Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ApeliZjwl0NHCBwX8l7t1l-tlmE.cer
File:                     ApeliZjwl0NHCBwX8l7t1l-tlmE.cer (raw, json)
Hash identifier:          1IWO3954V8bsXUVlOrmuTNV+iJe18MRcHf4joteeFgc=
Subject key identifier:   02:97:A5:89:98:F0:97:43:47:08:1C:17:F2:5E:ED:D6:5F:AD:96:61
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0193E323BCF6B602ECEC2F6779828628F9E7
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/32/1293db-c752-4d03-857d-579531e5a00f/1/ApeliZjwl0NHCBwX8l7t1l-tlmE.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/32/1293db-c752-4d03-857d-579531e5a00f/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 20 Dec 2024 08:16:30 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    AS: 198588
                          AS: 199365
                          IP: 2a00:4860::/32
Validation:               Failed, certificate revoked on Mon 23 Dec 2024 07:44:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:e3:23:bc:f6:b6:02:ec:ec:2f:67:79:82:86:28:f9:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Dec 20 08:16:30 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=0297a58998f0974347081c17f25eedd65fad9661
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:c7:3a:5a:c1:6c:de:41:23:01:7b:d0:9d:60:
                    2a:14:b6:5b:9a:a1:59:df:68:64:d2:a5:f9:a0:66:
                    85:48:38:46:81:7c:92:1c:01:06:50:c1:14:47:9f:
                    62:0e:d6:1d:4f:76:9d:ef:12:04:6f:ae:6d:bf:e9:
                    87:38:35:fe:7b:96:93:54:d7:2d:eb:bb:f0:ed:77:
                    d5:4e:ad:9b:1c:94:4a:6c:14:c1:ef:e2:b1:db:16:
                    48:ae:81:63:c4:92:c3:f6:3a:fc:43:c1:4b:e9:39:
                    14:5f:04:53:07:0a:ec:f8:ca:51:50:46:eb:21:20:
                    6b:bc:82:7c:5f:98:22:e7:6d:68:87:d6:88:e3:5b:
                    5f:40:b5:61:5c:50:30:97:fa:84:88:25:e7:d8:c7:
                    4a:4b:37:71:8d:98:a2:2a:67:c0:43:5d:46:f7:e5:
                    4a:71:8b:07:55:3a:f9:b7:93:1d:a8:df:92:66:62:
                    31:02:03:79:0c:a3:01:07:c0:8a:2d:66:fa:63:ba:
                    19:0d:22:3d:c5:ad:ae:bf:fe:b8:41:f3:7e:3a:91:
                    e1:6b:19:d9:7a:f8:6e:ba:3b:93:ca:29:c7:0e:b5:
                    28:bb:d1:9d:c3:72:7d:e0:37:b1:79:93:23:4f:f6:
                    3d:bb:cf:10:dd:1b:d9:18:85:bb:74:0b:30:31:c6:
                    b7:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:97:A5:89:98:F0:97:43:47:08:1C:17:F2:5E:ED:D6:5F:AD:96:61
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/1293db-c752-4d03-857d-579531e5a00f/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/1293db-c752-4d03-857d-579531e5a00f/1/ApeliZjwl0NHCBwX8l7t1l-tlmE.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a00:4860::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  198588
                  199365

    Signature Algorithm: sha256WithRSAEncryption
         b0:bd:25:41:b7:f9:4e:27:2c:55:f7:eb:46:1c:30:86:ab:bf:
         fb:bd:e7:0e:6d:89:e4:10:03:14:21:5c:05:ed:e0:b8:2b:61:
         02:26:c1:59:d6:8b:55:2f:30:fd:d3:f7:db:39:6e:21:b6:60:
         76:5f:4b:f5:17:24:0c:34:ef:4a:43:e7:65:cc:4f:54:7d:a2:
         0e:61:b3:48:24:cb:2a:c4:33:2c:a1:ac:c6:6a:5a:cc:ab:dc:
         1a:67:5a:e6:c5:f4:a7:90:ca:21:33:47:75:d5:bc:6c:e3:5d:
         89:8e:8c:44:a8:d8:9d:1b:d0:f5:aa:8d:20:5c:c9:43:5b:72:
         9e:e9:da:5c:61:99:5f:4d:6b:66:a5:a6:d2:3a:ae:68:9d:79:
         1a:e4:2c:10:81:35:e9:d1:ef:d9:84:de:f2:3b:a7:19:3b:3f:
         9e:6c:41:fd:fb:aa:e1:bd:a2:0d:7f:f3:7f:eb:d0:ab:7d:6c:
         6f:89:ce:d2:49:e3:be:ed:95:a9:01:96:49:11:06:a7:58:3e:
         25:c0:50:8a:94:07:e1:ad:54:12:33:c5:5a:5e:e6:a2:49:9b:
         9f:db:6a:cc:f8:85:4b:46:e0:20:24:36:a4:4c:d0:1d:23:d6:
         59:97:0d:b0:0a:4f:59:ea:81:99:ec:e2:c0:b5:c2:3f:14:f3:
         7b:a5:6c:f9
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----