Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9C_c9TnePMRQDpsuO55CnYvMVPQ.cer
File:                     9C_c9TnePMRQDpsuO55CnYvMVPQ.cer (raw, json)
Hash identifier:          bXqvr02eL2f7NhD29A20NAL5wl2GzHX3aC/ckBZQg9o=
Subject key identifier:   F4:2F:DC:F5:39:DE:3C:C4:50:0E:9B:2E:3B:9E:42:9D:8B:CC:54:F4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018CC8DFB0DEA8C0D4DEB95FADA30CFC4D48
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/3f/5affea-4211-4e0d-a797-a9af1a25ef20/1/9C_c9TnePMRQDpsuO55CnYvMVPQ.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/3f/5affea-4211-4e0d-a797-a9af1a25ef20/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Tue 02 Jan 2024 06:32:32 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    AS: 210740

Validation:               Failed, certificate revoked on Thu 21 Mar 2024 10:12:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c8:df:b0:de:a8:c0:d4:de:b9:5f:ad:a3:0c:fc:4d:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 06:32:32 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=f42fdcf539de3cc4500e9b2e3b9e429d8bcc54f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:28:5a:92:d4:cd:0d:4d:16:c1:73:6f:11:72:
                    b9:fe:a9:c9:b7:27:c2:46:89:4c:2d:72:93:b1:ec:
                    b4:ba:3e:89:97:11:10:e1:89:27:50:91:89:44:5e:
                    16:99:d7:ac:19:f4:d6:cf:1c:f2:d3:79:b5:61:a4:
                    43:88:29:02:5c:df:b2:0b:fe:ea:5e:fe:5e:d2:59:
                    5c:e6:99:66:f7:98:8c:1f:a3:60:5b:57:a6:99:a2:
                    d8:7f:4a:28:41:39:23:c6:f9:f2:0f:75:9d:97:67:
                    aa:aa:96:9a:e3:c6:bc:ae:df:e7:c0:75:37:95:1d:
                    ff:4f:be:5e:3c:69:06:ac:16:21:8f:18:4f:0d:e6:
                    b5:77:92:ab:71:45:d7:de:09:c8:7b:b0:ff:0e:47:
                    65:c6:09:37:22:81:6d:01:ec:84:23:8d:31:15:72:
                    4b:a6:5c:79:2b:2f:90:d0:bf:24:5b:8c:45:e2:83:
                    aa:0b:67:b5:d1:90:0d:f6:35:e4:25:cb:0b:f0:c8:
                    bc:77:45:34:af:a6:3f:61:59:ae:e2:84:64:ae:71:
                    e4:9e:4f:3f:2a:1b:81:80:d3:48:e4:0e:2d:a9:9a:
                    11:73:a1:0e:d7:17:e5:16:b6:ba:8c:6c:75:ad:79:
                    77:93:44:1d:b7:9d:04:d5:91:71:bb:c5:90:a0:4e:
                    cd:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:2F:DC:F5:39:DE:3C:C4:50:0E:9B:2E:3B:9E:42:9D:8B:CC:54:F4
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/5affea-4211-4e0d-a797-a9af1a25ef20/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/5affea-4211-4e0d-a797-a9af1a25ef20/1/9C_c9TnePMRQDpsuO55CnYvMVPQ.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  210740

    Signature Algorithm: sha256WithRSAEncryption
         5b:2c:57:b7:65:6a:77:a0:f1:b3:95:10:35:54:37:03:5c:b4:
         2b:0e:fa:58:15:72:ac:89:84:6d:97:a4:a9:f0:e5:d1:c5:ad:
         5b:17:81:82:b4:e9:f3:16:65:8b:96:1b:68:4a:99:ac:7a:a9:
         f1:c2:49:92:da:7b:ce:09:e0:09:64:9c:33:c1:bd:55:45:45:
         3f:40:8f:19:1a:a6:1c:10:0e:38:49:00:a7:87:95:7f:08:c9:
         fc:4d:aa:3d:4b:c8:d1:34:4a:fb:61:bd:5c:2d:e2:61:86:c2:
         a8:1d:4b:44:ba:20:64:9d:1e:cd:e1:5f:25:16:d7:ed:21:0f:
         8b:25:21:8b:87:da:f9:8d:56:22:65:53:bc:4a:02:0f:8c:69:
         a0:cb:0e:42:1d:e2:d8:19:95:0d:4b:b5:15:e0:b4:ed:18:38:
         64:5f:4e:2f:19:b1:2d:8a:f4:3c:61:df:a8:a0:42:9a:ac:b4:
         49:14:1f:12:df:51:48:8a:ab:ec:e4:91:dc:64:5b:51:67:99:
         f7:f1:bd:5e:21:36:09:53:89:aa:ca:2f:ef:18:d5:a9:aa:c2:
         fd:43:f6:6b:d5:b2:8d:09:aa:54:2b:7b:1d:c0:6c:73:70:36:
         18:f4:e0:43:59:e7:6b:84:16:70:a3:06:12:b6:b9:e5:75:08:
         5c:06:ab:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----