Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5jeEwCFAK3J7jDUza1XtXMNHkEo.cer
File:                     5jeEwCFAK3J7jDUza1XtXMNHkEo.cer (raw, json)
Hash identifier:          rfry83QNILxUgUbKfe9wPgNHLKRjbZG6pQnjl8j7K/g=
Subject key identifier:   E6:37:84:C0:21:40:2B:72:7B:8C:35:33:6B:55:ED:5C:C3:47:90:4A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018CC86F20346820C7A941FF95C031D8E537
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/60/446106-f924-4e5c-989c-33dd1f2f71f1/1/5jeEwCFAK3J7jDUza1XtXMNHkEo.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/60/446106-f924-4e5c-989c-33dd1f2f71f1/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Tue 02 Jan 2024 04:29:35 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    AS: 48876
                          IP: 194.79.250.0/23

Validation:               Failed, certificate revoked on Wed 27 Mar 2024 11:09:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c8:6f:20:34:68:20:c7:a9:41:ff:95:c0:31:d8:e5:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 04:29:35 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=e63784c021402b727b8c35336b55ed5cc347904a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:c6:f1:cf:5d:18:0e:75:6c:56:a4:69:24:de:
                    93:21:fc:7c:83:48:7c:af:ba:b9:cb:e0:56:b8:28:
                    f5:aa:ae:90:51:40:50:20:5f:f8:c2:f3:f6:2d:c9:
                    ae:f9:bb:ff:b1:53:f9:0b:3c:d0:3a:9c:a7:7a:6c:
                    99:88:cf:62:46:2c:99:cb:f8:ee:5c:bd:6a:37:63:
                    69:db:3b:b3:d2:11:96:7f:8c:0f:27:5c:3d:20:4a:
                    b3:91:33:31:3b:32:96:96:0a:9a:87:b2:50:c5:61:
                    db:74:96:8d:45:89:bb:b1:44:7f:9f:3f:0f:35:da:
                    aa:5d:5e:1b:1f:6b:cf:0c:3e:54:e9:be:55:5c:6b:
                    fb:44:f0:2c:c6:1b:a1:96:6e:43:3a:ea:45:2a:59:
                    e8:a3:6c:1b:68:8f:d3:46:ad:7e:65:da:bb:cc:29:
                    6b:d1:b2:ea:64:8f:d4:83:bc:f7:0e:f9:85:65:c2:
                    59:94:55:de:b4:f8:87:9e:f2:d1:10:27:85:cb:fd:
                    0f:12:74:86:b7:10:b9:c9:8d:5c:f0:e8:93:4f:1b:
                    9d:35:48:55:9d:70:1c:da:0a:36:4f:db:94:b9:e0:
                    22:e8:20:16:0f:7d:32:04:7a:cf:50:ef:08:62:d3:
                    89:cf:16:1f:9f:c2:80:4c:96:3c:9c:bb:4f:63:a5:
                    f5:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:37:84:C0:21:40:2B:72:7B:8C:35:33:6B:55:ED:5C:C3:47:90:4A
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/446106-f924-4e5c-989c-33dd1f2f71f1/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/446106-f924-4e5c-989c-33dd1f2f71f1/1/5jeEwCFAK3J7jDUza1XtXMNHkEo.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.79.250.0/23

