Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/AWT01sNnMtFRgQfYpMUPEP9y7Zw.cer
File:                     AWT01sNnMtFRgQfYpMUPEP9y7Zw.cer (raw, json)
Hash identifier:          Xe8kqPX5zW1m1LDGBa6plJ8/zwACEXHSF6MCudbsIro=
Subject key identifier:   01:64:F4:D6:C3:67:32:D1:51:81:07:D8:A4:C5:0F:10:FF:72:ED:9C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01922F82E67CBD544B117AAE086194F1008F
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/df/30dfe8-d26e-4082-b8ab-dc101dcc21fd/1/AWT01sNnMtFRgQfYpMUPEP9y7Zw.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/df/30dfe8-d26e-4082-b8ab-dc101dcc21fd/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 26 Sep 2024 18:06:00 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    AS: 214129

Validation:               Failed, certificate revoked on Mon 07 Oct 2024 14:25:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:2f:82:e6:7c:bd:54:4b:11:7a:ae:08:61:94:f1:00:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Sep 26 18:06:00 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=0164f4d6c36732d1518107d8a4c50f10ff72ed9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:e0:e7:3d:83:d5:8e:ea:2a:92:f7:4c:4b:be:
                    32:5f:0c:e6:19:92:20:87:bc:ad:b4:cb:7c:82:27:
                    a2:62:a0:49:3e:d5:91:63:d7:33:95:18:17:f3:e7:
                    58:49:f1:97:4a:ee:2e:9c:7d:8c:ed:8d:e9:07:12:
                    18:86:d5:14:62:55:d7:6e:bd:c8:44:59:14:c2:ac:
                    53:a7:05:c4:4c:ac:4b:c0:0a:59:4d:3e:78:50:ae:
                    6e:77:5a:b9:27:e3:8e:62:ea:5e:22:a5:1f:6f:a6:
                    80:8f:2b:1b:7c:f6:fa:29:81:7d:45:99:66:44:f6:
                    f9:cb:66:21:3e:5c:5a:6d:a0:2a:49:63:09:a8:fb:
                    d5:3c:7f:7c:86:1f:9e:20:b6:ba:1f:0f:69:30:61:
                    ad:1c:13:82:55:5d:48:63:dc:a6:16:25:aa:f5:b2:
                    c9:0d:f4:8b:17:81:90:77:75:cd:3d:1b:d4:1f:35:
                    25:5f:5c:e9:3e:9e:25:cb:94:f9:f2:12:40:e6:2a:
                    39:16:4a:97:e4:d9:50:a2:3d:ee:ff:35:83:09:42:
                    e9:fa:91:70:4e:ee:7a:da:a6:17:e4:56:14:ac:a4:
                    99:5a:40:01:24:ce:15:46:42:7f:aa:79:b8:5c:96:
                    bf:48:4c:ba:a3:91:c1:64:5a:8f:f7:98:7a:e8:76:
                    49:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:64:F4:D6:C3:67:32:D1:51:81:07:D8:A4:C5:0F:10:FF:72:ED:9C
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/30dfe8-d26e-4082-b8ab-dc101dcc21fd/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/30dfe8-d26e-4082-b8ab-dc101dcc21fd/1/AWT01sNnMtFRgQfYpMUPEP9y7Zw.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  214129

    Signature Algorithm: sha256WithRSAEncryption
         7a:a6:73:79:c2:ee:d5:60:da:34:a8:b0:e2:74:29:f4:17:1b:
         87:91:12:5d:c7:00:e1:47:36:28:08:4d:84:8c:50:72:a6:cd:
         0d:e6:6c:6f:ce:86:d0:01:18:00:a9:c2:31:5f:5b:3b:27:34:
         f3:b7:a4:e5:3c:00:86:13:cc:5c:2a:39:46:2e:1b:c5:8c:84:
         a0:ef:3e:be:55:ce:02:9a:e1:b0:19:54:db:e1:fe:64:fa:2c:
         2b:dd:03:0b:c3:3c:7b:fb:b8:53:03:d7:23:38:e6:88:79:86:
         e0:cb:a6:5d:49:8b:60:39:df:c2:73:a0:ec:48:58:b4:89:e3:
         0d:35:5d:05:ce:34:26:fc:40:43:9e:ee:d5:a1:3c:4f:e5:80:
         6e:c7:62:3f:ea:af:e4:08:af:40:ba:36:1d:c4:23:71:88:1f:
         c4:ef:d8:e9:fa:5c:13:96:2f:76:53:b0:1c:f3:d5:82:78:d6:
         bd:22:a3:78:96:6d:db:97:96:36:09:6e:d9:1d:5f:8d:75:d9:
         64:8f:b1:09:c1:c3:70:44:4a:3d:33:23:f7:30:ba:40:23:ab:
         9d:73:b8:b6:93:63:46:fa:f1:d1:4b:8f:00:06:f6:0d:1e:f2:
         1e:2e:02:ac:bd:f9:c3:b6:37:6a:a2:3f:8f:7f:75:d5:a3:c3:
         c4:cf:8d:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----