Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Clg_JOOANBYrZSBzH1e3NK5a0Fw.cer
File:                     Clg_JOOANBYrZSBzH1e3NK5a0Fw.cer (raw, json)
Hash identifier:          H8lotYwWtNMpjGBvmiRaU420aOMZVrLAjwuQyc+QLMY=
Subject key identifier:   0A:58:3F:24:E3:80:34:16:2B:65:20:73:1F:57:B7:34:AE:5A:D0:5C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0188358158E210D6819DF886116D434AC7A6
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.caramelfox.net/repo/CaramelFoxNetworks/1/0A583F24E38034162B6520731F57B734AE5AD05C.mft
caRepository:             rsync://rpki.caramelfox.net/repo/CaramelFoxNetworks/1/
Notify URL:               https://rpki.caramelfox.net/rrdp/notification.xml
Certificate not before:   Fri 19 May 2023 19:34:09 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    AS: 211169
                          IP: 2001:678:f68::/48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:35:81:58:e2:10:d6:81:9d:f8:86:11:6d:43:4a:c7:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: May 19 19:34:09 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=0a583f24e38034162b6520731f57b734ae5ad05c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:6b:53:21:63:a8:ae:e5:13:68:96:bc:aa:bb:
                    07:6c:9d:bd:2d:fa:4c:78:8c:1a:c5:29:9f:c1:c7:
                    4b:00:60:32:3e:43:61:9f:cb:b6:5c:54:db:d7:f2:
                    46:3a:52:37:c6:55:5d:03:0f:9f:69:26:91:c3:f9:
                    4e:b4:32:48:de:a4:b8:02:5a:d6:19:62:d1:98:d4:
                    0e:bf:bc:53:65:7f:c2:7e:3f:41:ee:24:44:87:30:
                    6e:12:d8:53:03:77:92:6c:de:e6:26:cd:96:07:7a:
                    d1:7a:64:b9:52:4d:92:f7:03:44:24:e6:ae:95:91:
                    5b:d8:00:96:9e:30:d5:68:a4:fd:1a:cd:72:a7:83:
                    00:4c:3e:f4:99:52:62:5e:1c:47:4d:e0:47:6b:19:
                    2c:07:49:61:74:30:b3:6c:e5:7d:4b:0a:0f:78:39:
                    31:db:61:6c:c8:08:8f:52:37:03:43:8f:6c:5b:1d:
                    24:7f:0f:5a:c2:8b:d0:1d:4c:1f:6b:b1:69:58:b9:
                    0b:ea:9f:a9:80:69:6a:ba:46:8a:4d:d9:be:68:48:
                    e8:4c:d9:ed:38:5f:8a:7f:64:d4:f2:8b:81:88:e6:
                    52:20:59:f3:52:b4:e6:ed:5d:ab:cc:0b:5b:4d:a2:
                    46:17:23:5f:b3:0a:5e:89:73:88:e5:6c:b3:c3:ee:
                    00:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:58:3F:24:E3:80:34:16:2B:65:20:73:1F:57:B7:34:AE:5A:D0:5C
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.caramelfox.net/repo/CaramelFoxNetworks/1/
                RPKI Manifest - URI:rsync://rpki.caramelfox.net/repo/CaramelFoxNetworks/1/0A583F24E38034162B6520731F57B734AE5AD05C.mft
                RPKI Notify - URI:https://rpki.caramelfox.net/rrdp/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:678:f68::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  211169

    Signature Algorithm: sha256WithRSAEncryption
         54:10:cf:91:50:95:86:59:a6:a2:0a:cc:b0:f3:c6:af:de:6f:
         8a:a9:35:a9:ca:db:0b:8c:24:84:a4:6c:fb:45:0a:ec:d1:6a:
         db:c3:82:93:06:84:57:e6:73:af:19:3b:6b:d0:85:74:2b:d0:
         af:98:c7:14:f2:b9:36:80:b0:22:2c:3b:a7:6a:3f:50:0b:b3:
         75:8c:83:b2:a4:d7:82:72:c7:a7:19:05:01:5d:30:fc:e9:aa:
         bd:ee:16:3a:76:1c:47:73:d3:c0:30:53:1e:64:24:bd:7c:2b:
         85:3a:7b:8a:d1:66:05:93:fe:03:9a:1f:c0:51:bd:30:f3:19:
         83:6e:99:20:a5:d8:78:0c:2a:bb:94:05:ec:d3:a4:d4:f9:74:
         4b:8b:e6:ea:1c:88:3d:4c:65:34:6b:28:ca:1e:5e:1c:16:f5:
         ef:8f:e5:5a:ed:cd:e9:fd:72:2d:a5:61:28:ed:0a:15:60:db:
         37:10:66:9f:3c:8a:47:6e:c4:51:07:3c:ce:47:f4:6d:ce:71:
         83:3d:15:e6:04:4a:11:b2:51:6d:1e:d5:9d:ac:7c:72:98:ce:
         fb:61:ff:17:6f:e5:7f:45:c7:39:86:31:9d:21:46:ae:29:ae:
         1f:bc:9f:2f:03:6d:b7:70:25:b9:8b:18:68:ff:18:fe:ab:48:
         55:37:52:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:00:18 2023 by rpki-client on console-fra.rpki-client.org