Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3pGXzdXFKIdELVAGJLfuHK_STew.cer
File:                     3pGXzdXFKIdELVAGJLfuHK_STew.cer (raw, json)
Hash identifier:          kvCrMzgzrqzKg3nTskkkxXlZMB11s9Iw1Dy37K8LgRI=
Subject key identifier:   DE:91:97:CD:D5:C5:28:87:44:2D:50:06:24:B7:EE:1C:AF:D2:4D:EC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856EFAFDCD4C1743F07926F0A7AB5C36BA
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/81/274545-eabb-47ec-8606-b9008e9467e2/1/3pGXzdXFKIdELVAGJLfuHK_STew.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/81/274545-eabb-47ec-8606-b9008e9467e2/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 20:17:00 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    AS: 25198

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6e:fa:fd:cd:4c:17:43:f0:79:26:f0:a7:ab:5c:36:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 20:17:00 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=de9197cdd5c52887442d500624b7ee1cafd24dec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:82:db:62:fd:3f:a4:cb:a3:4c:62:b8:89:c5:
                    3a:53:29:f3:b7:72:5f:61:33:a3:e5:b0:a3:cc:20:
                    2f:00:e9:d3:8d:0a:18:9d:fa:30:98:e6:f9:98:c8:
                    9b:f2:99:f2:dc:04:f8:a6:25:b0:60:6d:98:8f:44:
                    00:a9:e9:59:85:bd:50:8a:78:0d:ce:d7:07:7e:12:
                    ca:40:13:a7:01:d6:f7:9e:ee:19:01:8d:66:8a:8c:
                    85:63:48:78:b5:f3:ab:99:e6:c7:df:f2:e7:2c:91:
                    6c:0a:e4:3f:a2:2f:67:b2:47:46:56:6a:58:a3:98:
                    c7:6d:9f:7b:5c:db:78:63:ca:d1:08:d3:b0:04:bd:
                    51:86:57:f0:07:06:21:e1:70:3d:6d:f4:62:c3:ff:
                    53:94:a0:c8:dc:ee:02:a1:b7:6d:b4:f2:67:3c:88:
                    53:25:7c:e8:e3:ea:b4:d9:1f:6d:e7:19:31:f7:38:
                    f6:35:bb:89:f0:e1:68:3e:57:a7:1f:64:70:51:c4:
                    f9:77:e9:a4:82:eb:86:7c:1d:4c:3e:e1:22:69:3e:
                    d1:20:3d:ee:c7:35:1b:e9:23:5c:c6:8f:3b:b4:3b:
                    e2:cb:d2:5a:a9:94:5e:30:e4:a6:74:77:0e:7c:32:
                    b6:c7:ec:2d:08:97:47:48:91:b6:e8:e0:d3:8b:b6:
                    b1:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:91:97:CD:D5:C5:28:87:44:2D:50:06:24:B7:EE:1C:AF:D2:4D:EC
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/274545-eabb-47ec-8606-b9008e9467e2/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/274545-eabb-47ec-8606-b9008e9467e2/1/3pGXzdXFKIdELVAGJLfuHK_STew.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  25198

    Signature Algorithm: sha256WithRSAEncryption
         0e:af:bf:d2:4d:11:86:44:fd:8d:4c:f3:fd:53:6e:28:42:4e:
         91:f7:98:99:9c:8f:cc:95:8d:c0:96:bd:d2:4d:29:ee:40:31:
         89:81:8e:ee:03:ec:fe:be:51:b3:01:b8:99:dd:ff:24:a5:9e:
         31:03:f7:ac:0a:e3:a3:d0:34:51:1e:da:a5:73:f9:08:1f:c3:
         53:92:66:18:82:b4:0d:cf:53:65:cc:cf:0d:62:94:07:a9:06:
         a2:db:6a:d5:31:86:a6:7e:57:65:3b:1e:76:d0:f8:ab:a4:21:
         df:a0:cb:54:51:ea:bb:c5:a1:0a:77:13:95:2c:09:dc:84:91:
         cb:49:98:52:00:44:7f:2f:7a:e9:23:4b:9d:bb:ec:45:a2:7f:
         93:cb:b3:bc:21:0b:28:db:7d:f9:bd:a0:6a:a5:bb:48:e8:19:
         6b:16:65:ab:2d:51:d1:21:08:9c:58:8e:f3:b2:66:9b:02:74:
         05:c9:b2:19:6e:5f:09:b4:c5:95:92:81:aa:49:ee:da:1d:5e:
         ea:b7:6e:e1:b1:1b:e1:cf:04:dd:9a:89:f6:2f:1a:52:ba:0a:
         a2:d4:85:32:92:db:6f:e6:a9:49:ea:83:74:fd:10:7d:bc:d9:
         31:56:98:0f:b1:69:2a:b4:f3:d8:dc:23:71:79:ea:f6:1f:6f:
         18:b0:bb:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----