Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/BxwJRjfyZ-A5_7drL7K6Ry7XZHg.cer
File:                     BxwJRjfyZ-A5_7drL7K6Ry7XZHg.cer (raw, json)
Hash identifier:          YCzEkZiCxTvzCnQdcErneKHbY7fYEL+p1R/T7EZS0+0=
Subject key identifier:   07:1C:09:46:37:F2:67:E0:39:FF:B7:6B:2F:B2:BA:47:2E:D7:64:78
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018D3535E963E0558BC9A7B8122EEE889149
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/e9/6f99ca-1c97-496c-86d2-ea46aec92a29/1/BxwJRjfyZ-A5_7drL7K6Ry7XZHg.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/e9/6f99ca-1c97-496c-86d2-ea46aec92a29/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Tue 23 Jan 2024 07:25:42 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    AS: 211062

Validation:               Failed, certificate revoked on Mon 11 Mar 2024 10:54:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8d:35:35:e9:63:e0:55:8b:c9:a7:b8:12:2e:ee:88:91:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan 23 07:25:42 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=071c094637f267e039ffb76b2fb2ba472ed76478
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:aa:59:9d:10:e2:a2:a7:41:a2:cc:8d:42:c1:
                    08:a3:8a:3e:a5:f3:b4:04:f5:d9:77:12:a6:fa:d0:
                    ed:c1:73:93:7a:b0:be:40:d4:9e:9b:96:62:cb:80:
                    85:63:fd:a5:a4:a3:09:7f:f0:a6:74:04:36:fb:05:
                    4c:e7:40:74:ca:6c:f4:f3:d9:fe:6a:50:7e:ca:72:
                    57:0f:6e:17:a1:48:1d:15:eb:42:54:eb:3b:af:a0:
                    ff:5b:f3:c8:ff:2a:ed:3f:14:bf:3b:dd:70:fc:d4:
                    16:74:2b:b6:74:ae:e5:5c:2c:f8:72:6d:44:3f:e2:
                    4d:42:75:d8:63:9b:d2:a3:8a:df:54:a1:0b:97:12:
                    e0:3d:5b:88:ce:3c:e7:2c:ea:66:e9:a0:3c:a0:f3:
                    1f:3a:a3:2a:9a:53:85:0f:b7:1e:ab:21:e5:73:41:
                    17:e9:98:4e:04:45:7c:15:f6:89:b8:81:66:a4:46:
                    7e:03:75:8f:73:65:c9:e7:5e:b5:0f:06:f3:d4:4c:
                    59:dd:03:96:b9:3a:d0:fc:5d:7c:c4:03:db:7b:16:
                    ba:36:f9:07:bd:b4:7f:05:3d:cd:91:87:c0:ba:47:
                    ef:16:5e:5b:66:bb:44:da:3b:f2:69:6d:07:4d:55:
                    33:69:06:6a:9a:ee:f0:b1:13:6c:04:77:4a:85:a3:
                    b1:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:1C:09:46:37:F2:67:E0:39:FF:B7:6B:2F:B2:BA:47:2E:D7:64:78
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/6f99ca-1c97-496c-86d2-ea46aec92a29/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/6f99ca-1c97-496c-86d2-ea46aec92a29/1/BxwJRjfyZ-A5_7drL7K6Ry7XZHg.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  211062

    Signature Algorithm: sha256WithRSAEncryption
         71:0c:bc:74:37:27:c3:96:4d:5a:1a:48:67:5f:39:d3:6d:86:
         3a:de:0f:21:b5:81:e8:08:ae:fd:9e:19:98:bf:56:a4:54:de:
         bb:82:90:6b:55:9f:a0:37:bb:6a:2a:71:1a:e1:4e:d0:da:5a:
         fa:dc:96:e8:df:6c:8e:61:47:68:95:c0:01:60:67:7a:d1:65:
         95:9e:54:f7:52:5a:0d:af:cc:d8:d1:50:34:53:60:36:b9:e4:
         bc:d8:d2:40:b3:7e:79:a4:b6:31:a5:fe:cd:a0:cf:80:2a:e8:
         c2:11:f7:be:80:8a:40:fc:af:86:b8:13:98:30:2e:e1:8a:b7:
         0d:9e:13:36:c0:11:e1:9a:a5:65:53:68:b5:4d:9d:37:f7:51:
         5d:af:f7:d8:25:5b:3b:ed:b5:37:2b:f7:fa:87:17:30:8d:76:
         f2:92:d8:3b:17:73:26:b5:68:06:93:c6:ec:08:8a:1d:50:54:
         d7:0d:44:f6:b8:93:20:f9:94:e5:e7:07:b6:d9:ad:af:13:02:
         de:fd:8f:aa:cd:d4:24:2e:d3:37:1e:f8:bd:56:58:8f:5c:9e:
         76:ea:cc:d7:6e:5e:9c:64:62:23:d1:7c:29:10:9e:3c:c3:3a:
         73:be:e7:da:2e:8b:eb:6d:a6:f3:1a:68:e7:16:c3:95:af:20:
         74:3b:d5:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----