Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/DoUDVajdmf6vTBvLpCa146TRVow.cer
File:                     DoUDVajdmf6vTBvLpCa146TRVow.cer (raw, json)
Hash identifier:          NEjx3ZsEgyA+0CgWDGZ7/9/QGzzzabDPeFSnB5SnOeg=
Subject key identifier:   0E:85:03:55:A8:DD:99:FE:AF:4C:1B:CB:A4:26:B5:E3:A4:D1:56:8C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01906910DA5623D766414D216E88046DB96A
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/11/0E850355A8DD99FEAF4C1BCBA426B5E3A4D1568C.mft
caRepository:             rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/11/
Notify URL:               https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before:   Sun 30 Jun 2024 12:13:50 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    AS: 205789

Validation:               Failed, certificate revoked on Sun 07 Jul 2024 18:32:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:69:10:da:56:23:d7:66:41:4d:21:6e:88:04:6d:b9:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jun 30 12:13:50 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=0e850355a8dd99feaf4c1bcba426b5e3a4d1568c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:29:ad:ab:d1:a1:bd:31:a6:2c:75:3e:78:94:
                    f6:75:4a:a6:e5:c5:72:22:d0:4a:e5:15:50:fb:f5:
                    b1:dc:09:e7:5d:09:fe:5e:45:c4:7f:88:9a:d3:d4:
                    97:22:44:64:5f:35:5e:9b:b8:f8:b5:51:8f:6c:9b:
                    44:95:bb:e7:84:a3:95:46:fd:8f:7e:4c:51:bf:b6:
                    74:11:28:e6:66:9b:63:7c:be:40:5f:39:be:df:9f:
                    22:72:09:d0:b0:a1:73:f6:25:80:15:a8:3e:a0:dd:
                    76:1c:31:11:f0:e6:9e:db:6e:e7:36:14:4f:6b:fc:
                    0d:4a:d4:e0:34:7c:fd:86:55:49:3d:4b:3d:b1:df:
                    61:62:26:93:00:b6:0b:82:f1:d9:63:9d:34:06:96:
                    fa:d7:93:2f:9a:73:c5:3d:2c:75:ab:14:53:2e:07:
                    f6:ae:e4:69:1a:75:d4:ad:e8:89:81:dc:c1:5a:42:
                    77:0a:16:46:dd:9a:ba:8c:7f:55:ee:e7:3e:32:86:
                    36:e9:c4:3f:e3:f6:16:15:8f:d0:6b:96:26:67:b7:
                    af:f8:48:ba:20:d3:ed:1a:f5:4b:ac:0d:69:7b:df:
                    63:14:b2:ad:61:8b:a6:a4:aa:e9:c6:4a:77:cd:c7:
                    2a:6d:55:1d:8e:00:c6:ff:e4:86:31:34:43:bb:81:
                    52:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:85:03:55:A8:DD:99:FE:AF:4C:1B:CB:A4:26:B5:E3:A4:D1:56:8C
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/11/
                RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/11/0E850355A8DD99FEAF4C1BCBA426B5E3A4D1568C.mft
                RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  205789

