Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/BHk4MjgyPjoaVlVADEMUSKJFHhw.cer
File:                     BHk4MjgyPjoaVlVADEMUSKJFHhw.cer (raw, json)
Hash identifier:          8Z5hXme9JlLqwLpU4xLihmBxK/1zE805GAUrc61z5kU=
Subject key identifier:   04:79:38:32:38:32:3E:3A:1A:56:55:40:0C:43:14:48:A2:45:1E:1C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856ED4162ACD8DCA6EE8D2263EC777AC09
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/b2/396528-dd87-4327-b8d2-54c30159666e/1/BHk4MjgyPjoaVlVADEMUSKJFHhw.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/b2/396528-dd87-4327-b8d2-54c30159666e/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 19:34:31 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    AS: 49678
                          AS: 50200

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6e:d4:16:2a:cd:8d:ca:6e:e8:d2:26:3e:c7:77:ac:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 19:34:31 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=0479383238323e3a1a5655400c431448a2451e1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:4c:a6:56:33:81:18:3d:32:ac:6c:11:40:7a:
                    7c:46:fd:97:89:fe:44:e5:2d:b7:76:d9:22:97:39:
                    d9:20:28:7b:f5:fa:b3:1c:6f:0d:98:f6:8b:f2:cd:
                    dc:5c:f8:88:23:ca:eb:19:64:bd:b9:c0:69:a7:0a:
                    eb:92:16:08:76:07:64:0d:a0:fc:29:f2:84:9f:31:
                    92:a6:1f:32:a3:6e:71:6b:53:f8:81:55:f2:17:e0:
                    dc:08:dc:d7:78:7c:55:63:68:20:0f:18:b6:f4:83:
                    e0:e5:62:f8:2a:fd:bd:94:ca:96:4d:3f:57:90:77:
                    20:89:1e:e8:f1:99:b6:b7:4d:b5:63:df:10:5f:f0:
                    d2:da:38:b8:ab:5b:b7:80:36:5b:b6:7c:83:37:94:
                    ac:c0:de:93:bf:68:8b:72:79:15:06:31:b1:ff:25:
                    75:af:0e:d8:eb:a5:92:eb:b8:fd:66:ac:7a:99:4e:
                    63:38:f4:93:0e:5d:60:33:88:c7:7b:61:14:b6:c0:
                    07:be:44:5e:8c:62:91:a0:22:c9:c3:bf:52:a6:2b:
                    c2:64:3b:b3:81:53:c4:6f:e7:e9:2c:2d:c8:94:7b:
                    1f:f7:55:6f:e2:d7:56:81:8f:9c:a6:2a:8c:41:36:
                    91:c3:65:fb:d1:9c:a9:49:ff:34:a0:63:07:99:ec:
                    7b:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:79:38:32:38:32:3E:3A:1A:56:55:40:0C:43:14:48:A2:45:1E:1C
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/396528-dd87-4327-b8d2-54c30159666e/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/396528-dd87-4327-b8d2-54c30159666e/1/BHk4MjgyPjoaVlVADEMUSKJFHhw.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  49678
                  50200

    Signature Algorithm: sha256WithRSAEncryption
         8f:3a:c4:63:56:c4:27:1a:94:37:82:6f:73:39:8c:49:75:92:
         9e:2a:54:41:5d:3c:43:fd:4c:68:b2:47:71:84:b3:f6:e4:09:
         e9:93:63:67:66:c8:49:6b:46:b8:2e:d4:5d:10:43:6d:2c:55:
         51:3a:4c:c0:14:e9:6d:e4:7d:26:87:89:89:35:eb:1c:45:7d:
         0e:7b:c0:d2:45:e8:b2:d3:10:3b:50:b7:1e:5c:e1:2d:2c:0f:
         f6:bf:78:0a:65:a9:c1:62:0a:ba:7f:fe:be:d1:1f:ae:6b:28:
         e8:42:74:0b:b8:69:5c:9b:ba:5f:c0:32:f9:10:be:c7:6a:d3:
         97:cf:bb:19:8e:74:01:f8:f3:1e:15:c0:a9:72:8a:9c:27:30:
         9a:72:41:ea:21:1a:2d:b4:d9:12:61:63:08:8d:e8:a0:fb:9e:
         84:b4:69:c1:56:62:84:4c:ea:19:97:44:fb:1e:c4:a2:50:53:
         23:79:cf:d6:e3:ae:b1:89:c5:28:73:7c:01:b4:1d:ae:3b:36:
         1c:e9:87:b2:65:e7:8b:b3:77:16:90:82:02:a4:c1:88:6a:c1:
         08:02:ab:95:7c:ae:17:76:a0:d8:63:48:1d:c0:d6:66:53:82:
         5a:58:a1:d9:35:c9:76:7e:b4:7c:60:8f:03:55:90:7a:fd:a3:
         b4:31:0c:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:04:02 2023 by rpki-client on console-ams.rpki-client.org