Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/DO_52o7L8NPWoHsMJD9DfUZt3zk.cer
File:                     DO_52o7L8NPWoHsMJD9DfUZt3zk.cer (raw, json)
Hash identifier:          ImiLxL4DWZRiaqwEnPHfdSPQepuIFjD1gTa0WcqpHZg=
Subject key identifier:   0C:EF:F9:DA:8E:CB:F0:D3:D6:A0:7B:0C:24:3F:43:7D:46:6D:DF:39
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0188AA72D13A2240B04D77A6C5EA4F03DCAD
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rsync.paas.rpki.ripe.net/repository/d578953d-e6e9-4ffa-b5ac-ac97b5327f11/0/0CEFF9DA8ECBF0D3D6A07B0C243F437D466DDF39.mft
caRepository:             rsync://rsync.paas.rpki.ripe.net/repository/d578953d-e6e9-4ffa-b5ac-ac97b5327f11/0/
Notify URL:               https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before:   Sun 11 Jun 2023 12:33:51 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    AS: 60900

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:aa:72:d1:3a:22:40:b0:4d:77:a6:c5:ea:4f:03:dc:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jun 11 12:33:51 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=0ceff9da8ecbf0d3d6a07b0c243f437d466ddf39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:82:ee:8e:bc:3b:75:d4:1a:bc:59:eb:58:32:
                    cb:09:17:41:d9:b3:be:56:44:ec:fc:be:09:9f:23:
                    e2:9d:87:3b:b9:55:72:b9:18:70:30:9a:5c:90:9b:
                    09:07:fd:73:96:df:1c:55:c2:de:9c:06:02:01:0e:
                    bb:e6:d8:e9:41:14:46:d9:62:df:a2:8a:5a:0c:bd:
                    c9:75:eb:a5:67:c0:36:db:97:42:df:1a:90:32:24:
                    d2:48:b8:63:22:3b:9e:c9:3b:2c:18:48:72:ef:bd:
                    1c:6e:05:c5:91:45:ec:5f:25:b0:8b:9a:f2:1a:07:
                    02:85:2c:20:cd:34:c5:c7:79:47:0b:ba:f4:c1:12:
                    f4:b1:b6:29:95:90:1b:b9:b3:90:93:aa:d9:38:c9:
                    49:f2:a6:2b:2f:e6:94:43:35:f5:8a:42:64:0d:b4:
                    a0:aa:7c:55:17:6e:ef:b0:ec:2b:d5:b2:6a:69:b0:
                    c4:dd:8f:e7:73:91:97:88:32:f4:33:53:72:17:d9:
                    a0:fc:97:51:a0:16:1e:f7:2b:7c:26:64:5b:da:85:
                    20:5d:8b:cc:b0:08:12:6c:6c:5d:51:e4:e4:08:d3:
                    e9:10:4f:f0:f7:b6:dd:56:b9:b3:e1:6b:23:90:c1:
                    9a:28:09:f0:85:68:3d:5a:ed:82:26:fd:71:45:ef:
                    6d:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:EF:F9:DA:8E:CB:F0:D3:D6:A0:7B:0C:24:3F:43:7D:46:6D:DF:39
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/d578953d-e6e9-4ffa-b5ac-ac97b5327f11/0/
                RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/d578953d-e6e9-4ffa-b5ac-ac97b5327f11/0/0CEFF9DA8ECBF0D3D6A07B0C243F437D466DDF39.mft
                RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  60900

    Signature Algorithm: sha256WithRSAEncryption
         25:db:d3:fe:65:53:d0:01:4c:c9:d2:73:5f:41:c7:d2:ff:ce:
         d3:a1:9f:ae:4c:92:0a:ae:cd:96:0c:89:84:fc:c2:b4:41:1f:
         f2:f6:6f:3d:be:f6:1f:4d:a0:f9:7e:4d:32:90:05:70:80:db:
         f3:48:72:ed:df:03:bc:95:44:44:fb:a5:8a:2d:5b:cb:23:10:
         f7:e2:e2:d5:b0:19:2d:7f:49:26:6c:24:e0:8e:a9:79:53:44:
         5e:0c:a4:fc:aa:3e:1f:89:f9:ee:d7:19:8f:63:71:87:a1:31:
         c8:20:5f:08:0b:ab:8d:20:f5:97:7e:57:8c:de:ee:ba:c8:9f:
         98:22:84:42:e3:d7:da:b5:95:d5:0d:f2:80:fa:47:de:c6:04:
         f9:af:89:42:85:1f:c4:b6:07:9f:b0:2d:f1:72:4d:50:40:e7:
         29:b3:7b:6f:a3:6c:22:b3:6f:83:58:e2:57:00:5f:a1:24:d7:
         5c:7f:22:f2:fd:3c:c7:db:4b:9f:67:e4:48:7b:29:44:eb:e1:
         28:7e:89:14:b9:ea:2f:6e:13:58:7b:18:f1:62:e1:47:ec:10:
         26:08:29:ed:13:2e:76:1d:b2:63:e8:64:e5:77:07:f0:81:96:
         c5:f1:be:cf:f6:cb:2a:36:4f:4c:25:a7:f3:62:f2:3f:a9:85:
         d4:22:a9:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----