Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/HiXLvxz6ojJZJBSElMYS44ihGjw.cer
File:                     HiXLvxz6ojJZJBSElMYS44ihGjw.cer (raw, json)
Hash identifier:          gFjsgmFyTIzBHQAu3PkKH1Yc+mmolePqYFY/Kif5bRs=
Subject key identifier:   1E:25:CB:BF:1C:FA:A2:32:59:24:14:84:94:C6:12:E3:88:A1:1A:3C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018CC794A52C67E66DCDF824670B5E98FF4F
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/3d/884270-cb8e-486b-a63e-948c55a12c95/1/HiXLvxz6ojJZJBSElMYS44ihGjw.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/3d/884270-cb8e-486b-a63e-948c55a12c95/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Tue 02 Jan 2024 00:30:56 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    AS: 48752
                          AS: 202197

Validation:               Failed, certificate revoked on Wed 21 Feb 2024 23:16:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c7:94:a5:2c:67:e6:6d:cd:f8:24:67:0b:5e:98:ff:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 00:30:56 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=1e25cbbf1cfaa2325924148494c612e388a11a3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:af:a4:e5:d2:c9:56:67:9e:7a:62:3a:1d:2b:
                    ac:0a:22:60:99:52:29:50:4d:07:e5:12:6c:e6:5f:
                    b1:df:18:20:3b:35:db:74:d1:7d:36:b7:8e:93:87:
                    7b:8e:10:fc:e4:12:a4:b1:24:75:04:58:fb:fb:10:
                    79:09:9b:fa:9e:08:91:12:e0:04:3d:60:2b:8a:ee:
                    46:ac:a0:05:da:49:fc:fd:32:2c:34:92:65:a1:50:
                    b8:c9:67:63:8f:d2:9f:fa:5f:d6:93:c0:ba:a7:6e:
                    fd:f6:08:be:eb:e6:7d:71:80:f8:ef:dc:e0:32:f2:
                    88:26:af:4f:50:0f:c1:96:35:d2:ab:8e:dc:6c:4c:
                    7c:6a:36:ce:52:68:e5:ec:0c:2e:57:12:5d:f9:7f:
                    d3:9c:22:83:18:4d:b4:3d:b6:71:d6:99:4c:9c:2e:
                    4d:d3:ff:a6:0f:aa:21:91:04:23:c6:e6:06:5c:83:
                    c1:ac:61:45:e1:c2:4a:29:82:c1:7d:55:e2:37:85:
                    fb:89:a9:90:bc:0e:2e:f0:9b:f4:8a:8f:2d:b5:da:
                    d1:4c:40:07:da:e3:89:9d:ea:ca:cc:79:0c:fa:c1:
                    97:57:e6:c8:f1:c0:c7:0f:4f:59:2e:da:3b:74:f1:
                    57:80:7c:38:1c:46:6e:8c:f1:4d:64:61:b0:7a:4b:
                    f7:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:25:CB:BF:1C:FA:A2:32:59:24:14:84:94:C6:12:E3:88:A1:1A:3C
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/884270-cb8e-486b-a63e-948c55a12c95/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/884270-cb8e-486b-a63e-948c55a12c95/1/HiXLvxz6ojJZJBSElMYS44ihGjw.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  48752
                  202197

    Signature Algorithm: sha256WithRSAEncryption
         58:85:3f:f1:0d:f7:bf:e2:30:fb:ea:04:45:92:80:a1:08:16:
         11:ed:ab:e2:67:19:b8:92:72:6f:c7:ac:2c:a1:e8:3e:83:b7:
         35:ca:ea:3f:f0:7d:12:94:d0:fd:88:79:09:2b:d8:86:62:0e:
         bd:9f:7c:42:eb:5b:6a:21:c2:32:95:96:60:10:c4:e4:c5:94:
         d6:25:5a:dd:5e:ec:1a:99:c6:2b:78:41:1f:db:f5:b6:a3:4b:
         55:fa:f9:e7:0e:85:f7:4d:29:d0:2c:82:ea:94:a4:51:bc:51:
         3d:9c:6f:6c:6d:2f:f5:54:ed:7c:64:c4:8b:66:7d:73:47:83:
         9a:9f:ec:41:c3:75:b7:fe:f6:5b:93:51:ef:8f:e1:d3:a7:fb:
         63:d9:a2:7f:75:8e:d2:17:ca:cb:94:46:d9:66:b8:b2:9b:38:
         a2:ee:68:b3:88:fc:38:66:75:df:13:2f:f7:28:22:1b:d3:5a:
         ef:c0:3f:73:17:55:89:ab:78:3e:98:70:92:30:e0:f1:78:1d:
         24:53:24:58:16:05:e4:cb:44:31:bc:f4:d9:82:ae:83:9e:d7:
         2c:89:2f:60:9e:bf:db:bc:dd:9b:68:97:b4:d8:e3:41:2f:e4:
         10:4e:32:a2:da:3b:98:75:a6:4a:12:0a:1f:00:c3:b8:be:38:
         4c:a2:09:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----