Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/HGvtJ_OlMReTumCvn417toYIke0.cer
File:                     HGvtJ_OlMReTumCvn417toYIke0.cer (raw, json)
Hash identifier:          FmUBVO6Pjwd2gasx4YG9+R03jykW0w3k2HMNWRKCR+k=
Subject key identifier:   1C:6B:ED:27:F3:A5:31:17:93:BA:60:AF:9F:8D:7B:B6:86:08:91:ED
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01906910C1258DEA4622EA764AC337001AE2
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/20/1C6BED27F3A5311793BA60AF9F8D7BB6860891ED.mft
caRepository:             rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/20/
Notify URL:               https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before:   Sun 30 Jun 2024 12:13:44 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    AS: 209245

Validation:               Failed, certificate revoked on Sun 07 Jul 2024 18:30:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:69:10:c1:25:8d:ea:46:22:ea:76:4a:c3:37:00:1a:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jun 30 12:13:44 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=1c6bed27f3a5311793ba60af9f8d7bb6860891ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:91:9f:0e:75:c3:a0:f9:31:3a:cc:57:f2:1c:
                    78:6e:56:f2:f6:10:d5:6b:f5:0b:80:8b:e9:f5:5d:
                    e4:ba:4b:f4:5a:51:fe:11:3a:57:8f:44:4e:33:04:
                    ee:90:f9:26:0f:62:a0:e0:aa:05:5e:35:1e:fa:1b:
                    58:da:b7:37:b0:68:64:1f:5c:4e:dc:00:7c:55:a5:
                    e8:3f:ee:76:35:01:bf:4a:74:2f:0d:c8:5b:d2:b2:
                    99:66:33:83:50:03:bf:bb:8a:6c:c9:97:17:be:a8:
                    95:be:50:d6:77:cb:78:c2:03:88:2b:51:89:13:19:
                    ff:94:7f:65:f0:d5:39:37:79:87:86:ee:e9:c1:36:
                    bf:9b:a3:d0:6f:03:ef:a1:04:39:43:a6:cd:18:03:
                    2a:ad:d0:50:2b:b7:b3:8d:de:79:92:90:1a:31:ed:
                    5b:b0:48:ad:d0:84:40:11:04:32:73:c7:9c:f3:77:
                    36:14:33:80:39:c5:24:6e:06:2f:8e:8e:ef:29:ee:
                    33:bc:36:45:e9:bf:b3:68:11:b7:d7:4b:9b:79:3b:
                    88:18:f1:d6:70:10:e0:71:80:25:4d:95:f0:6c:9d:
                    65:05:bf:ce:52:cc:53:a1:97:f1:13:09:fe:25:1f:
                    69:29:e2:16:05:96:f8:d1:53:70:bc:aa:28:5c:3e:
                    00:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:6B:ED:27:F3:A5:31:17:93:BA:60:AF:9F:8D:7B:B6:86:08:91:ED
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/20/
                RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/20/1C6BED27F3A5311793BA60AF9F8D7BB6860891ED.mft
                RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  209245

