Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/AG5kPQtn9LMz_qzcRhbU5PPeMs0.cer
File:                     AG5kPQtn9LMz_qzcRhbU5PPeMs0.cer (raw, json)
Hash identifier:          HAwqIz+BYLvzg443eFJwiRSyozD7tZxidpVufZtsGYQ=
Subject key identifier:   00:6E:64:3D:0B:67:F4:B3:33:FE:AC:DC:46:16:D4:E4:F3:DE:32:CD
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018A27863F520B127DD8B0496E9F0F55B07E
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/f0/b7aa7b-97c2-4bd8-8caa-dcce28e9346a/1/AG5kPQtn9LMz_qzcRhbU5PPeMs0.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/f0/b7aa7b-97c2-4bd8-8caa-dcce28e9346a/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 24 Aug 2023 12:30:24 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    AS: 204703

Validation:               Failed, certificate revoked on Tue 05 Dec 2023 13:55:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:27:86:3f:52:0b:12:7d:d8:b0:49:6e:9f:0f:55:b0:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Aug 24 12:30:24 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=006e643d0b67f4b333feacdc4616d4e4f3de32cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:62:85:10:3a:67:3d:02:69:25:bb:25:cf:b0:
                    ae:a6:65:fd:83:b9:b7:9e:a5:fa:83:3a:2c:0a:d0:
                    73:b0:f4:13:fa:c7:6b:e2:35:0c:d6:19:b2:95:4e:
                    8a:8d:c9:2d:c0:94:78:f2:58:bf:0d:b0:55:a0:0f:
                    4a:4d:f8:da:32:4e:48:bc:29:60:92:85:f0:fb:85:
                    4e:86:19:92:22:2a:4e:89:65:f1:68:0b:59:05:4b:
                    62:a2:f6:87:e3:80:d1:34:b0:d0:74:44:5f:79:c2:
                    bd:a8:08:55:35:62:22:1e:fd:51:a9:53:4e:7c:79:
                    ec:ab:e5:ad:c1:19:79:14:b2:f7:4b:d8:4f:f5:d4:
                    0f:51:e6:93:18:68:91:22:ae:6a:36:46:6e:28:ce:
                    a4:a5:6b:76:97:d6:11:31:44:e7:58:82:92:64:34:
                    7b:51:96:ad:c1:67:65:fa:a0:90:87:c8:6b:21:d6:
                    c8:22:16:8c:51:94:02:4e:d4:99:67:74:ef:f6:f8:
                    b5:5a:dd:b1:ec:2f:ab:10:72:95:4f:04:19:1f:34:
                    91:bf:8a:ca:09:5e:e7:17:6d:29:12:e3:ab:50:da:
                    96:f9:1e:b9:2d:14:af:c3:96:9f:c1:f4:1c:f2:32:
                    e3:39:90:60:fa:e6:71:05:cd:b0:34:b0:52:9a:9c:
                    14:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:6E:64:3D:0B:67:F4:B3:33:FE:AC:DC:46:16:D4:E4:F3:DE:32:CD
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/b7aa7b-97c2-4bd8-8caa-dcce28e9346a/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/b7aa7b-97c2-4bd8-8caa-dcce28e9346a/1/AG5kPQtn9LMz_qzcRhbU5PPeMs0.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  204703

    Signature Algorithm: sha256WithRSAEncryption
         5d:c0:0d:5e:24:e1:e2:6e:db:db:b3:28:2a:c4:a8:35:1b:70:
         f0:e2:91:3a:25:96:ae:ce:f3:b6:e0:4e:09:74:f1:55:d8:bb:
         8a:1d:49:90:55:53:65:27:3a:bb:61:40:f9:dc:19:14:ab:22:
         cf:4c:84:e3:55:58:4d:54:dc:4e:32:3b:44:31:98:1f:ed:4c:
         97:24:f4:77:7a:0d:d6:37:a1:43:fe:2a:f8:90:6d:cf:a1:98:
         8b:69:cc:af:53:60:38:53:68:1e:5d:d1:42:9b:5f:bb:c9:cd:
         ba:75:67:00:d6:c4:18:11:c7:92:72:60:38:ab:a3:25:d4:a6:
         c6:c2:c0:88:51:51:f2:66:0c:c8:b9:68:fa:36:e9:9d:f0:10:
         6b:25:d4:52:77:72:19:c7:44:90:19:14:8a:83:88:e4:80:c6:
         eb:42:bc:50:86:77:8c:9a:1e:af:96:ea:62:93:8b:66:f9:33:
         9b:f7:09:5b:4d:a2:2f:a1:bd:e0:e7:22:de:e2:b0:60:f1:02:
         2a:bf:de:80:e9:d6:c3:83:72:56:c5:c4:e9:a0:35:19:d8:cc:
         77:b0:80:5b:aa:1c:05:90:46:6c:c8:97:5d:50:1d:d1:6c:b4:
         b5:c8:c6:2a:3e:ff:9d:bd:7d:d5:38:a8:19:ab:bf:ae:be:7f:
         4b:72:2d:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----