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  48876

    Signature Algorithm: sha256WithRSAEncryption
         32:f3:2d:77:a3:23:60:d9:71:1e:e8:6a:c5:53:53:84:c5:bf:
         69:5d:19:84:c5:02:63:bf:00:53:bb:09:b2:5e:bd:62:82:53:
         19:1a:97:33:d6:bf:2c:8c:93:35:17:f4:a0:f8:eb:c6:57:52:
         c4:20:0f:e2:a5:bc:8b:ec:c4:c6:6d:07:d5:63:68:5a:95:1e:
         c3:fa:eb:c8:ab:b6:5f:e4:80:cd:b3:95:af:50:00:ef:f5:20:
         55:61:2a:9f:f0:f3:1d:8d:7c:33:0e:28:28:0e:81:c6:af:9a:
         54:11:d0:f1:3d:ed:05:26:73:76:ab:c5:a6:85:7e:8a:7f:c1:
         44:2f:67:4a:7d:51:1a:46:b3:dd:02:6e:6e:03:fd:12:34:9c:
         cc:40:eb:9f:78:3b:d1:48:78:8d:8c:db:93:d7:2b:7c:b1:22:
         6d:70:d8:0f:81:f2:eb:49:38:fc:83:eb:b3:d7:bc:00:f5:78:
         78:c0:59:aa:f7:eb:4d:d3:43:cc:bc:e1:a1:78:3f:13:d3:47:
         08:dc:d6:39:46:ab:a7:0b:4e:a2:b4:64:56:8e:15:33:ff:21:
         eb:ac:39:68:79:b8:de:13:02:b7:2e:95:89:93:2e:b1:34:cf:
         d1:c1:cc:77:7f:84:64:12:c5:13:1d:7f:ac:61:43:15:d8:41:
         34:f3:6f:25
-----BEGIN CERTIFICATE-----
MIIFlDCCBHygAwIBAgISAYzIbyA0aCDHqUH/lcAx2OU3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAyMDQyOTM1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNjM3ODRjMDIxNDAyYjcyN2I4YzM1MzM2YjU1ZWQ1Y2MzNDc5MDRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwsbxz10YDnVsVqRpJN6TIfx8g0h8
r7q5y+BWuCj1qq6QUUBQIF/4wvP2Lcmu+bv/sVP5CzzQOpynemyZiM9iRiyZy/ju
XL1qN2Np2zuz0hGWf4wPJ1w9IEqzkTMxOzKWlgqah7JQxWHbdJaNRYm7sUR/nz8P
NdqqXV4bH2vPDD5U6b5VXGv7RPAsxhuhlm5DOupFKlnoo2wbaI/TRq1+Zdq7zClr
0bLqZI/Ug7z3DvmFZcJZlFXetPiHnvLRECeFy/0PEnSGtxC5yY1c8OiTTxudNUhV
nXAc2go2T9uUueAi6CAWD30yBHrPUO8IYtOJzxYfn8KATJY8nLtPY6X1bQIDAQAB
o4ICoDCCApwwHQYDVR0OBBYEFOY3hMAhQCtye4w1M2tV7VzDR5BKMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzYwLzQ0NjEw
Ni1mOTI0LTRlNWMtOTg5Yy0zM2RkMWYyZjcxZjEvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjAvNDQ2MTA2
LWY5MjQtNGU1Yy05ODljLTMzZGQxZjJmNzFmMS8xLzVqZUV3Q0ZBSzNKN2pEVXph
MVh0WE1OSGtFby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQBwk/6MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC
AwC+7DANBgkqhkiG9w0BAQsFAAOCAQEAMvMtd6MjYNlxHuhqxVNThMW/aV0ZhMUC
Y78AU7sJsl69YoJTGRqXM9a/LIyTNRf0oPjrxldSxCAP4qW8i+zExm0H1WNoWpUe
w/rryKu2X+SAzbOVr1AA7/UgVWEqn/DzHY18Mw4oKA6Bxq+aVBHQ8T3tBSZzdqvF
poV+in/BRC9nSn1RGkaz3QJubgP9EjSczEDrn3g70Uh4jYzbk9crfLEibXDYD4Hy
60k4/IPrs9e8APV4eMBZqvfrTdNDzLzhoXg/E9NHCNzWOUarpwtOorRkVo4VM/8h
66w5aHm43hMCty6ViZMusTTP0cHMd3+EZBLFEx1/rGFDFdhBNPNvJQ==
-----END CERTIFICATE-----