:b7:34:00:
         48:4e:d7:a0:7c:4c:e9:0e:a8:77:49:47:0a:72:18:c1:16:c4:
         79:1f:ca:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----