Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7epwxgNz0kHAao8YUMo19t6tzfM.cer
File:                     7epwxgNz0kHAao8YUMo19t6tzfM.cer (raw, json)
Hash identifier:          6e0DIqvrGi/Ay26YKW27UoMFw4q+tBX5lo3AYwrxiao=
Subject key identifier:   ED:EA:70:C6:03:73:D2:41:C0:6A:8F:18:50:CA:35:F6:DE:AD:CD:F3
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01900802B5A166AF11C4CF456925D26F780B
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/ad/7bf65e-0b08-4e23-ae9d-025e62d3db45/1/7epwxgNz0kHAao8YUMo19t6tzfM.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/ad/7bf65e-0b08-4e23-ae9d-025e62d3db45/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Tue 11 Jun 2024 15:55:13 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    AS: 214723

Validation:               Failed, certificate revoked on Sat 22 Jun 2024 15:24:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:08:02:b5:a1:66:af:11:c4:cf:45:69:25:d2:6f:78:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jun 11 15:55:13 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=edea70c60373d241c06a8f1850ca35f6deadcdf3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:8c:2d:05:b3:48:85:da:9e:98:4f:7d:6f:9c:
                    c6:7c:57:5e:bf:38:2f:f6:33:46:8b:50:53:ca:15:
                    0e:59:14:08:38:dd:39:6b:3e:4e:cb:92:ab:2a:1c:
                    2d:5e:95:e2:c2:3d:4c:7a:dd:6a:92:89:04:94:b0:
                    1b:e5:0c:4f:4d:91:8f:05:f4:fa:3f:6a:e6:e8:66:
                    40:03:5a:48:fd:ce:f4:02:b4:ab:03:00:e6:df:c3:
                    4c:cf:cd:f7:c1:04:f6:0c:8c:6b:7b:1a:15:2f:6c:
                    e0:47:d9:3a:dc:f2:d6:0e:56:1c:71:6c:87:fa:57:
                    d5:02:e6:58:41:aa:2e:ef:4f:22:f7:bc:80:6b:81:
                    8f:ae:06:1b:b5:1e:61:e6:8c:74:5a:9c:f2:9b:a9:
                    5b:4e:c7:54:3e:b6:47:24:78:d7:87:c5:bd:73:c3:
                    ae:da:2f:a6:c9:b9:e1:eb:9e:c3:db:c1:f3:a4:25:
                    0f:ac:0e:25:2b:ca:12:c2:1c:15:bc:bd:b2:73:63:
                    d3:bc:b8:1b:64:cd:56:a5:bb:68:11:47:76:d9:aa:
                    ce:ce:d3:60:71:0e:34:da:71:37:7c:f2:ad:7d:3f:
                    f8:36:f0:83:10:fe:4f:b6:2c:59:01:c2:f8:48:72:
                    44:38:92:d7:22:82:6c:8b:3c:d0:b7:5c:d4:79:25:
                    4d:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:EA:70:C6:03:73:D2:41:C0:6A:8F:18:50:CA:35:F6:DE:AD:CD:F3
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/7bf65e-0b08-4e23-ae9d-025e62d3db45/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/7bf65e-0b08-4e23-ae9d-025e62d3db45/1/7epwxgNz0kHAao8YUMo19t6tzfM.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  214723

    Signature Algorithm: sha256WithRSAEncryption
         2a:34:7e:19:26:83:d0:fb:c4:65:a6:e3:39:08:4e:b3:74:37:
         a8:2e:b5:52:09:35:23:9e:00:fa:48:2f:9c:a8:9e:3f:1e:60:
         97:3e:22:b3:8a:6f:e9:7a:ff:cd:51:58:36:85:84:94:ba:0d:
         03:d6:02:2f:44:f5:4b:12:42:a8:24:c6:59:ef:5b:cd:35:c8:
         6e:49:f9:4a:86:9c:01:cc:4c:f1:f3:f7:10:59:62:25:0a:61:
         a2:c4:78:61:20:3a:b3:e1:34:7e:df:f7:3f:a4:18:1f:98:49:
         66:68:99:0a:94:a2:0c:82:a5:3d:ff:04:4c:ea:e1:7f:cb:4e:
         53:df:e5:ff:31:7b:d3:ef:b2:dc:49:fc:90:14:45:10:eb:e4:
         60:e0:0f:84:ad:4e:02:bf:ee:98:38:44:aa:0a:10:cd:94:5c:
         05:2b:71:ba:b2:c7:d5:b3:43:b5:15:0b:30:15:db:fc:8c:3f:
         aa:1b:32:8b:e3:ae:b5:b2:ba:3d:f9:bf:8d:e8:b2:ed:f0:c1:
         d4:9b:61:d3:d0:81:47:92:f7:c9:95:f4:c6:a2:04:f0:2f:6d:
         aa:f6:22:ab:b6:3f:f3:42:75:34:e4:ee:61:29:66:fa:53:40:
         dc:ae:a9:67:73:51:4e:8e:d9:2f:10:07:8b:3c:21:77:11:47:
         c9:2f:02:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----