Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/HEXicj05SBx47Uk3sxko6fYYqfc.cer
File:                     HEXicj05SBx47Uk3sxko6fYYqfc.cer (raw, json)
Hash identifier:          /cKf+FLBuy3wA13/aqKu34rVAJhbvwWrq25dbFZXJQ8=
Subject key identifier:   1C:45:E2:72:3D:39:48:1C:78:ED:49:37:B3:19:28:E9:F6:18:A9:F7
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018FC2FD04B7382705288F3472832AFC8CC0
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/a5/19d41f-75f8-4345-aec5-bb25a8150732/1/HEXicj05SBx47Uk3sxko6fYYqfc.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/a5/19d41f-75f8-4345-aec5-bb25a8150732/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 29 May 2024 06:15:12 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    AS: 209612

Validation:               Failed, certificate revoked on Thu 30 May 2024 14:50:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:c2:fd:04:b7:38:27:05:28:8f:34:72:83:2a:fc:8c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: May 29 06:15:12 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=1c45e2723d39481c78ed4937b31928e9f618a9f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:a2:72:d9:55:01:00:b9:47:f8:05:79:36:ed:
                    f8:03:04:9f:ac:8c:98:9a:fd:17:82:bd:0d:ad:81:
                    e5:06:38:d1:5d:b0:c3:23:3b:a4:ce:18:59:3f:b9:
                    3a:09:39:92:d3:12:af:04:2c:37:74:01:1c:bc:89:
                    bd:29:50:61:6a:1d:fe:28:88:16:a0:18:0b:ba:77:
                    d2:b2:16:7f:50:a3:83:71:7d:9e:bd:88:ce:d6:7a:
                    8f:69:f9:66:ed:a2:ea:eb:a8:4e:42:a3:a2:0a:c8:
                    5e:eb:b2:dc:df:8e:dc:f8:36:1d:ca:3b:09:b2:c2:
                    4f:e0:ec:a4:20:a2:ce:e6:c9:39:ab:fd:a1:d2:b1:
                    5f:90:4a:8e:aa:4e:75:a2:3d:c0:4b:81:cf:0b:af:
                    aa:fc:6d:e3:f6:27:2a:47:6b:39:b2:42:a4:56:70:
                    45:fc:79:81:b9:97:fa:1e:0a:8a:21:b9:ea:93:57:
                    51:d9:e5:66:76:bf:06:12:75:cf:b2:13:1b:a4:96:
                    ef:db:98:35:df:27:d7:09:fb:f2:59:bd:d0:26:6f:
                    f7:64:29:67:5a:df:74:cd:71:fc:c2:32:b9:41:03:
                    bb:18:ec:96:6a:91:3a:f3:5b:ba:f8:00:53:53:56:
                    ae:4f:62:c3:9a:e9:7a:91:6f:9d:de:f1:c1:19:99:
                    ca:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:45:E2:72:3D:39:48:1C:78:ED:49:37:B3:19:28:E9:F6:18:A9:F7
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/19d41f-75f8-4345-aec5-bb25a8150732/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/19d41f-75f8-4345-aec5-bb25a8150732/1/HEXicj05SBx47Uk3sxko6fYYqfc.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  209612

    Signature Algorithm: sha256WithRSAEncryption
         98:79:cc:96:4f:f7:63:78:a0:c8:1b:7d:0c:6b:e4:da:06:ec:
         c7:c0:b8:fd:84:f7:f8:47:b9:88:cb:f9:6a:94:44:42:89:c2:
         19:50:61:b0:0e:38:72:b1:6a:9a:90:54:7d:4a:65:07:f6:c1:
         4c:a3:cb:b7:50:aa:96:14:36:8b:37:7e:00:13:7b:13:9d:f4:
         be:b2:38:c9:e2:4b:8f:a9:f9:a1:3b:85:c1:66:e6:33:4e:25:
         d7:88:81:97:7d:06:e8:26:cc:12:7b:64:e3:5f:3f:08:09:08:
         55:09:6f:31:fd:0e:eb:d0:26:9f:e5:32:9d:1e:c6:08:e9:ab:
         f0:08:cb:26:01:66:1c:87:0e:7b:b8:1f:01:5e:87:e8:a2:f5:
         b0:f1:e9:61:d5:96:2d:18:c0:d7:2c:3c:90:cb:8a:fd:46:63:
         27:d1:6f:b1:ac:a5:6f:87:1e:14:56:a7:5e:97:a1:1b:8d:4b:
         be:28:71:49:8d:b4:70:47:1a:dc:9c:9a:a8:76:51:78:6f:33:
         20:c2:82:4c:8c:7b:92:40:ab:2f:08:59:57:1e:98:88:f6:f2:
         d4:30:69:a7:07:95:16:f5:86:0e:e2:4e:bc:18:5b:87:73:de:
         14:de:94:40:3f:04:a2:a6:27:f2:1b:e9:22:28:c7:be:56:3f:
         6d:c8:62:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----