Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/AhY0FmJ8TAWV9x9Y5IHTULUYj28.cer
File:                     AhY0FmJ8TAWV9x9Y5IHTULUYj28.cer (raw, json)
Hash identifier:          +kpO+V44uSXB6ZzDBW2pznt9Z33HrEwKjoL54dZABeM=
Subject key identifier:   02:16:34:16:62:7C:4C:05:95:F7:1F:58:E4:81:D3:50:B5:18:8F:6F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018D574919A519A439791E72CEB1084E07F6
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rsync.paas.rpki.ripe.net/repository/f9235055-1904-44b4-998b-ff1c9e311c49/15/02163416627C4C0595F71F58E481D350B5188F6F.mft
caRepository:             rsync://rsync.paas.rpki.ripe.net/repository/f9235055-1904-44b4-998b-ff1c9e311c49/15
Notify URL:               https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before:   Mon 29 Jan 2024 22:13:44 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    AS: 47473
                          IP: 93.186.80.0/20
                          IP: 2a02:518::/32

Validation:               Failed, certificate revoked on Wed 07 Feb 2024 15:15:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8d:57:49:19:a5:19:a4:39:79:1e:72:ce:b1:08:4e:07:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan 29 22:13:44 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=02163416627c4c0595f71f58e481d350b5188f6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:98:30:6e:91:12:03:5d:6e:a7:09:68:76:9b:
                    92:88:78:02:3b:64:bd:5d:da:49:81:58:35:9b:b7:
                    db:73:43:22:62:a8:87:a6:26:eb:4b:18:ce:76:c9:
                    4a:92:43:6d:c6:ed:e6:b2:41:93:8c:85:ed:c0:e3:
                    70:f1:2b:f7:cc:05:41:2e:04:b6:59:be:76:9f:f4:
                    58:e3:0b:0f:86:fe:58:c4:d8:5e:e8:bf:83:26:49:
                    df:39:ad:a0:5d:bc:8f:a3:0c:ca:b2:2b:81:b8:dd:
                    f0:ce:eb:19:e4:b4:ef:88:ee:24:30:a3:53:91:81:
                    42:b5:13:1a:04:43:7e:15:e0:0a:71:23:47:5b:e3:
                    2c:eb:76:b7:da:19:68:b1:05:da:23:9d:11:85:87:
                    80:e8:b5:e0:4d:0a:0a:74:3e:66:28:0f:f3:68:4f:
                    f5:6e:d5:8b:98:5b:08:65:25:48:bc:bb:65:f4:93:
                    c1:d2:21:26:59:2d:6c:b6:77:75:ef:5c:71:78:e7:
                    9b:8b:7a:87:0b:e8:09:a3:56:59:ae:01:d6:94:a6:
                    28:b8:33:6e:85:1e:3b:37:25:02:ac:21:02:47:14:
                    6b:c7:26:d3:9e:12:46:99:f9:c0:0d:40:5b:3d:2e:
                    1a:cd:69:de:7c:06:66:7b:41:28:3a:ef:d0:16:b6:
                    6d:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:16:34:16:62:7C:4C:05:95:F7:1F:58:E4:81:D3:50:B5:18:8F:6F
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/f9235055-1904-44b4-998b-ff1c9e311c49/15
                RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/f9235055-1904-44b4-998b-ff1c9e311c49/15/02163416627C4C0595F71F58E481D350B5188F6F.mft
                RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.186.80.0/20
                IPv6:
                  2a02:518::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  47473

    Signature Algorithm: sha256WithRSAEncryption
         13:f7:87:2c:8d:1a:0d:93:76:34:9e:d9:30:15:45:8e:d7:42:
         e4:03:83:c8:f4:17:ef:9f:64:fc:b1:c8:27:cd:33:fd:54:b1:
         93:b7:e3:56:50:2f:5c:83:68:12:08:96:32:97:1c:ac:5e:f2:
         44:ed:99:60:3f:cf:49:b2:0e:38:99:bd:14:4e:ca:c5:b8:b9:
         2d:6b:88:ed:d0:4e:c9:99:41:13:13:e5:12:e7:e9:66:22:d6:
         21:49:db:a1:21:c4:49:d9:a7:12:84:5f:a7:db:e1:86:c9:8a:
         c2:36:a4:2d:32:25:fd:ae:9a:b1:a2:5e:a0:1b:2f:47:cf:8b:
         18:81:13:71:0c:8a:a5:94:de:e2:0a:4a:50:e4:db:0a:82:20:
         a0:af:e0:03:00:8b:52:44:8e:05:bf:d8:0b:06:40:e1:89:43:
         ed:dc:c0:1a:62:2d:6d:5c:7c:43:84:cd:a6:45:ae:47:34:c7:
         7a:c0:d8:34:a3:4d:70:c1:35:8f:bd:e0:f5:b1:88:f2:55:60:
         c0:ee:8c:8e:28:bb:7b:ff:d4:ac:00:ba:b8:9a:93:30:41:f2:
         50:de:6b:37:2b:51:5d:5a:3f:49:98:e0:9a:e1:89:c3:ae:df:
         a7:6a:66:79:2d:6a:4e:0d:f1:80:36:ac:8e:d8:18:b8:d0:a6:
         5e:b7:4d:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----