Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7KVFJB5im0ky3tEvDnpS2vvhD0s.cer
File:                     7KVFJB5im0ky3tEvDnpS2vvhD0s.cer (raw, json)
Hash identifier:          NV7/y317Be3j9+0Rh7zZTjzRnkkqdStth82y2Cqzvi0=
Subject key identifier:   EC:A5:45:24:1E:62:9B:49:32:DE:D1:2F:0E:7A:52:DA:FB:E1:0F:4B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0188AA72CE61392CC50F6F503D7ADCF59A38
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rsync.paas.rpki.ripe.net/repository/0c521003-d261-4250-9d06-1aec68456dc3/0/ECA545241E629B4932DED12F0E7A52DAFBE10F4B.mft
caRepository:             rsync://rsync.paas.rpki.ripe.net/repository/0c521003-d261-4250-9d06-1aec68456dc3/0/
Notify URL:               https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before:   Sun 11 Jun 2023 12:33:50 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    AS: 199177

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:aa:72:ce:61:39:2c:c5:0f:6f:50:3d:7a:dc:f5:9a:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jun 11 12:33:50 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=eca545241e629b4932ded12f0e7a52dafbe10f4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:23:3d:62:09:d1:5f:40:06:cd:31:b4:82:5b:
                    a3:4c:c4:97:15:b0:d9:9e:84:79:e5:fc:85:02:19:
                    14:2b:8b:7e:4f:a7:46:38:51:39:ef:8b:19:12:cf:
                    41:0e:e6:22:ac:9a:e4:91:35:db:a0:04:ee:e1:c8:
                    0d:24:5b:0f:d8:e4:4f:7e:b4:e4:6c:81:91:02:a9:
                    d8:4d:b5:cb:f4:d3:a2:02:3b:58:9f:bd:ad:b0:60:
                    7d:76:30:41:56:82:c7:1d:eb:63:da:07:52:df:cf:
                    e4:5d:bd:07:80:22:56:7e:4e:dd:90:92:b3:22:9d:
                    55:b9:d4:8b:7b:7d:de:89:12:ed:37:5d:18:18:10:
                    6b:ab:47:2a:06:07:3a:6a:83:cc:ac:07:ff:0e:9d:
                    14:8d:d7:fd:dd:6a:3d:41:0e:b0:1c:cc:78:a2:d1:
                    8b:5b:b5:2e:79:61:8c:d8:7d:28:ea:91:90:f4:87:
                    58:29:da:7e:61:a2:5e:ca:62:e5:1e:27:ed:10:9b:
                    ba:1c:84:9c:8d:35:16:01:da:51:dc:b9:5d:35:86:
                    bc:9a:06:9b:5d:ab:80:16:8b:e2:f0:de:f5:43:a0:
                    20:63:cf:58:a7:41:4d:44:ef:7e:89:20:35:40:f7:
                    21:64:24:09:25:0e:43:0c:cd:0a:10:31:ae:1d:fe:
                    db:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:A5:45:24:1E:62:9B:49:32:DE:D1:2F:0E:7A:52:DA:FB:E1:0F:4B
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/0c521003-d261-4250-9d06-1aec68456dc3/0/
                RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/0c521003-d261-4250-9d06-1aec68456dc3/0/ECA545241E629B4932DED12F0E7A52DAFBE10F4B.mft
                RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  199177

    Signature Algorithm: sha256WithRSAEncryption
         05:6a:36:44:e2:83:4d:cc:cc:dd:64:ad:63:e0:18:b7:8c:a5:
         6b:2c:ed:f0:eb:6f:f2:2c:e4:3e:b3:87:0e:f8:50:27:55:ab:
         6a:54:29:6d:7f:1c:99:cc:36:4c:54:9f:36:13:17:53:44:57:
         f5:62:68:8b:d2:8a:ae:39:42:67:e0:ff:3d:06:d0:b3:5f:09:
         4a:21:97:c2:d7:23:32:5b:2c:67:62:6c:ff:a8:51:a2:fb:e9:
         5d:7b:2c:7b:4e:ce:bd:b7:28:f2:3a:0a:a5:84:39:c2:ad:60:
         7f:a4:5d:e1:a6:45:e5:6d:8b:0a:16:b2:96:9d:da:68:8b:90:
         bb:0a:7a:e0:03:26:07:27:1f:31:f7:d8:db:56:bb:ff:1e:db:
         50:90:46:ae:f1:39:18:58:16:32:eb:60:45:0b:c6:b3:dc:38:
         56:f4:d8:8d:5e:fe:85:4d:ed:a0:a9:ad:90:a1:90:2b:49:d8:
         aa:48:1a:96:b6:14:71:ad:1f:ea:b5:7b:be:45:cc:1b:53:7f:
         ff:1c:fa:b3:78:37:04:29:57:a4:f1:10:93:c9:32:78:74:61:
         ce:3a:f2:1d:aa:56:70:97:e4:1e:a4:e4:0f:57:f7:c9:96:5e:
         b5:5c:9d:98:50:4e:c0:98:1c:64:1f:7b:b4:33:2a:9f:ed:cc:
         8b:83:4c:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----