Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1D-BcqbJMMS147X_kb0LvR2GBfM.cer
File:                     1D-BcqbJMMS147X_kb0LvR2GBfM.cer (raw, json)
Hash identifier:          kdD6Ja9o+Giok64WSfJ5vcgH0+fMKRMWv6elZdq/+x4=
Subject key identifier:   D4:3F:81:72:A6:C9:30:C4:B5:E3:B5:FF:91:BD:0B:BD:1D:86:05:F3
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0188526329473C450DED6DE1F26CBF7CA4F2
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/02/c699d0-2edb-45b4-8011-0743c11e04b4/1/1D-BcqbJMMS147X_kb0LvR2GBfM.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/02/c699d0-2edb-45b4-8011-0743c11e04b4/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 25 May 2023 10:10:10 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    AS: 204936

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:52:63:29:47:3c:45:0d:ed:6d:e1:f2:6c:bf:7c:a4:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: May 25 10:10:10 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=d43f8172a6c930c4b5e3b5ff91bd0bbd1d8605f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:be:9b:c2:31:b2:ab:5f:ad:6b:a2:2b:b4:47:
                    68:93:dc:4c:09:5d:17:13:8f:e2:21:98:9d:92:4f:
                    3b:cf:34:15:70:fe:04:fb:17:ba:1d:fb:48:ee:9c:
                    ed:24:f2:01:f9:c0:33:13:2c:cb:87:df:82:42:5b:
                    78:7f:6b:96:b0:68:f7:cb:a1:6a:f1:19:a5:52:8a:
                    59:91:20:a2:74:8c:55:a5:cf:83:df:53:69:e2:d7:
                    fd:c3:c3:72:26:5d:f7:a1:eb:27:58:fa:b2:a4:ff:
                    03:aa:fe:84:01:ba:d8:ee:8f:4e:4a:c3:19:c0:70:
                    ca:99:55:7c:5e:33:1b:b3:60:2e:4b:fc:c1:f5:c2:
                    d3:0c:56:d3:15:a0:e5:a6:17:d8:db:e6:8c:0d:a0:
                    58:90:05:50:44:3f:6a:01:d6:2b:6d:3a:d6:51:c4:
                    77:84:c8:b0:81:22:fc:3a:0e:32:1e:b2:13:3e:28:
                    93:fa:5d:92:b4:4a:77:dd:81:aa:df:ed:36:63:6d:
                    7c:21:29:ca:7d:69:c5:80:72:f1:04:ae:b3:be:12:
                    1c:29:b4:12:27:d1:39:8a:15:b2:d3:a9:5e:c3:7b:
                    5e:d6:90:15:dc:22:db:43:40:d4:b5:14:6e:27:c6:
                    6a:6c:bc:ab:22:a1:a2:bc:cb:bf:5b:c8:10:5e:dd:
                    7c:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:3F:81:72:A6:C9:30:C4:B5:E3:B5:FF:91:BD:0B:BD:1D:86:05:F3
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/c699d0-2edb-45b4-8011-0743c11e04b4/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/c699d0-2edb-45b4-8011-0743c11e04b4/1/1D-BcqbJMMS147X_kb0LvR2GBfM.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  204936

    Signature Algorithm: sha256WithRSAEncryption
         99:3b:53:0c:29:01:25:da:02:e1:ab:65:61:2e:56:d6:62:c1:
         16:9b:1f:f0:e4:2b:89:8e:74:e7:10:94:2d:ba:d6:98:f4:e6:
         d7:fe:16:2e:d2:61:14:24:6e:2a:e2:6a:89:84:96:73:31:c3:
         87:ac:f3:32:f9:e4:4a:b9:b7:c1:82:53:6b:94:1f:3f:8b:9b:
         de:fc:95:46:c0:cc:4e:ab:cf:34:db:3a:ce:99:41:8b:30:d0:
         ad:1d:02:8b:22:db:42:64:3d:0e:d9:fd:3f:70:7e:08:61:27:
         b0:fe:81:80:98:84:79:68:c4:c3:92:18:04:f9:70:ef:12:f1:
         fd:3c:fc:1d:65:15:d9:41:f2:16:58:d6:2b:b5:7e:a0:a0:81:
         23:c0:35:a9:97:89:9e:6a:cf:5a:ad:2c:41:a0:6e:6b:f2:82:
         ac:2a:a1:37:b0:71:24:61:a9:c8:6e:e4:96:ca:31:57:d0:ed:
         64:be:c3:ec:fc:e1:fb:62:fd:d0:76:d4:68:3b:4b:50:a5:be:
         7f:7a:5c:d4:28:7a:c8:ea:21:f7:ff:e5:7c:ff:7f:c4:dc:35:
         cc:0b:20:de:25:37:36:62:f3:e6:f0:41:dc:39:38:1e:11:1e:
         21:51:a4:8d:e9:7c:ca:d9:4e:ee:96:3f:9b:3f:a7:33:c6:57:
         8b:8d:af:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----