    Signature Algorithm: sha256WithRSAEncryption
         23:35:42:7c:44:a1:90:15:d7:e4:62:64:05:15:d9:65:19:7e:
         c0:e5:80:81:a0:a2:45:be:2d:39:b3:61:e6:db:57:39:46:b5:
         90:cd:84:da:07:7f:f2:a8:ed:2f:66:ba:0c:36:8f:4a:46:7c:
         12:68:e9:fa:f7:1c:5b:ab:c6:f7:da:4c:4c:6c:e5:f0:58:c7:
         fd:7d:83:03:7d:fe:d7:4f:3f:b7:0e:67:8d:1e:97:2f:d4:46:
         df:8b:d4:dd:8a:52:d2:f9:6a:49:80:11:a1:da:8e:7d:30:0b:
         7c:25:f8:b1:06:1c:e6:52:57:25:03:f2:06:79:1f:9c:da:8b:
         5d:26:a1:6c:3a:fe:48:b2:42:75:46:63:00:49:f7:7c:c3:e3:
         7b:e3:a7:ee:ba:69:72:07:2b:18:62:b1:af:95:73:5e:bd:e4:
         b1:95:a5:e3:b7:76:4c:f9:71:2c:72:76:4c:4f:02:f0:e9:3c:
         3d:d5:77:e3:bd:14:2a:fc:86:a6:0e:72:4b:7b:ed:d2:53:2f:
         9e:04:af:44:e3:c8:b2:de:b2:5b:30:b1:36:27:6f:fa:e8:5a:
         d5:99:42:5f:69:02:2c:0c:71:32:c5:74:29:9d:6f:28:ba:76:
         06:6e:9f:b7:4a:bf:f7:cf:f4:a9:57:c5:f6:5e:9b:09:db:01:
         af:3d:81:a1
-----BEGIN CERTIFICATE-----
MIIFkjCCBHqgAwIBAgISAZBpENpWI9dmQU0hbogEbblqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwNjMwMTIxMzUwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZTg1MDM1NWE4ZGQ5OWZlYWY0YzFiY2JhNDI2YjVlM2E0ZDE1NjhjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApimtq9GhvTGmLHU+eJT2dUqm5cVy
ItBK5RVQ+/Wx3AnnXQn+XkXEf4ia09SXIkRkXzVem7j4tVGPbJtElbvnhKOVRv2P
fkxRv7Z0ESjmZptjfL5AXzm+358icgnQsKFz9iWAFag+oN12HDER8Oae227nNhRP
a/wNStTgNHz9hlVJPUs9sd9hYiaTALYLgvHZY500Bpb615MvmnPFPSx1qxRTLgf2
ruRpGnXUreiJgdzBWkJ3ChZG3Zq6jH9V7uc+MoY26cQ/4/YWFY/Qa5YmZ7ev+Ei6
INPtGvVLrA1pe99jFLKtYYumpKrpxkp3zccqbVUdjgDG/+SGMTRDu4FSywIDAQAB
o4ICnjCCApowHQYDVR0OBBYEFA6FA1Wo3Zn+r0wby6QmteOk0VaMMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggFCBggrBgEFBQcBCwSCATQwggEwMGAGCCsGAQUFBzAFhlRy
c3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2RkZTgz
N2ZiLTYzOTAtNDFiNS04MmEwLWYwZDAyYzAzYTJjNi8xMS8wgY0GCCsGAQUFBzAK
hoGAcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9k
ZGU4MzdmYi02MzkwLTQxYjUtODJhMC1mMGQwMmMwM2EyYzYvMTEvMEU4NTAzNTVB
OEREOTlGRUFGNEMxQkNCQTQyNkI1RTNBNEQxNTY4Qy5tZnQwPAYIKwYBBQUHMA2G
MGh0dHBzOi8vcnJkcC5wYWFzLnJwa2kucmlwZS5uZXQvbm90aWZpY2F0aW9uLnht
bDBZBgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jcmwwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMD
I90wDQYJKoZIhvcNAQELBQADggEBACM1QnxEoZAV1+RiZAUV2WUZfsDlgIGgokW+
LTmzYebbVzlGtZDNhNoHf/Ko7S9mugw2j0pGfBJo6fr3HFurxvfaTExs5fBYx/19
gwN9/tdPP7cOZ40ely/URt+L1N2KUtL5akmAEaHajn0wC3wl+LEGHOZSVyUD8gZ5
H5zai10moWw6/kiyQnVGYwBJ93zD43vjp+66aXIHKxhisa+Vc1695LGVpeO3dkz5
cSxydkxPAvDpPD3Vd+O9FCr8hqYOckt77dJTL54Er0TjyLLeslswsTYnb/roWtWZ
Ql9pAiwMcTLFdCmdbyi6dgZun7dKv/fP9KlXxfZemwnbAa89gaE=
-----END CERTIFICATE-----