Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5U3oM48Z9DqxsNL44SEttITZ6QQ.cer
File:                     5U3oM48Z9DqxsNL44SEttITZ6QQ.cer (raw, json)
Hash identifier:          hkIl1HPb8hMH+B2MPzX70Vyux+kirBavm373mbMnls0=
Subject key identifier:   E5:4D:E8:33:8F:19:F4:3A:B1:B0:D2:F8:E1:21:2D:B4:84:D9:E9:04
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018FB4706D710CB464815ECE9EF52F35A85D
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/cd/da198c-c10b-4e42-86df-3a652f798ab9/1/5U3oM48Z9DqxsNL44SEttITZ6QQ.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/cd/da198c-c10b-4e42-86df-3a652f798ab9/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 26 May 2024 10:26:58 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    AS: 198078

Validation:               Failed, certificate revoked on Thu 25 Jul 2024 14:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:b4:70:6d:71:0c:b4:64:81:5e:ce:9e:f5:2f:35:a8:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: May 26 10:26:58 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=e54de8338f19f43ab1b0d2f8e1212db484d9e904
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:a2:10:0c:d1:7a:9e:dc:6c:00:20:ec:06:3a:
                    75:db:0e:5a:59:04:d0:5c:a7:44:68:e0:f6:3a:26:
                    f3:29:dd:37:63:f5:e9:10:e5:46:ca:9c:26:5a:1a:
                    d0:b8:e3:ff:82:92:5b:d4:6a:10:fa:c1:a6:4a:b1:
                    58:b6:db:f9:c2:2d:98:94:97:3c:0b:ee:4e:c4:fa:
                    32:9a:8e:5d:53:be:57:ca:04:27:a9:41:62:43:2a:
                    0f:e4:11:86:19:ae:dc:2c:7c:a3:87:29:83:dc:d8:
                    20:33:36:8a:df:68:2f:d8:1b:97:de:00:9a:0b:d2:
                    94:d4:88:b5:e6:1a:50:b4:4e:94:9d:83:85:b0:96:
                    68:ce:83:69:23:b5:08:d7:b3:1d:bf:f7:b0:8f:58:
                    87:39:b1:70:75:52:86:7a:f2:29:09:42:b4:bb:58:
                    45:4c:3e:e8:c4:d5:22:c3:65:f6:6f:3f:85:e6:90:
                    b6:2e:0f:8a:27:5c:05:4e:c3:0f:48:d2:d0:02:38:
                    34:46:b2:7f:59:8f:74:33:e9:f0:94:0e:7d:50:b4:
                    07:4a:ee:5e:5d:34:15:83:1c:c8:44:14:e5:68:fa:
                    20:25:29:f0:6c:97:2c:31:5c:6c:90:23:d3:d3:ed:
                    c5:68:5f:ee:3c:71:2d:be:a8:6f:3a:ec:93:be:a7:
                    71:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:4D:E8:33:8F:19:F4:3A:B1:B0:D2:F8:E1:21:2D:B4:84:D9:E9:04
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/da198c-c10b-4e42-86df-3a652f798ab9/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/da198c-c10b-4e42-86df-3a652f798ab9/1/5U3oM48Z9DqxsNL44SEttITZ6QQ.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  198078

    Signature Algorithm: sha256WithRSAEncryption
         1e:bc:82:97:f0:2a:3a:ca:7f:e9:eb:bd:dc:63:fa:81:46:4f:
         41:53:bc:18:6e:b3:50:25:f1:da:0f:28:90:a6:1c:47:dd:d5:
         38:6a:23:39:31:1a:34:84:f8:4d:97:2d:1c:bc:50:d0:b6:2e:
         77:37:4c:84:5d:df:d1:3a:1d:cb:d6:67:49:f5:be:51:b3:01:
         bb:98:ad:73:2d:fa:92:e9:b4:28:cf:39:7f:de:21:8a:ab:e0:
         c5:ea:e1:a6:95:0c:ec:8c:97:2c:29:92:88:a8:ce:04:3d:be:
         d1:08:cb:fa:fc:2f:0d:a3:b5:39:d2:28:ed:09:c3:91:9d:bd:
         20:72:32:5d:91:aa:5a:6a:78:b7:fc:24:f4:f5:4e:35:07:19:
         df:f1:e6:db:a2:37:2f:30:12:82:27:9b:b2:88:c3:c2:2e:f2:
         d9:bc:ca:b9:04:ab:a4:03:59:2a:25:34:34:f4:96:e9:46:40:
         df:6d:fd:88:37:15:67:2a:9a:19:2b:58:de:57:2d:0a:ae:06:
         8d:82:3a:e8:6c:ff:16:a5:92:c0:5e:98:34:98:57:13:29:a3:
         7c:54:0b:e1:dd:33:43:5e:1b:24:3b:d0:20:fb:71:99:d8:77:
         b7:d7:0e:30:72:20:39:1b:e1:30:c0:80:f6:0b:9b:fb:d1:d3:
         fc:97:9d:ad
-----BEGIN CERTIFICATE-----
MIIFczCCBFugAwIBAgISAY+0cG1xDLRkgV7OnvUvNahdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwNTI2MTAyNjU4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNTRkZTgzMzhmMTlmNDNhYjFiMGQyZjhlMTIxMmRiNDg0ZDllOTA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh6IQDNF6ntxsACDsBjp12w5aWQTQ
XKdEaOD2OibzKd03Y/XpEOVGypwmWhrQuOP/gpJb1GoQ+sGmSrFYttv5wi2YlJc8
C+5OxPoymo5dU75XygQnqUFiQyoP5BGGGa7cLHyjhymD3NggMzaK32gv2BuX3gCa
C9KU1Ii15hpQtE6UnYOFsJZozoNpI7UI17Mdv/ewj1iHObFwdVKGevIpCUK0u1hF
TD7oxNUiw2X2bz+F5pC2Lg+KJ1wFTsMPSNLQAjg0RrJ/WY90M+nwlA59ULQHSu5e
XTQVgxzIRBTlaPogJSnwbJcsMVxskCPT0+3FaF/uPHEtvqhvOuyTvqdx0QIDAQAB
o4ICfzCCAnswHQYDVR0OBBYEFOVN6DOPGfQ6sbDS+OEhLbSE2ekEMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2NkL2RhMTk4
Yy1jMTBiLTRlNDItODZkZi0zYTY1MmY3OThhYjkvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvY2QvZGExOThj
LWMxMGItNGU0Mi04NmRmLTNhNjUyZjc5OGFiOS8xLzVVM29NNDhaOURxeHNOTDQ0
U0V0dElUWjZRUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwMFvjANBgkqhkiG9w0BAQsFAAOCAQEAHryCl/AqOsp/
6eu93GP6gUZPQVO8GG6zUCXx2g8okKYcR93VOGojOTEaNIT4TZctHLxQ0LYudzdM
hF3f0Tody9ZnSfW+UbMBu5itcy36kum0KM85f94hiqvgxerhppUM7IyXLCmSiKjO
BD2+0QjL+vwvDaO1OdIo7QnDkZ29IHIyXZGqWmp4t/wk9PVONQcZ3/Hm26I3LzAS
giebsojDwi7y2bzKuQSrpANZKiU0NPSW6UZA3239iDcVZyqaGStY3lctCq4GjYI6
6Gz/FqWSwF6YNJhXEymjfFQL4d0zQ14bJDvQIPtxmdh3t9cOMHIgORvhMMCA9gub
+9HT/JedrQ==
-----END CERTIFICATE-----