Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/BmTWaI0BWWgFqVshZE17KB8mPiQ.cer
File:                     BmTWaI0BWWgFqVshZE17KB8mPiQ.cer (raw, json)
Hash identifier:          l39E0ha4Bm7lOcwTCEioNUmwpaJMliJBtJn5gASbEq8=
Subject key identifier:   06:64:D6:68:8D:01:59:68:05:A9:5B:21:64:4D:7B:28:1F:26:3E:24
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018CC7274B2B68D54165079DDE0194C680DC
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/90/430be9-d0f1-4e9d-834c-d53c0b637907/1/BmTWaI0BWWgFqVshZE17KB8mPiQ.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/90/430be9-d0f1-4e9d-834c-d53c0b637907/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 22:31:30 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    AS: 203727

Validation:               Failed, certificate revoked on Mon 23 Sep 2024 14:20:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c7:27:4b:2b:68:d5:41:65:07:9d:de:01:94:c6:80:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 22:31:30 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=0664d6688d01596805a95b21644d7b281f263e24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:0b:1e:93:68:68:d7:b8:b9:0c:97:55:71:10:
                    2c:87:b7:79:73:f9:82:4b:75:54:3b:97:58:75:b0:
                    17:aa:d3:3c:eb:64:a5:49:40:63:6b:3a:0b:11:c2:
                    f7:46:cc:b7:f0:ad:d6:9a:8d:f6:49:a9:fc:5a:44:
                    00:8f:be:3d:14:1a:e7:2b:7e:2b:d3:6f:06:18:23:
                    f1:db:90:fe:76:af:2d:76:c0:9d:d5:45:29:5b:8a:
                    5f:67:c5:ec:1e:f1:7d:ac:df:99:04:df:e3:fb:a6:
                    92:ff:54:5d:d7:6d:94:db:e6:7c:10:57:ed:28:63:
                    06:da:5a:4d:bf:ab:92:0a:50:18:1b:a2:e8:09:dd:
                    b8:66:65:a5:40:30:9a:83:cc:e5:c4:e5:e4:0b:3a:
                    df:70:7c:8b:74:b4:4d:a7:3f:a3:72:b4:dc:5b:c4:
                    94:ea:26:38:e7:84:b1:35:05:74:61:bb:9b:7d:01:
                    7f:39:4a:f0:ed:46:db:2f:e1:8c:df:0a:30:e4:0b:
                    80:21:20:17:57:18:62:28:41:75:53:ea:ef:39:0e:
                    f2:65:29:b9:65:76:dc:7c:f7:89:aa:91:1c:51:05:
                    4d:e3:a9:81:3e:79:82:e8:15:1c:5a:67:de:c1:b9:
                    cb:0f:48:26:c5:c4:e9:df:c3:c4:d1:ac:87:f1:77:
                    c6:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:64:D6:68:8D:01:59:68:05:A9:5B:21:64:4D:7B:28:1F:26:3E:24
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/430be9-d0f1-4e9d-834c-d53c0b637907/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/430be9-d0f1-4e9d-834c-d53c0b637907/1/BmTWaI0BWWgFqVshZE17KB8mPiQ.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  203727

    Signature Algorithm: sha256WithRSAEncryption
         20:cb:64:45:42:77:d2:b4:a2:71:ed:32:a1:af:97:db:5a:50:
         b5:72:2a:4d:f0:fc:6b:9b:5e:d8:6b:bb:05:d1:49:33:80:9c:
         b5:b9:e7:b3:d5:b9:1a:5a:ae:a5:2c:56:fd:ff:80:50:64:01:
         09:10:83:2c:43:2d:f6:46:ea:6a:f2:38:d1:40:aa:be:0e:db:
         bc:02:61:b8:72:38:b9:58:c0:6d:ac:76:48:bd:8d:f4:10:df:
         1e:5e:bd:d8:0a:40:c8:51:b0:21:db:92:3b:d1:27:1e:7f:7b:
         03:14:41:62:d9:d6:e0:5f:f1:ed:4d:26:a5:81:4f:9b:3f:3f:
         fb:25:fc:ef:2b:8f:4e:c4:d1:61:17:33:16:51:e4:41:77:a9:
         1c:ef:e6:88:4c:6f:5d:ae:a6:4a:d4:4d:aa:5f:d6:96:14:80:
         83:ec:27:41:b3:77:9d:61:d6:25:e5:54:d8:f5:4c:c1:f5:64:
         29:6e:5a:37:fa:28:ba:22:79:69:7e:5d:d6:c0:89:6c:c3:c3:
         08:19:34:31:ef:66:11:64:f0:96:ef:0d:a5:5e:54:6e:13:a9:
         a5:e3:42:53:90:21:d7:0a:62:48:e4:db:dc:3d:92:f3:66:83:
         06:91:91:1b:f8:60:d9:8e:8b:78:9b:02:4d:34:d2:2c:c4:29:
         74:82:1d:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----