Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5NWGbnUK9BiiWv9gKZrLAg3HjLY.cer
File:                     5NWGbnUK9BiiWv9gKZrLAg3HjLY.cer (raw, json)
Hash identifier:          1DTnedtmQ7CvPSxMZxzytX3lfOIAPYq/mBBq2WKAysU=
Subject key identifier:   E4:D5:86:6E:75:0A:F4:18:A2:5A:FF:60:29:9A:CB:02:0D:C7:8C:B6
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018DAA0B9BA8D8A9C0190DE781B73233B053
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/8d/e1e98b-20c9-4b5b-87df-8242dc26f85b/1/5NWGbnUK9BiiWv9gKZrLAg3HjLY.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/8d/e1e98b-20c9-4b5b-87df-8242dc26f85b/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 14 Feb 2024 23:55:03 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    AS: 211738

Validation:               Failed, certificate revoked on Sun 17 Mar 2024 03:07:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8d:aa:0b:9b:a8:d8:a9:c0:19:0d:e7:81:b7:32:33:b0:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Feb 14 23:55:03 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=e4d5866e750af418a25aff60299acb020dc78cb6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:e7:65:5f:8f:37:ee:8f:19:52:da:94:9c:fa:
                    af:18:87:9a:a6:29:dc:c5:39:e6:cd:b8:a3:67:3b:
                    52:bb:e7:50:37:23:83:28:fc:24:ff:e0:70:6e:b5:
                    d4:76:d2:32:27:2a:a6:df:32:8e:61:6a:95:6c:55:
                    bc:d5:35:9a:43:e8:54:ef:92:c7:a7:f6:17:a5:3d:
                    2a:86:33:eb:82:a4:73:6d:c3:b4:7f:e7:7d:50:bd:
                    bc:ff:e3:93:60:ea:fe:ee:c7:69:8d:76:db:1f:a7:
                    e4:e4:61:82:c3:c5:13:21:fb:51:9c:81:02:6c:b7:
                    4b:e7:60:ab:82:d3:f1:74:ae:ee:b9:40:f5:d0:36:
                    06:c6:a3:95:36:4c:1e:4b:ae:d0:32:3a:26:ec:6c:
                    a4:3d:4c:98:c1:ee:89:a7:54:f5:31:02:0e:c8:b2:
                    13:fb:d2:50:34:c1:6a:63:0e:77:ee:35:f5:36:af:
                    d4:ed:d0:ae:c7:c2:e5:cd:81:cb:97:56:32:d8:0d:
                    45:ac:4c:f0:87:09:b2:12:bf:3b:0c:d7:79:da:91:
                    91:0e:7c:c5:67:a2:92:d1:a2:7e:6d:15:f8:bd:f8:
                    8c:41:67:67:42:73:4e:47:39:62:df:52:7d:27:18:
                    2e:3d:e5:ac:b6:08:c5:b7:c8:49:83:c5:4c:8b:4f:
                    d4:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:D5:86:6E:75:0A:F4:18:A2:5A:FF:60:29:9A:CB:02:0D:C7:8C:B6
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e1e98b-20c9-4b5b-87df-8242dc26f85b/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e1e98b-20c9-4b5b-87df-8242dc26f85b/1/5NWGbnUK9BiiWv9gKZrLAg3HjLY.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  211738

    Signature Algorithm: sha256WithRSAEncryption
         07:80:01:01:91:49:77:e3:55:38:29:1d:ec:1a:87:15:26:44:
         18:96:02:bd:98:54:4b:fb:14:d2:b2:14:63:29:04:1f:29:a9:
         ad:de:12:98:ac:83:51:e6:d6:d0:02:c3:a6:9a:c2:8f:dc:fe:
         76:d1:98:04:b1:86:98:a7:b7:03:bf:80:27:2f:fb:0c:7f:99:
         d2:5f:1e:3f:03:62:9d:56:fe:49:2a:d9:72:0b:78:29:c3:9d:
         ec:92:69:00:a4:5b:51:5e:02:c0:2a:02:ba:b2:88:a4:46:39:
         18:b5:33:e1:fc:2e:ae:14:b7:e5:6c:84:04:03:0a:cd:ea:f2:
         41:99:03:6b:a7:bb:b8:01:9c:b9:c7:b3:d0:c4:46:65:50:17:
         e2:d9:3c:73:c0:b3:da:6b:20:ef:4d:45:8e:79:33:d6:5a:83:
         97:77:56:cb:06:96:d2:ed:36:49:8a:46:46:c9:5e:ff:85:02:
         2d:1e:b5:e1:d7:42:61:2b:fd:85:0a:64:7e:ac:77:ea:ac:f8:
         f6:e7:7d:28:51:32:9a:8e:6b:b7:f1:2f:4b:85:c4:34:a2:59:
         f2:78:41:90:a9:a1:cf:d9:b8:d3:2a:8a:82:58:0d:e8:7c:d6:
         54:65:e3:78:b8:59:64:9f:3f:bd:73:4e:ef:fd:92:66:90:c8:
         e5:21:97:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----