Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7eFvhR6sjKf4alyG9IvmFvDWTiw.cer
File:                     7eFvhR6sjKf4alyG9IvmFvDWTiw.cer (raw, json)
Hash identifier:          /w2VgUfNuvBauHicD6OIMv3JCeUEBtEa1vAXC4/uHHY=
Subject key identifier:   ED:E1:6F:85:1E:AC:8C:A7:F8:6A:5C:86:F4:8B:E6:16:F0:D6:4E:2C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856FB01FAC80FEBF28158A7165FEF7C815
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/f7/3b7dda-57b2-4b59-8ddc-673132c187a9/1/7eFvhR6sjKf4alyG9IvmFvDWTiw.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/f7/3b7dda-57b2-4b59-8ddc-673132c187a9/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 23:34:51 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    AS: 39335

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:b0:1f:ac:80:fe:bf:28:15:8a:71:65:fe:f7:c8:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 23:34:51 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=ede16f851eac8ca7f86a5c86f48be616f0d64e2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:bd:91:d4:14:3f:75:97:30:02:8c:f8:a3:90:
                    b0:3f:06:5a:a2:c2:ad:60:4f:0f:db:ae:ad:6b:a2:
                    92:43:cd:9f:6a:c1:01:48:cc:ec:ee:e2:ca:6e:18:
                    3c:a6:d6:20:4b:b6:f5:ab:fb:b7:8a:31:31:51:2f:
                    a4:f2:54:ac:c5:52:0b:f0:03:82:e2:2a:a2:fd:2c:
                    68:c9:ba:24:fa:4a:bb:5a:13:55:da:e7:be:00:36:
                    88:6c:9a:2f:d4:9f:a7:9f:e6:e2:af:19:0a:26:e0:
                    c0:a8:b4:03:b2:74:c1:b5:53:81:18:d9:67:37:1e:
                    4f:0d:17:bc:17:ae:d6:df:e6:1a:8e:e4:a2:5d:17:
                    b8:43:15:8c:0d:8b:72:3d:b7:3f:88:09:48:75:5e:
                    fa:0f:92:6c:22:bc:d9:42:db:05:17:94:a3:b8:c7:
                    22:d4:31:af:c4:4b:73:31:b4:20:10:ef:91:18:54:
                    d8:fc:53:f7:0c:4c:5f:81:96:0e:c4:ac:09:a3:6b:
                    00:3e:69:24:d5:86:68:f7:46:ef:44:79:79:fd:8f:
                    25:65:b4:ec:c6:0e:ee:80:65:43:2f:a4:c3:da:97:
                    92:3e:9c:dd:68:82:a6:8a:5b:2e:da:d2:7e:a2:93:
                    31:4d:25:59:ae:38:49:e1:90:9e:18:e7:2d:5a:bb:
                    8d:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:E1:6F:85:1E:AC:8C:A7:F8:6A:5C:86:F4:8B:E6:16:F0:D6:4E:2C
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/3b7dda-57b2-4b59-8ddc-673132c187a9/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/3b7dda-57b2-4b59-8ddc-673132c187a9/1/7eFvhR6sjKf4alyG9IvmFvDWTiw.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  39335

    Signature Algorithm: sha256WithRSAEncryption
         86:11:35:9c:a4:c5:c0:c6:1b:39:88:c2:cd:a3:2d:f6:dd:b5:
         eb:eb:fd:36:81:24:53:a0:e0:14:c0:78:47:78:96:51:11:33:
         cd:2d:db:b3:bd:64:2d:36:80:54:5b:62:73:4a:62:a2:63:e7:
         dc:fc:b7:88:59:11:45:2b:f4:88:bc:f3:67:ca:20:43:ac:7e:
         8c:53:f1:4f:9f:cd:bb:b5:ad:ca:dc:8a:7c:8f:54:12:68:6e:
         53:76:be:cf:8d:d0:ac:7c:c0:37:ca:d1:f4:c2:88:18:2e:de:
         79:ac:d3:53:a1:e6:cb:90:fa:6f:31:0e:7b:21:7d:49:ff:34:
         da:6f:d3:31:5e:e1:f5:24:a3:ff:2c:7f:a5:4d:ee:1e:fa:83:
         75:fb:b6:ab:74:d4:2c:21:9a:5e:58:10:02:fd:9b:83:73:91:
         50:3a:49:1a:ea:96:c3:e7:1e:5f:6c:64:27:06:74:4c:d7:f0:
         c8:4b:33:82:39:1f:a5:d8:db:f0:9d:6f:8e:fd:e6:b4:50:cb:
         6c:86:3b:e9:72:8e:8e:ff:05:e2:25:84:a7:44:0e:af:00:03:
         0a:d7:8f:38:01:ae:38:c6:21:ab:70:b6:fb:ab:b4:bd:92:75:
         56:fa:7f:3d:24:af:7d:2a:d2:cf:9a:87:69:f2:fb:e3:05:be:
         81:64:5e:77
-----BEGIN CERTIFICATE-----
MIIFczCCBFugAwIBAgISAYVvsB+sgP6/KBWKcWX+98gVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjMwMTAxMjMzNDUxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZGUxNmY4NTFlYWM4Y2E3Zjg2YTVjODZmNDhiZTYxNmYwZDY0ZTJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnr2R1BQ/dZcwAoz4o5CwPwZaosKt
YE8P266ta6KSQ82fasEBSMzs7uLKbhg8ptYgS7b1q/u3ijExUS+k8lSsxVIL8AOC
4iqi/Sxoybok+kq7WhNV2ue+ADaIbJov1J+nn+birxkKJuDAqLQDsnTBtVOBGNln
Nx5PDRe8F67W3+YajuSiXRe4QxWMDYtyPbc/iAlIdV76D5JsIrzZQtsFF5SjuMci
1DGvxEtzMbQgEO+RGFTY/FP3DExfgZYOxKwJo2sAPmkk1YZo90bvRHl5/Y8lZbTs
xg7ugGVDL6TD2peSPpzdaIKmilsu2tJ+opMxTSVZrjhJ4ZCeGOctWruNFwIDAQAB
o4ICfzCCAnswHQYDVR0OBBYEFO3hb4UerIyn+GpchvSL5hbw1k4sMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Y3LzNiN2Rk
YS01N2IyLTRiNTktOGRkYy02NzMxMzJjMTg3YTkvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjcvM2I3ZGRh
LTU3YjItNGI1OS04ZGRjLTY3MzEzMmMxODdhOS8xLzdlRnZoUjZzaktmNGFseUc5
SXZtRnZEV1Rpdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwCZpzANBgkqhkiG9w0BAQsFAAOCAQEAhhE1nKTFwMYb
OYjCzaMt9t216+v9NoEkU6DgFMB4R3iWUREzzS3bs71kLTaAVFtic0piomPn3Py3
iFkRRSv0iLzzZ8ogQ6x+jFPxT5/Nu7WtytyKfI9UEmhuU3a+z43QrHzAN8rR9MKI
GC7eeazTU6Hmy5D6bzEOeyF9Sf802m/TMV7h9SSj/yx/pU3uHvqDdfu2q3TULCGa
XlgQAv2bg3ORUDpJGuqWw+ceX2xkJwZ0TNfwyEszgjkfpdjb8J1vjv3mtFDLbIY7
6XKOjv8F4iWEp0QOrwADCtePOAGuOMYhq3C2+6u0vZJ1Vvp/PSSvfSrSz5qHafL7
4wW+gWRedw==
-----END CERTIFICATE-----
Generated at Tue Oct 31 15:52:34 2023 by rpki-client on console-ams.rpki-client.org