Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b0IADXXr8ZgLUh1fpBaV9f2x_E.cer
File:                     1b0IADXXr8ZgLUh1fpBaV9f2x_E.cer (raw, json)
Hash identifier:          ehClwLowZMFJyOcDOAwOQ4ev7FX+RgK6XBAVI1quFmk=
Subject key identifier:   D5:BD:08:00:35:D7:AF:C6:60:2D:48:75:7E:90:5A:57:D7:F6:C7:F1
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018CC5013FE6A64B6D92C7C136D540220386
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/46/b2ca30-f82f-4c71-bdf4-ac68f0724962/1/1b0IADXXr8ZgLUh1fpBaV9f2x_E.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/46/b2ca30-f82f-4c71-bdf4-ac68f0724962/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 12:30:42 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    AS: 60014

Validation:               Failed, certificate revoked on Wed 24 Apr 2024 12:19:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c5:01:3f:e6:a6:4b:6d:92:c7:c1:36:d5:40:22:03:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 12:30:42 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=d5bd080035d7afc6602d48757e905a57d7f6c7f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:29:ae:c0:b3:46:f6:de:61:0e:80:eb:49:fb:
                    97:08:64:4a:d1:05:55:b8:62:2a:95:c9:53:13:78:
                    7f:88:d4:b2:c6:e2:86:9d:80:b5:eb:86:19:7d:c9:
                    01:91:d3:17:d2:db:d7:61:0b:dc:47:81:ed:ce:e9:
                    f4:eb:09:93:32:d9:83:67:f9:8a:92:22:ff:02:0d:
                    8c:68:00:94:3a:f4:ad:3e:24:0d:f4:1d:96:35:b9:
                    7c:fd:90:e3:c8:66:44:31:83:aa:bd:d3:f5:9d:8a:
                    5b:9a:5b:24:60:bc:51:3b:e6:e6:c7:71:46:61:1c:
                    89:3b:51:cb:ce:9e:43:1d:89:53:35:08:ed:9e:b6:
                    cf:c2:d9:e9:67:92:c8:62:08:b2:da:e9:99:ed:e3:
                    86:b7:df:0d:4f:ef:bd:c9:5a:f2:c6:c2:71:d8:d9:
                    0f:90:7f:b5:a1:05:8f:1e:8e:5d:16:cd:18:0f:a9:
                    47:9f:2c:44:3a:9c:8a:cc:f2:c4:78:a5:09:ae:1d:
                    bd:1f:49:6b:39:53:66:e3:8a:16:db:60:29:8f:82:
                    e2:60:49:b9:8d:d4:31:20:de:b0:65:c4:7f:f6:ca:
                    e7:aa:4d:91:16:2b:50:b3:aa:5d:65:c2:9f:21:62:
                    ab:6c:68:e2:85:f7:b0:b8:81:77:f2:dd:0f:b9:d4:
                    2e:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:BD:08:00:35:D7:AF:C6:60:2D:48:75:7E:90:5A:57:D7:F6:C7:F1
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/b2ca30-f82f-4c71-bdf4-ac68f0724962/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/b2ca30-f82f-4c71-bdf4-ac68f0724962/1/1b0IADXXr8ZgLUh1fpBaV9f2x_E.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  60014

    Signature Algorithm: sha256WithRSAEncryption
         ad:fb:7d:1f:12:f0:21:ff:f6:ec:50:dd:1b:2b:ac:76:11:a8:
         a2:31:78:90:15:12:cd:fb:31:79:6f:a7:2c:c6:1a:6d:08:fa:
         4e:45:64:5b:bf:57:6c:13:6a:b9:ff:b4:e0:9b:a3:57:82:14:
         20:8e:71:b1:b7:14:13:31:d5:20:78:86:50:1c:9a:11:1d:ae:
         0f:21:83:a7:0c:e2:45:82:06:6f:02:11:ee:98:ab:59:96:f2:
         73:91:e5:a4:24:25:70:d5:3d:76:ce:53:80:19:d7:dd:54:57:
         5a:66:32:37:b2:a4:08:e4:c6:35:25:b0:1c:9e:b4:3b:1a:58:
         7c:40:d6:ce:c8:ca:61:6c:10:34:4a:76:1e:81:46:dd:9a:de:
         57:28:e8:f3:08:35:f5:4a:e0:f2:82:bd:2a:e3:18:96:90:c7:
         0e:8e:da:ee:a1:8c:0b:37:9d:55:ea:2f:25:f5:d2:56:56:af:
         a3:eb:fe:8c:f7:ab:6c:50:9b:3f:10:fa:d4:ce:80:64:34:72:
         ea:20:fc:8f:2b:8b:5f:1f:f5:5c:73:1d:75:3a:1b:b1:c1:d0:
         d2:a6:11:8f:c0:ca:03:7c:12:f1:d5:e1:c9:b6:1e:68:bd:a7:
         14:f3:c1:d9:08:31:e8:76:d8:ab:6b:dc:e2:19:03:8a:45:8d:
         ed:0b:92:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----