Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/DbLejg38stCyW3UGJDJYtzkEQJg.cer
File:                     DbLejg38stCyW3UGJDJYtzkEQJg.cer (raw, json)
Hash identifier:          UDBxzXMEZ/Jadm5Xda0EcAV6A4a/czXHpf/WI1ZlGNc=
Subject key identifier:   0D:B2:DE:8E:0D:FC:B2:D0:B2:5B:75:06:24:32:58:B7:39:04:40:98
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018CC5001237A48061C1DBBD6C942F06D52A
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/ea/253e39-8e52-498e-b27e-c8b89e0f300d/1/DbLejg38stCyW3UGJDJYtzkEQJg.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/ea/253e39-8e52-498e-b27e-c8b89e0f300d/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 12:29:25 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    AS: 199257

Validation:               Failed, certificate revoked on Wed 20 Mar 2024 12:54:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c5:00:12:37:a4:80:61:c1:db:bd:6c:94:2f:06:d5:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 12:29:25 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=0db2de8e0dfcb2d0b25b7506243258b739044098
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:af:ae:de:ab:e5:55:43:72:dd:85:df:5e:c9:
                    07:9f:0d:23:b3:08:67:59:e0:29:fa:f2:06:4e:50:
                    07:b1:4b:b4:e6:5e:87:ba:32:c5:7e:7d:81:fd:88:
                    bc:3e:e1:53:70:21:ec:35:8a:33:73:f8:87:33:90:
                    2c:7d:27:91:f1:d4:ee:52:ff:a1:af:b1:24:6c:d6:
                    60:47:61:58:82:c3:25:00:44:87:65:fd:97:20:6c:
                    62:fd:c1:3f:65:35:12:59:98:96:78:09:7d:74:5d:
                    c3:c4:30:e1:9f:c2:a7:68:18:a6:fe:19:d4:ae:51:
                    3a:b7:66:58:7f:93:67:15:ae:2b:98:07:d3:02:6c:
                    21:6a:3a:94:bf:de:04:1e:c6:e6:8a:bb:85:f4:27:
                    17:d8:45:d4:07:c4:f0:50:99:5c:fe:b0:4c:ff:5c:
                    74:1c:66:28:6d:20:da:83:40:ac:a3:81:2a:8a:a8:
                    e9:a3:4f:77:a2:dd:0c:47:9b:be:04:b6:c9:d7:59:
                    56:d0:43:05:d4:91:c3:8a:5f:d9:4b:91:50:0a:c4:
                    36:fb:24:e5:09:98:9e:85:cb:1c:04:76:da:d4:14:
                    41:ef:a6:91:3f:43:78:f3:f1:7d:9f:98:42:ea:2a:
                    c6:14:74:57:08:84:52:88:9d:a6:e2:5b:f8:5b:c4:
                    95:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:B2:DE:8E:0D:FC:B2:D0:B2:5B:75:06:24:32:58:B7:39:04:40:98
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/253e39-8e52-498e-b27e-c8b89e0f300d/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/253e39-8e52-498e-b27e-c8b89e0f300d/1/DbLejg38stCyW3UGJDJYtzkEQJg.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  199257

    Signature Algorithm: sha256WithRSAEncryption
         8f:12:c9:6f:62:59:74:7e:df:5d:6f:63:92:d8:2b:97:82:d4:
         29:3f:bc:ad:ef:30:92:2a:0b:b1:bf:56:9c:8d:e0:e5:08:82:
         2a:25:5e:27:87:7b:dd:1b:35:3b:1b:88:d3:7d:cb:28:22:c8:
         05:50:67:57:bc:06:98:5e:77:79:8b:f4:b3:33:db:4f:21:83:
         38:ed:c2:4b:4d:54:76:d0:80:e6:62:04:d0:0b:82:3a:72:ea:
         22:8b:e1:27:ee:db:a4:ae:5a:cd:55:54:65:cd:13:58:51:78:
         7d:2d:d4:cf:64:4e:6c:ec:82:38:47:00:6e:c5:74:6d:61:db:
         df:68:73:19:fa:18:7a:2e:0f:6b:bc:5e:75:d8:74:f1:02:9c:
         3f:0a:1d:75:fc:d6:02:7f:52:79:1b:b5:20:21:34:a7:78:5d:
         7d:20:42:e5:93:28:4d:a4:c8:9f:a8:1f:e8:1d:2a:b3:4e:57:
         04:c6:92:53:ef:08:ee:78:21:30:ac:85:e1:ec:76:ec:a1:42:
         ac:73:8f:ed:b1:83:c1:bb:67:5d:8b:86:af:6d:14:d6:07:46:
         4e:db:96:c3:1e:d9:b5:78:e6:5e:b1:69:cd:a4:a3:e7:99:d9:
         89:7c:f4:74:6d:26:c0:cb:79:4f:77:0b:fe:c5:e2:73:dc:f9:
         3c:61:75:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----