    Signature Algorithm: sha256WithRSAEncryption
         63:7c:ed:52:eb:c4:a1:63:8d:2f:a3:c2:eb:f5:d3:d1:b2:2c:
         aa:79:4d:ed:d0:cc:6a:fc:c6:89:e7:60:cd:d1:9d:49:7b:96:
         b3:21:bd:16:8d:17:ec:1c:68:20:4a:9a:fa:b5:76:03:20:ca:
         e8:6c:f9:1c:6a:5d:3d:58:ce:a8:b1:b7:4b:e4:0f:65:65:5c:
         89:5c:04:72:b4:eb:de:dc:4b:f2:dd:75:d4:f1:4f:90:3e:53:
         8e:da:49:54:02:db:a6:bf:5c:16:8f:07:40:48:1c:dc:40:7b:
         c8:93:3a:65:29:90:dd:ed:2c:2d:c5:7a:59:87:95:cb:e0:b0:
         e6:22:60:dc:95:8c:bb:15:e7:a8:4f:20:83:83:9a:4c:8e:37:
         8b:4c:7c:30:38:43:48:88:0a:e6:35:33:17:f8:2d:41:96:fc:
         e8:3b:de:a6:82:4d:f8:06:28:d9:40:f9:b2:2a:1f:f2:e1:10:
         04:69:fe:97:e5:3b:48:54:32:b7:ce:71:30:57:97:9a:5b:7b:
         9a:8a:61:6a:a4:b2:cc:1c:af:74:6f:cd:4c:ab:b1:09:84:97:
         b3:ce:46:a2:88:9a:56:8a:9f:95:d2:c9:d1:ea:0a:17:f1:d6:
         e3:69:28:37:df:e5:09:6f:3a:28:cf:a2:8e:13:c6:9d:32:ec:
         02:47:32:b6
-----BEGIN CERTIFICATE-----
MIIFkjCCBHqgAwIBAgISAZBpEMEljepGIup2SsM3ABriMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwNjMwMTIxMzQ0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYzZiZWQyN2YzYTUzMTE3OTNiYTYwYWY5ZjhkN2JiNjg2MDg5MWVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArZGfDnXDoPkxOsxX8hx4blby9hDV
a/ULgIvp9V3kukv0WlH+ETpXj0ROMwTukPkmD2Kg4KoFXjUe+htY2rc3sGhkH1xO
3AB8VaXoP+52NQG/SnQvDchb0rKZZjODUAO/u4psyZcXvqiVvlDWd8t4wgOIK1GJ
Exn/lH9l8NU5N3mHhu7pwTa/m6PQbwPvoQQ5Q6bNGAMqrdBQK7ezjd55kpAaMe1b
sEit0IRAEQQyc8ec83c2FDOAOcUkbgYvjo7vKe4zvDZF6b+zaBG310ubeTuIGPHW
cBDgcYAlTZXwbJ1lBb/OUsxToZfxEwn+JR9pKeIWBZb40VNwvKooXD4ApQIDAQAB
o4ICnjCCApowHQYDVR0OBBYEFBxr7SfzpTEXk7pgr5+Ne7aGCJHtMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggFCBggrBgEFBQcBCwSCATQwggEwMGAGCCsGAQUFBzAFhlRy
c3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2RkZTgz
N2ZiLTYzOTAtNDFiNS04MmEwLWYwZDAyYzAzYTJjNi8yMC8wgY0GCCsGAQUFBzAK
hoGAcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9k
ZGU4MzdmYi02MzkwLTQxYjUtODJhMC1mMGQwMmMwM2EyYzYvMjAvMUM2QkVEMjdG
M0E1MzExNzkzQkE2MEFGOUY4RDdCQjY4NjA4OTFFRC5tZnQwPAYIKwYBBQUHMA2G
MGh0dHBzOi8vcnJkcC5wYWFzLnJwa2kucmlwZS5uZXQvbm90aWZpY2F0aW9uLnht
bDBZBgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jcmwwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMD
MV0wDQYJKoZIhvcNAQELBQADggEBAGN87VLrxKFjjS+jwuv109GyLKp5Te3QzGr8
xonnYM3RnUl7lrMhvRaNF+wcaCBKmvq1dgMgyuhs+RxqXT1Yzqixt0vkD2VlXIlc
BHK0697cS/LdddTxT5A+U47aSVQC26a/XBaPB0BIHNxAe8iTOmUpkN3tLC3FelmH
lcvgsOYiYNyVjLsV56hPIIODmkyON4tMfDA4Q0iICuY1Mxf4LUGW/Og73qaCTfgG
KNlA+bIqH/LhEARp/pflO0hUMrfOcTBXl5pbe5qKYWqksswcr3RvzUyrsQmEl7PO
RqKImlaKn5XSydHqChfx1uNpKDff5QlvOijPoo4Txp0y7AJHMrY=
-----END CERTIFICATE-----