Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2MQ5Tb5O-1jgxPNjbf0R6lhFTjA.cer
File:                     2MQ5Tb5O-1jgxPNjbf0R6lhFTjA.cer (raw, json)
Hash identifier:          iKX/IG+o2SDCREpqe5nCr3Z9/0OC1D/TwgeDe9ixMy0=
Subject key identifier:   D8:C4:39:4D:BE:4E:FB:58:E0:C4:F3:63:6D:FD:11:EA:58:45:4E:30
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01871C06395229B8CAD59807DBB60AB1AA32
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/25/668fdb-6b37-4d1d-b7a7-763817b25db0/1/2MQ5Tb5O-1jgxPNjbf0R6lhFTjA.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/25/668fdb-6b37-4d1d-b7a7-763817b25db0/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 26 Mar 2023 03:46:22 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    AS: 199186

Validation:               Failed, certificate revoked on Sun 26 Mar 2023 14:41:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:1c:06:39:52:29:b8:ca:d5:98:07:db:b6:0a:b1:aa:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Mar 26 03:46:22 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=d8c4394dbe4efb58e0c4f3636dfd11ea58454e30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:69:84:f5:bc:8a:c2:b7:ec:51:1e:74:b7:85:
                    1c:96:fe:84:bf:db:25:f4:75:e8:ff:ed:c6:d5:da:
                    91:c3:c5:1a:e1:6f:0b:1c:0b:c7:36:a7:b4:83:f3:
                    09:8b:1c:af:ff:7e:07:8c:c3:c4:33:00:67:8e:83:
                    65:4d:2c:bf:c8:de:c7:c2:6a:07:b5:f4:83:e8:63:
                    73:35:ad:ef:24:95:85:bb:6a:a4:0b:9c:23:95:ac:
                    ef:59:ea:c2:ee:45:3f:87:8c:a8:53:85:59:92:e6:
                    28:42:34:95:a3:dc:90:02:11:fd:6e:a3:8f:5c:82:
                    58:80:c7:a1:50:ae:a8:a3:fb:e6:ed:b6:a9:08:4a:
                    ec:3d:b0:b8:e9:ef:db:ad:25:ca:15:29:af:3a:e8:
                    cb:9c:09:8d:5e:4f:ef:47:f5:a9:22:a5:a2:f8:a9:
                    be:3a:da:d5:0a:3d:6e:5f:f2:f1:0b:e8:25:5e:41:
                    61:a6:1c:51:ee:37:6f:09:16:03:70:1e:06:68:55:
                    ab:06:82:7a:7e:d3:ed:7b:ba:ae:d4:9b:aa:0e:aa:
                    40:59:04:4a:4d:e2:7c:5e:57:63:10:4c:9d:f8:e1:
                    a6:cf:e4:04:6b:7c:44:03:43:6b:2c:83:b6:8c:12:
                    20:c5:31:a7:bd:ce:d1:4c:dd:f0:4a:7f:f1:3d:06:
                    d5:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:C4:39:4D:BE:4E:FB:58:E0:C4:F3:63:6D:FD:11:EA:58:45:4E:30
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/668fdb-6b37-4d1d-b7a7-763817b25db0/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/668fdb-6b37-4d1d-b7a7-763817b25db0/1/2MQ5Tb5O-1jgxPNjbf0R6lhFTjA.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  199186

    Signature Algorithm: sha256WithRSAEncryption
         83:15:15:d2:51:f4:61:9d:95:67:02:04:b2:df:be:01:ea:13:
         2b:f8:b3:06:cc:cf:68:6c:63:04:1e:17:19:48:00:4f:ea:10:
         34:6d:52:4c:bc:80:eb:95:c9:24:c9:00:d9:bf:81:3e:32:3d:
         26:55:53:82:87:d7:82:4d:be:0c:9b:00:ae:64:46:e5:35:7c:
         43:a4:9b:98:39:c3:6a:6d:7d:a6:68:82:d1:3f:c0:37:fb:c7:
         5c:08:a0:6c:2b:46:4b:81:cb:9b:33:43:d4:b0:de:c2:69:bf:
         6c:f7:6b:5f:42:d0:8f:bb:2e:aa:68:f9:dc:12:fe:b1:5e:9b:
         e4:e4:4c:c1:d1:68:61:2c:4d:43:4d:53:c9:93:7c:ac:69:5a:
         c6:97:76:6e:03:58:b7:37:05:11:a0:39:5b:95:d2:db:3c:b3:
         60:b9:07:5a:8a:ea:2a:ae:5f:86:3e:2d:b2:4c:92:5f:6f:60:
         10:2f:81:8c:8e:86:db:c4:f7:76:e1:e5:b4:be:1e:8e:ad:38:
         7a:1c:50:0d:38:ca:9a:59:72:77:cd:fa:3e:1e:14:25:ed:96:
         07:b2:32:39:9b:b3:2b:af:b2:60:b6:31:ce:a5:3e:79:50:a3:
         35:e0:81:e3:4c:de:c3:49:c0:8e:f6:7b:5d:de:80:18:7f:fe:
         27:68:86:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----