Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8aKpxc3Dse02993C2K35hKF8lok.cer
File:                     8aKpxc3Dse02993C2K35hKF8lok.cer (raw, json)
Hash identifier:          hnCICKJfyDSM+7kbkg7U7SEb09vaJgKiKW63p8dmZTY=
Subject key identifier:   F1:A2:A9:C5:CD:C3:B1:ED:36:F7:DD:C2:D8:AD:F9:84:A1:7C:96:89
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019038F778EE991451D5A1F3C0BB0EB5DABB
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rsync.paas.rpki.ripe.net/repository/d4370a16-e304-4e23-99d8-a0e33d9ffd67/0/F1A2A9C5CDC3B1ED36F7DDC2D8ADF984A17C9689.mft
caRepository:             rsync://rsync.paas.rpki.ripe.net/repository/d4370a16-e304-4e23-99d8-a0e33d9ffd67/0/
Notify URL:               https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before:   Fri 21 Jun 2024 04:04:20 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    AS: 215147

Validation:               Failed, certificate revoked on Fri 21 Jun 2024 07:17:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:38:f7:78:ee:99:14:51:d5:a1:f3:c0:bb:0e:b5:da:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jun 21 04:04:20 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=f1a2a9c5cdc3b1ed36f7ddc2d8adf984a17c9689
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:37:b5:d0:45:1d:2b:94:6d:cd:fa:54:9b:88:
                    1e:e4:12:87:d9:cb:21:5b:69:cf:8c:62:b5:fa:c3:
                    56:5d:60:07:9d:5f:26:40:69:21:d0:88:95:ea:d8:
                    13:81:e8:6d:21:d9:37:fe:f0:3d:1a:d4:7c:98:b9:
                    a0:3f:a4:fe:2b:9b:a1:3e:5c:61:cf:0e:cf:a4:b9:
                    f1:ad:8a:89:86:cb:68:ff:eb:4d:d3:9a:4e:6a:b1:
                    24:43:a7:c9:df:4d:ce:f0:12:3d:1b:be:87:41:11:
                    b5:2d:b6:05:d3:bb:a1:b7:37:56:a6:d3:e7:cb:a5:
                    5b:52:10:d2:dd:55:55:ba:bb:06:55:1b:f8:b2:60:
                    dd:0a:86:e4:98:01:49:6d:38:0e:d2:b8:73:53:0a:
                    18:e9:20:c3:c1:f3:06:76:32:62:b9:9b:3c:20:5b:
                    af:28:c4:08:75:4c:e0:fd:da:4f:ea:bc:8e:cb:f8:
                    7d:dc:dd:af:1b:9b:9c:5c:7a:e9:01:6b:da:d5:9a:
                    2f:7a:fe:35:d0:df:64:be:2c:72:d5:6b:81:5c:c2:
                    6f:e1:a1:4f:2d:dd:46:bd:79:67:e7:ec:f8:5e:ab:
                    a8:21:a8:24:02:fe:2e:33:97:14:94:95:c0:71:7e:
                    3d:d4:a8:55:b0:8b:68:19:d7:4b:54:c1:7f:b8:c2:
                    64:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:A2:A9:C5:CD:C3:B1:ED:36:F7:DD:C2:D8:AD:F9:84:A1:7C:96:89
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/d4370a16-e304-4e23-99d8-a0e33d9ffd67/0/
                RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/d4370a16-e304-4e23-99d8-a0e33d9ffd67/0/F1A2A9C5CDC3B1ED36F7DDC2D8ADF984A17C9689.mft
                RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  215147

    Signature Algorithm: sha256WithRSAEncryption
         1d:21:ae:df:fb:1a:14:58:10:eb:cf:ab:38:72:5a:be:2b:a4:
         c1:f5:76:cb:2d:58:b2:cb:0b:c8:a9:06:c4:9e:9e:16:57:0f:
         07:f2:44:4c:6f:67:fc:d3:a2:e5:f8:f8:2a:01:24:7e:c1:ad:
         4f:07:aa:78:da:8d:4f:94:70:cd:ff:8f:43:c3:76:de:7c:2f:
         20:52:ef:75:07:e7:ef:25:ba:7f:76:d5:67:08:47:f0:54:98:
         bf:13:68:a0:80:f8:4a:06:a5:79:6e:39:a3:f0:52:92:9f:b6:
         b4:71:91:54:bc:a1:fb:fc:7c:17:c0:1b:7d:73:d2:cf:e3:10:
         3a:de:f2:c7:e5:9e:16:cf:13:e5:e4:28:6f:fe:dd:c6:d9:4f:
         bc:eb:43:11:bf:c1:b8:fb:80:6f:2f:3f:48:17:6e:a0:a8:81:
         e9:d9:62:81:5f:e8:e3:74:58:3c:09:09:24:33:fc:aa:ac:3e:
         20:8f:e2:af:49:18:b9:b7:1f:91:13:85:b4:8d:b7:6a:6e:63:
         1d:12:00:c0:e2:50:60:a3:8a:99:57:27:f2:35:0f:62:6a:4d:
         bc:68:df:c2:5d:b5:5b:0e:8f:b1:6f:78:f2:7b:8e:3c:45:26:
         12:3e:4e:e9:93:74:e5:f1:49:57:b0:a7:ce:c9:71:56:5c:06:
         59:20:9d:b3
-----BEGIN CERTIFICATE-----
MIIFjzCCBHegAwIBAgISAZA493jumRRR1aHzwLsOtdq7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwNjIxMDQwNDIwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMWEyYTljNWNkYzNiMWVkMzZmN2RkYzJkOGFkZjk4NGExN2M5Njg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAije10EUdK5RtzfpUm4ge5BKH2csh
W2nPjGK1+sNWXWAHnV8mQGkh0IiV6tgTgehtIdk3/vA9GtR8mLmgP6T+K5uhPlxh
zw7PpLnxrYqJhsto/+tN05pOarEkQ6fJ303O8BI9G76HQRG1LbYF07uhtzdWptPn
y6VbUhDS3VVVursGVRv4smDdCobkmAFJbTgO0rhzUwoY6SDDwfMGdjJiuZs8IFuv
KMQIdUzg/dpP6ryOy/h93N2vG5ucXHrpAWva1Zovev410N9kvixy1WuBXMJv4aFP
Ld1GvXln5+z4XquoIagkAv4uM5cUlJXAcX491KhVsItoGddLVMF/uMJkXQIDAQAB
o4ICmzCCApcwHQYDVR0OBBYEFPGiqcXNw7HtNvfdwtit+YShfJaJMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggE/BggrBgEFBQcBCwSCATEwggEtMF8GCCsGAQUFBzAFhlNy
c3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2Q0Mzcw
YTE2LWUzMDQtNGUyMy05OWQ4LWEwZTMzZDlmZmQ2Ny8wLzCBiwYIKwYBBQUHMAqG
f3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZDQz
NzBhMTYtZTMwNC00ZTIzLTk5ZDgtYTBlMzNkOWZmZDY3LzAvRjFBMkE5QzVDREMz
QjFFRDM2RjdEREMyRDhBREY5ODRBMTdDOTY4OS5tZnQwPAYIKwYBBQUHMA2GMGh0
dHBzOi8vcnJkcC5wYWFzLnJwa2kucmlwZS5uZXQvbm90aWZpY2F0aW9uLnhtbDBZ
BgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jcmwwGAYDVR0g
AQH/BA4wDDAKBggrBgEFBQcOAjAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMDSGsw
DQYJKoZIhvcNAQELBQADggEBAB0hrt/7GhRYEOvPqzhyWr4rpMH1dsstWLLLC8ip
BsSenhZXDwfyRExvZ/zTouX4+CoBJH7BrU8HqnjajU+UcM3/j0PDdt58LyBS73UH
5+8lun921WcIR/BUmL8TaKCA+EoGpXluOaPwUpKftrRxkVS8ofv8fBfAG31z0s/j
EDre8sflnhbPE+XkKG/+3cbZT7zrQxG/wbj7gG8vP0gXbqCogenZYoFf6ON0WDwJ
CSQz/KqsPiCP4q9JGLm3H5EThbSNt2puYx0SAMDiUGCjiplXJ/I1D2JqTbxo38Jd
tVsOj7FvePJ7jjxFJhI+TumTdOXxSVewp87JcVZcBlkgnbM=
-----END CERTIFICATE-----