Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/AI0atKXxo9HdReukv1unirBHlRQ.cer
File:                     AI0atKXxo9HdReukv1unirBHlRQ.cer (raw, json)
Hash identifier:          +lfmr/RzDlQQ1noQ4RVaLvU4a/2iYsMvSoSVzNo0ByM=
Subject key identifier:   00:8D:1A:B4:A5:F1:A3:D1:DD:45:EB:A4:BF:5B:A7:8A:B0:47:95:14
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018CCA2A2AD0D9622A014E0BF5D237949547
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/a1/3c1d5b-9094-426a-9050-4e5f8bb879fe/1/AI0atKXxo9HdReukv1unirBHlRQ.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/a1/3c1d5b-9094-426a-9050-4e5f8bb879fe/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Tue 02 Jan 2024 12:33:30 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    AS: 213126

Validation:               Failed, certificate revoked on Tue 07 May 2024 10:16:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:ca:2a:2a:d0:d9:62:2a:01:4e:0b:f5:d2:37:94:95:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 12:33:30 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=008d1ab4a5f1a3d1dd45eba4bf5ba78ab0479514
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:12:48:bd:20:33:71:c2:4f:91:36:51:50:d7:
                    9f:d1:76:ec:90:77:dc:67:88:03:2f:a8:b6:e1:22:
                    03:17:9c:1e:ae:ac:3a:79:df:9d:55:a2:4a:5a:34:
                    48:a6:b2:1c:c8:86:bf:b3:8b:d1:f9:97:58:2a:ae:
                    24:37:d6:35:e9:64:f1:e8:a9:69:ac:7f:97:3f:dc:
                    17:18:2a:d8:9a:39:7a:89:3e:5c:f4:aa:b4:dd:5e:
                    1c:f7:1a:8c:2a:53:ab:8b:bf:16:5c:56:dc:0d:bd:
                    48:b0:aa:5d:e6:f2:94:6e:0d:b1:e2:14:76:28:7f:
                    a2:d6:6f:9a:fb:80:bc:67:b1:c7:1c:fa:a4:2f:46:
                    2c:ac:b2:b4:b5:f1:28:d9:49:b2:a3:61:f1:a4:66:
                    d2:a0:19:4b:c6:1f:3b:55:4f:71:53:41:07:95:03:
                    e5:6e:55:b1:24:2d:84:92:d7:01:41:63:82:c3:e6:
                    d9:2f:fc:a7:58:0c:d1:20:32:54:25:6c:f1:67:d0:
                    29:5b:2d:33:1e:75:77:fe:cf:cf:c9:ab:71:1c:1e:
                    78:e2:5a:5e:27:37:dd:ae:64:8c:88:16:9a:cc:dd:
                    7d:98:b6:23:8a:03:1a:e6:56:13:3d:21:b0:a9:fa:
                    f8:f3:31:bd:6b:6b:d4:c7:36:d1:eb:32:88:dd:a4:
                    a8:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:8D:1A:B4:A5:F1:A3:D1:DD:45:EB:A4:BF:5B:A7:8A:B0:47:95:14
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/3c1d5b-9094-426a-9050-4e5f8bb879fe/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/3c1d5b-9094-426a-9050-4e5f8bb879fe/1/AI0atKXxo9HdReukv1unirBHlRQ.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  213126

    Signature Algorithm: sha256WithRSAEncryption
         99:15:e7:33:ed:72:62:34:6c:fb:9b:4f:fd:07:05:4b:3b:71:
         2e:2e:54:59:f5:1b:fc:bd:12:2b:53:bc:65:a1:b8:70:87:7e:
         95:a5:9f:75:63:f2:5b:b2:e7:26:32:a4:98:1b:8f:fc:6b:69:
         1e:01:00:69:39:17:c4:6f:2a:17:eb:4d:f1:ab:e4:2f:0b:56:
         4c:08:e4:89:04:f5:1a:2f:94:d0:62:e9:a2:ea:9e:8b:38:51:
         9c:f3:03:92:49:d6:fd:75:12:1a:59:63:0a:d1:22:23:df:36:
         2c:23:a0:58:00:b1:9e:3c:bd:4b:33:72:be:89:b6:e8:b2:d1:
         b2:05:3f:d1:e3:94:86:91:8d:c7:7e:8c:3d:c7:93:ce:50:a5:
         16:6d:08:61:e2:47:e0:4f:e4:7b:3d:07:29:6e:bf:c3:a6:41:
         c9:44:33:d2:3c:11:ca:4d:11:29:2f:29:a3:3f:ec:f6:de:4a:
         b1:2a:4a:97:b9:22:13:34:1e:63:db:5f:b3:39:f1:c4:9f:e6:
         9c:a4:0d:f9:79:62:1c:3b:4c:c2:1c:32:b8:09:06:19:e8:0c:
         55:d3:f6:fa:00:42:6d:1f:93:d1:6b:b5:8e:47:d1:a1:f1:b6:
         0b:d6:83:f8:6f:e9:e1:82:b8:e8:c4:a5:6d:73:72:49:13:52:
         1c:df:3d:e7
-----BEGIN CERTIFICATE-----
MIIFczCCBFugAwIBAgISAYzKKirQ2WIqAU4L9dI3lJVHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAyMTIzMzMwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMDhkMWFiNGE1ZjFhM2QxZGQ0NWViYTRiZjViYTc4YWIwNDc5NTE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuBJIvSAzccJPkTZRUNef0XbskHfc
Z4gDL6i24SIDF5werqw6ed+dVaJKWjRIprIcyIa/s4vR+ZdYKq4kN9Y16WTx6Klp
rH+XP9wXGCrYmjl6iT5c9Kq03V4c9xqMKlOri78WXFbcDb1IsKpd5vKUbg2x4hR2
KH+i1m+a+4C8Z7HHHPqkL0YsrLK0tfEo2Umyo2HxpGbSoBlLxh87VU9xU0EHlQPl
blWxJC2EktcBQWOCw+bZL/ynWAzRIDJUJWzxZ9ApWy0zHnV3/s/PyatxHB544lpe
JzfdrmSMiBaazN19mLYjigMa5lYTPSGwqfr48zG9a2vUxzbR6zKI3aSo/wIDAQAB
o4ICfzCCAnswHQYDVR0OBBYEFACNGrSl8aPR3UXrpL9bp4qwR5UUMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2ExLzNjMWQ1
Yi05MDk0LTQyNmEtOTA1MC00ZTVmOGJiODc5ZmUvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTEvM2MxZDVi
LTkwOTQtNDI2YS05MDUwLTRlNWY4YmI4NzlmZS8xL0FJMGF0S1h4bzlIZFJldWt2
MXVuaXJCSGxSUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwNAhjANBgkqhkiG9w0BAQsFAAOCAQEAmRXnM+1yYjRs
+5tP/QcFSztxLi5UWfUb/L0SK1O8ZaG4cId+laWfdWPyW7LnJjKkmBuP/GtpHgEA
aTkXxG8qF+tN8avkLwtWTAjkiQT1Gi+U0GLpouqeizhRnPMDkknW/XUSGlljCtEi
I982LCOgWACxnjy9SzNyvom26LLRsgU/0eOUhpGNx36MPceTzlClFm0IYeJH4E/k
ez0HKW6/w6ZByUQz0jwRyk0RKS8poz/s9t5KsSpKl7kiEzQeY9tfsznxxJ/mnKQN
+XliHDtMwhwyuAkGGegMVdP2+gBCbR+T0Wu1jkfRofG2C9aD+G/p4YK46MSlbXNy
SRNSHN895w==
-----END CERTIFICATE-----