Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/IDxOg8SKYNjBhepu8srtU4Iy6lQ.cer
File:                     IDxOg8SKYNjBhepu8srtU4Iy6lQ.cer (raw, json)
Hash identifier:          AzsbL7EGwqMjeJ5vsNvIT2dXn58wPIHE17pbVbfgC68=
Subject key identifier:   20:3C:4E:83:C4:8A:60:D8:C1:85:EA:6E:F2:CA:ED:53:82:32:EA:54
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018CC2DAFC1DB1AF4C48D829D3A0544ED7F8
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/f6/3075d2-7894-495a-96b4-0499900bbc18/1/IDxOg8SKYNjBhepu8srtU4Iy6lQ.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/f6/3075d2-7894-495a-96b4-0499900bbc18/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 02:29:40 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    AS: 49119

Validation:               Failed, certificate revoked on Wed 24 Jan 2024 11:47:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c2:da:fc:1d:b1:af:4c:48:d8:29:d3:a0:54:4e:d7:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 02:29:40 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=203c4e83c48a60d8c185ea6ef2caed538232ea54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:2b:6c:db:04:a6:bc:53:88:0d:57:64:64:96:
                    4a:48:08:16:c5:73:cb:55:6a:ad:a0:ff:d0:43:92:
                    23:c5:0e:03:f8:4c:f6:39:8d:cb:74:f1:0b:cb:29:
                    10:e1:fd:0b:e5:ed:74:9f:6c:03:eb:d1:bc:b8:76:
                    7a:ee:40:b1:4c:ec:8e:14:4c:f4:20:75:6b:4e:d9:
                    e9:ec:23:d9:cf:30:82:67:87:64:cf:aa:bf:22:08:
                    7c:6f:fa:81:ff:45:87:e2:b3:eb:31:9c:be:fd:fe:
                    32:eb:18:44:01:90:a8:a0:19:ae:ec:af:27:a3:83:
                    ca:30:24:d4:bf:91:d6:ae:e9:54:60:f5:03:cf:3c:
                    21:f0:94:e9:82:ea:f3:90:b6:22:77:72:f6:b4:b4:
                    9b:63:08:ff:4d:9f:05:72:35:38:4e:2c:c1:14:95:
                    66:fd:45:ad:35:11:45:50:58:23:54:1e:bb:c2:f4:
                    f2:13:6f:ea:ee:67:7b:97:b5:76:ed:22:c8:48:d3:
                    5d:04:cc:d0:a9:74:ae:a6:2a:20:87:e9:45:49:c7:
                    c1:8f:ae:e3:19:e4:9a:4d:ae:3c:3c:a0:57:f1:84:
                    03:64:60:39:be:16:f2:5f:aa:5a:f9:26:84:40:ae:
                    74:23:c1:2b:d2:f3:28:c0:01:b5:21:ff:a3:f7:8a:
                    de:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:3C:4E:83:C4:8A:60:D8:C1:85:EA:6E:F2:CA:ED:53:82:32:EA:54
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/3075d2-7894-495a-96b4-0499900bbc18/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/3075d2-7894-495a-96b4-0499900bbc18/1/IDxOg8SKYNjBhepu8srtU4Iy6lQ.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  49119

    Signature Algorithm: sha256WithRSAEncryption
         5c:f4:16:19:72:ca:96:73:26:11:68:85:6e:98:62:e3:87:57:
         a9:64:2d:57:7d:3d:f2:6c:2d:7d:0c:a4:9e:17:5f:4a:39:73:
         a2:6c:35:2d:d5:8a:82:28:fb:d3:32:cf:3f:5c:7d:54:1e:de:
         aa:aa:04:f8:58:4d:09:89:09:c6:17:e4:d2:a0:4f:40:d9:47:
         15:03:a7:f3:02:dd:fb:61:f0:5a:95:5e:27:19:f0:de:37:40:
         9a:5f:52:69:99:2f:3f:c0:d9:9f:c9:a3:fe:1e:42:01:23:2a:
         98:ef:58:c5:62:bb:2b:b9:9b:73:9f:3f:ed:c1:c3:a9:62:4d:
         8e:d6:78:28:68:c3:e5:c2:bf:1f:af:9b:5e:49:0e:13:8f:1a:
         27:2d:f6:ab:6b:74:8d:cd:8c:26:3f:d0:50:32:79:d4:66:78:
         a3:bd:5c:eb:d0:0e:57:a5:54:7b:df:68:13:8e:9f:8e:81:fe:
         09:45:de:01:45:12:23:c8:db:75:e5:d5:7f:bc:8a:16:19:cf:
         10:b8:4c:38:17:6e:28:30:c0:4c:0e:4e:da:56:25:2b:2f:cb:
         28:cd:08:de:0c:b4:d0:9b:c3:d3:42:6c:08:f4:57:88:f5:31:
         bb:d7:df:49:72:bc:7c:01:3d:78:f5:a1:08:dc:f2:1d:fd:48:
         2a:de:42:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----