Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41UPS20PP3kHge00fXdRArmLGYY.cer
File:                     41UPS20PP3kHge00fXdRArmLGYY.cer (raw, json)
Hash identifier:          36dAQmewsn2SCoCOYQ9GeLAHY2rJrixjdYmRuTHQLUY=
Subject key identifier:   E3:55:0F:4B:6D:0F:3F:79:07:81:ED:34:7D:77:51:02:B9:8B:19:86
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01857168854645D5777C828C64DCB17D7268
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/78/cf08c0-6b62-4027-a07f-13ff5eea7a03/1/41UPS20PP3kHge00fXdRArmLGYY.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/78/cf08c0-6b62-4027-a07f-13ff5eea7a03/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 02 Jan 2023 07:35:53 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    AS: 211375

Validation:               Failed, certificate revoked on Thu 13 Jul 2023 07:14:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:71:68:85:46:45:d5:77:7c:82:8c:64:dc:b1:7d:72:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 07:35:53 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=e3550f4b6d0f3f790781ed347d775102b98b1986
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:e7:c9:e2:2f:44:18:f3:11:1c:20:0b:3b:92:
                    9d:6f:09:55:27:0e:bc:6a:be:76:e9:50:73:9a:07:
                    60:5f:7f:b3:9f:0a:32:35:e7:5a:b6:41:94:a6:29:
                    65:86:88:f5:7a:6f:8d:3b:28:4c:79:dc:3c:5c:d5:
                    8d:c9:c9:b2:d3:c0:2f:84:61:8f:2f:ae:1b:85:8c:
                    64:a9:fa:76:8f:1b:95:8b:23:d3:93:42:f8:9d:b5:
                    ac:50:b2:a6:1d:9d:59:da:2f:11:16:f9:ca:e6:52:
                    ec:91:95:93:18:0b:c2:d7:16:a0:79:ec:8c:74:f1:
                    a4:58:ad:0c:58:91:3e:cb:89:57:bd:a1:09:02:f1:
                    6d:9f:79:4a:d6:af:1e:3d:74:86:d0:34:6c:f5:e3:
                    79:87:2c:e0:d1:33:3c:81:5c:8d:78:0b:de:cb:f1:
                    f1:d8:a4:d8:7f:f4:8d:bc:4a:f7:b9:f4:86:13:3a:
                    69:1e:df:d9:7f:0f:e0:e3:54:fc:73:31:df:85:ca:
                    19:c2:6d:f7:29:e9:18:3d:24:fe:40:67:40:ed:62:
                    48:fe:fb:e4:b1:c3:ce:c8:59:c0:4c:11:fe:b5:02:
                    22:6c:4a:de:89:98:7e:fe:fa:01:d9:56:e5:9b:9f:
                    3d:18:b7:67:44:8a:02:dd:43:25:80:24:6b:0a:3c:
                    2b:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:55:0F:4B:6D:0F:3F:79:07:81:ED:34:7D:77:51:02:B9:8B:19:86
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/cf08c0-6b62-4027-a07f-13ff5eea7a03/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/cf08c0-6b62-4027-a07f-13ff5eea7a03/1/41UPS20PP3kHge00fXdRArmLGYY.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  211375

    Signature Algorithm: sha256WithRSAEncryption
         65:d0:40:78:f2:f8:44:0a:54:ad:9f:56:a3:b0:11:77:f0:b6:
         9a:51:ff:70:5c:d5:6f:29:ce:b9:98:13:a1:ea:a3:72:58:40:
         8e:b2:f3:fe:cf:f9:4b:d7:c2:45:aa:ba:5b:4f:d0:92:ad:ac:
         8d:39:fe:70:cf:e8:ea:9d:39:20:ed:0a:b0:1f:db:71:f5:fc:
         b2:2a:fc:b8:82:2d:04:43:c0:2e:15:e7:a1:cb:72:07:90:56:
         dd:ba:e7:2d:f1:d1:33:a7:d5:92:e1:b1:d7:b1:40:e1:06:d0:
         0b:a2:9f:43:47:9a:d4:62:c5:46:e6:5b:98:83:5b:3f:51:c7:
         50:dd:a5:0f:a7:76:27:47:98:cb:0e:0b:a8:a3:af:b1:b8:85:
         56:b0:8e:12:6c:a3:60:d9:86:f6:74:f5:7e:2f:ea:7c:3d:11:
         7c:37:5e:65:7b:6e:21:4e:d1:ba:51:7e:3f:63:c6:07:b2:76:
         3b:a3:ca:24:21:3d:24:04:ce:eb:9d:8b:de:39:bd:5f:68:ac:
         af:1c:c4:b4:95:ae:72:ca:d5:80:12:c7:59:ea:fa:94:34:91:
         51:1e:0b:4d:21:cb:e4:42:30:e4:12:f0:cf:7e:ba:48:cd:f3:
         de:0e:ce:e8:d8:ca:6b:8b:29:7a:c8:73:b1:19:77:fa:7a:e9:
         3d:99:36:a6
-----BEGIN CERTIFICATE-----
MIIFczCCBFugAwIBAgISAYVxaIVGRdV3fIKMZNyxfXJoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjMwMTAyMDczNTUzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMzU1MGY0YjZkMGYzZjc5MDc4MWVkMzQ3ZDc3NTEwMmI5OGIxOTg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuOfJ4i9EGPMRHCALO5KdbwlVJw68
ar526VBzmgdgX3+znwoyNedatkGUpillhoj1em+NOyhMedw8XNWNycmy08AvhGGP
L64bhYxkqfp2jxuViyPTk0L4nbWsULKmHZ1Z2i8RFvnK5lLskZWTGAvC1xageeyM
dPGkWK0MWJE+y4lXvaEJAvFtn3lK1q8ePXSG0DRs9eN5hyzg0TM8gVyNeAvey/Hx
2KTYf/SNvEr3ufSGEzppHt/Zfw/g41T8czHfhcoZwm33KekYPST+QGdA7WJI/vvk
scPOyFnATBH+tQIibEreiZh+/voB2Vblm589GLdnRIoC3UMlgCRrCjwr/wIDAQAB
o4ICfzCCAnswHQYDVR0OBBYEFONVD0ttDz95B4HtNH13UQK5ixmGMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzc4L2NmMDhj
MC02YjYyLTQwMjctYTA3Zi0xM2ZmNWVlYTdhMDMvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzgvY2YwOGMw
LTZiNjItNDAyNy1hMDdmLTEzZmY1ZWVhN2EwMy8xLzQxVVBTMjBQUDNrSGdlMDBm
WGRSQXJtTEdZWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwM5rzANBgkqhkiG9w0BAQsFAAOCAQEAZdBAePL4RApU
rZ9Wo7ARd/C2mlH/cFzVbynOuZgToeqjclhAjrLz/s/5S9fCRaq6W0/Qkq2sjTn+
cM/o6p05IO0KsB/bcfX8sir8uIItBEPALhXnoctyB5BW3brnLfHRM6fVkuGx17FA
4QbQC6KfQ0ea1GLFRuZbmINbP1HHUN2lD6d2J0eYyw4LqKOvsbiFVrCOEmyjYNmG
9nT1fi/qfD0RfDdeZXtuIU7RulF+P2PGB7J2O6PKJCE9JATO652L3jm9X2isrxzE
tJWucsrVgBLHWer6lDSRUR4LTSHL5EIw5BLwz366SM3z3g7O6NjKa4speshzsRl3
+nrpPZk2pg==
-----END CERTIFICATE-----