Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Fxdwd73DVA6sRor-xpZBBYmX8-I.cer
File:                     Fxdwd73DVA6sRor-xpZBBYmX8-I.cer (raw, json)
Hash identifier:          vUQYNB2AxgeDusFXl2wT3k6BwEYzbgKi87kMAntw604=
Subject key identifier:   17:17:70:77:BD:C3:54:0E:AC:46:8A:FE:C6:96:41:05:89:97:F3:E2
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0190E8706A835A824ABB9A3AB778BF319D34
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/64/0aff22-ecf2-4617-8fea-43586778600b/1/Fxdwd73DVA6sRor-xpZBBYmX8-I.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/64/0aff22-ecf2-4617-8fea-43586778600b/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 25 Jul 2024 05:49:59 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    AS: 214486

Validation:               Failed, certificate revoked on Mon 29 Jul 2024 18:04:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:e8:70:6a:83:5a:82:4a:bb:9a:3a:b7:78:bf:31:9d:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jul 25 05:49:59 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=17177077bdc3540eac468afec69641058997f3e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:9c:56:f3:43:84:1c:09:6d:c7:6d:a9:e2:5c:
                    86:08:41:fa:27:42:f4:8f:25:ca:c0:cf:db:a7:b5:
                    b1:f1:41:50:ff:60:ad:82:28:28:2b:2e:a8:ec:dc:
                    a5:5c:1a:12:62:b6:4a:1d:fe:f2:72:96:bf:16:97:
                    4a:6a:1e:b6:5c:12:e3:72:31:73:6d:60:dd:fc:f8:
                    47:6c:c5:ac:9c:01:15:e4:71:8e:dd:e0:4c:97:30:
                    0c:b3:4e:52:34:4f:e9:93:3a:c6:0f:13:cf:e8:4e:
                    26:c6:ac:cd:fc:ee:28:0e:f8:5c:83:0a:93:b0:15:
                    a0:2c:aa:9e:57:7e:65:c9:ce:dc:83:79:9e:0c:c4:
                    7a:7c:d2:06:e4:c5:ae:f1:4d:1e:c4:76:fe:a1:26:
                    b8:3e:0f:c7:89:d9:31:75:34:f6:2b:62:7a:6f:16:
                    5a:0c:71:f9:16:13:5a:66:45:d7:70:5b:a4:87:b8:
                    df:d1:63:66:2e:eb:c6:d9:cd:bf:7b:a1:ab:d9:5a:
                    9f:f0:65:92:10:7f:37:4b:e4:d6:ed:b9:d4:d7:48:
                    70:12:04:f4:78:67:3f:22:33:65:26:9a:d9:41:33:
                    b8:0c:69:c3:37:63:b6:f3:cd:88:82:aa:95:e4:a0:
                    08:5a:7a:e6:6c:fe:39:1d:95:4f:7d:64:3e:26:ea:
                    0b:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:17:70:77:BD:C3:54:0E:AC:46:8A:FE:C6:96:41:05:89:97:F3:E2
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/0aff22-ecf2-4617-8fea-43586778600b/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/0aff22-ecf2-4617-8fea-43586778600b/1/Fxdwd73DVA6sRor-xpZBBYmX8-I.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  214486

    Signature Algorithm: sha256WithRSAEncryption
         1b:5d:31:8f:af:03:51:9d:f7:52:2b:aa:80:be:db:51:98:46:
         e9:67:c1:c0:ea:ef:4e:b0:11:9f:16:0d:dd:db:57:5b:72:13:
         68:6e:91:1d:9d:b6:ee:7d:14:d2:d4:5c:e1:82:5f:8e:2e:92:
         11:b5:5e:c9:bd:ff:25:84:a4:2d:aa:cc:e8:28:a0:31:82:0a:
         07:9d:9a:1d:9f:43:c9:76:7e:5c:24:eb:e4:28:d7:8b:15:f9:
         a9:19:ab:37:84:1e:3b:e3:c6:e5:0f:81:c3:4d:f0:06:9e:75:
         85:8c:d4:4a:cc:f1:a0:e1:1a:58:77:69:5d:a7:e3:2c:81:af:
         b3:a9:1b:8c:70:fa:1b:7e:e5:f3:5b:34:8e:f8:ab:05:93:c6:
         7b:3e:c6:31:7c:39:a2:61:71:48:47:d5:3d:7f:09:76:e3:70:
         ef:ea:c0:6e:8e:12:92:b4:6f:71:50:01:86:ce:40:ec:19:6f:
         38:20:b7:66:39:31:ef:92:4d:60:ba:97:52:50:31:12:9f:b4:
         a0:2f:e6:44:98:96:06:6e:73:fb:9f:11:04:45:88:67:dd:8c:
         c4:f2:50:57:03:b5:40:95:52:61:c4:3f:13:ad:50:95:e7:d6:
         ab:bc:be:b2:9e:78:d2:ae:e4:5f:e7:d0:c6:33:c3:21:29:5c:
         e4:f0:d1:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----