Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8LfiHQbWIS4HnAY6shJpKLpPj9Y.cer
File:                     8LfiHQbWIS4HnAY6shJpKLpPj9Y.cer (raw, json)
Hash identifier:          NcGjFG7dQmwvfSbS3mSdiOiVMassAf4aWFOXmCb2f+0=
Subject key identifier:   F0:B7:E2:1D:06:D6:21:2E:07:9C:06:3A:B2:12:69:28:BA:4F:8F:D6
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856BD1158DF3129D87EFD93B18478C3DA8
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/e7/40d627-ac45-466c-a9fd-0cb65dfa1c7c/1/8LfiHQbWIS4HnAY6shJpKLpPj9Y.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/e7/40d627-ac45-466c-a9fd-0cb65dfa1c7c/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 05:32:22 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    AS: 210880

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6b:d1:15:8d:f3:12:9d:87:ef:d9:3b:18:47:8c:3d:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 05:32:22 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=f0b7e21d06d6212e079c063ab2126928ba4f8fd6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:e0:c5:86:48:5a:36:23:d4:52:49:0d:a9:90:
                    71:42:02:bd:71:78:6b:4c:6d:04:8e:72:91:29:e4:
                    62:95:81:37:d1:d3:02:23:b0:a0:64:4e:cf:d4:b8:
                    a1:5a:03:a9:2c:6b:8d:49:d8:5f:80:7e:a7:c4:ea:
                    3d:81:d4:ec:18:21:32:8a:48:f2:78:bc:da:7d:94:
                    4b:05:5b:b5:45:12:61:2c:7c:3c:b9:a6:d8:d7:d0:
                    ec:c9:2e:cc:72:9e:48:96:57:86:de:85:15:3d:a2:
                    cb:cb:d5:70:15:8e:c1:d6:f5:fc:6d:2c:fa:2d:d5:
                    88:54:b2:a4:e7:7f:fd:9a:10:8e:b2:e7:8d:0e:d1:
                    e5:d7:7b:18:5d:1d:55:3c:fc:ed:b9:d4:55:c9:50:
                    b2:90:52:3c:24:1e:55:d0:9d:33:98:80:f1:9e:49:
                    74:8e:40:16:cb:f3:1d:3f:7a:f4:bf:cf:77:d6:ff:
                    00:a1:9c:e0:0f:8c:25:2a:ea:f3:38:c7:8d:e4:36:
                    20:a8:ad:e7:ea:c2:64:cf:84:04:89:57:aa:02:85:
                    8e:70:c2:c2:a6:ad:08:ce:a2:fb:63:4e:b5:72:e3:
                    fb:e6:43:71:79:25:2e:50:d4:a2:45:2b:db:49:49:
                    00:bb:b3:1c:e4:29:d3:83:a6:ce:63:4a:70:7b:af:
                    e1:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:B7:E2:1D:06:D6:21:2E:07:9C:06:3A:B2:12:69:28:BA:4F:8F:D6
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/40d627-ac45-466c-a9fd-0cb65dfa1c7c/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/40d627-ac45-466c-a9fd-0cb65dfa1c7c/1/8LfiHQbWIS4HnAY6shJpKLpPj9Y.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  210880

    Signature Algorithm: sha256WithRSAEncryption
         30:02:06:ba:57:c6:dc:4b:9c:32:eb:6d:61:2e:39:d8:d2:fb:
         3b:79:d6:a0:71:e3:79:c0:9d:fc:a2:94:db:49:6a:68:25:01:
         bb:42:b8:c7:7a:37:f8:e5:30:0b:78:75:84:67:be:97:45:1d:
         57:86:fc:75:a1:ae:8c:44:de:fc:87:21:ab:29:d7:32:3d:50:
         b3:9e:69:7b:99:1f:5a:d9:81:12:d6:cd:68:a4:d2:39:3e:f2:
         f8:4d:88:9a:42:40:e6:07:73:97:c5:da:7c:9e:64:19:5d:79:
         4d:e4:7a:da:a5:43:89:7a:ef:19:3b:b8:d4:9f:53:d9:2f:f9:
         73:23:76:e8:8a:5d:4d:ba:71:32:67:b5:a1:51:8e:42:9d:a6:
         e3:cd:c1:b2:cf:54:8c:70:16:5d:d3:ed:10:a1:19:d4:c9:7a:
         a2:20:ec:9b:20:ee:b0:47:94:8f:a6:5e:a6:e4:e7:00:73:83:
         26:79:d1:8e:94:1a:6c:92:88:12:09:ab:0a:e0:28:e2:15:1a:
         79:e8:14:fc:59:96:b6:ea:6a:6a:41:33:6d:f5:d1:89:48:00:
         be:ed:dc:71:1b:45:88:65:a2:72:7d:e0:99:5a:cf:c7:36:99:
         aa:a3:10:9e:d8:fc:a9:a6:12:ad:98:73:52:8d:0c:96:20:32:
         af:35:f6:fe
-----BEGIN CERTIFICATE-----
MIIFczCCBFugAwIBAgISAYVr0RWN8xKdh+/ZOxhHjD2oMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjMwMTAxMDUzMjIyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMGI3ZTIxZDA2ZDYyMTJlMDc5YzA2M2FiMjEyNjkyOGJhNGY4ZmQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxODFhkhaNiPUUkkNqZBxQgK9cXhr
TG0EjnKRKeRilYE30dMCI7CgZE7P1LihWgOpLGuNSdhfgH6nxOo9gdTsGCEyikjy
eLzafZRLBVu1RRJhLHw8uabY19DsyS7Mcp5IlleG3oUVPaLLy9VwFY7B1vX8bSz6
LdWIVLKk53/9mhCOsueNDtHl13sYXR1VPPztudRVyVCykFI8JB5V0J0zmIDxnkl0
jkAWy/MdP3r0v8931v8AoZzgD4wlKurzOMeN5DYgqK3n6sJkz4QEiVeqAoWOcMLC
pq0IzqL7Y061cuP75kNxeSUuUNSiRSvbSUkAu7Mc5CnTg6bOY0pwe6/hAwIDAQAB
o4ICfzCCAnswHQYDVR0OBBYEFPC34h0G1iEuB5wGOrISaSi6T4/WMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2U3LzQwZDYy
Ny1hYzQ1LTQ2NmMtYTlmZC0wY2I2NWRmYTFjN2MvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTcvNDBkNjI3
LWFjNDUtNDY2Yy1hOWZkLTBjYjY1ZGZhMWM3Yy8xLzhMZmlIUWJXSVM0SG5BWTZz
aEpwS0xwUGo5WS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwM3wDANBgkqhkiG9w0BAQsFAAOCAQEAMAIGulfG3Euc
MuttYS452NL7O3nWoHHjecCd/KKU20lqaCUBu0K4x3o3+OUwC3h1hGe+l0UdV4b8
daGujETe/IchqynXMj1Qs55pe5kfWtmBEtbNaKTSOT7y+E2ImkJA5gdzl8XafJ5k
GV15TeR62qVDiXrvGTu41J9T2S/5cyN26IpdTbpxMme1oVGOQp2m483Bss9UjHAW
XdPtEKEZ1Ml6oiDsmyDusEeUj6ZepuTnAHODJnnRjpQabJKIEgmrCuAo4hUaeegU
/FmWtupqakEzbfXRiUgAvu3ccRtFiGWicn3gmVrPxzaZqqMQntj8qaYSrZhzUo0M
liAyrzX2/g==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:59:05 2023 by rpki-client on console-fra.rpki-client.org