Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/JZx4a6EgyLZdeCPL7yv9XtvbSq8.cer
File:                     JZx4a6EgyLZdeCPL7yv9XtvbSq8.cer (raw, json)
Hash identifier:          0F0Sa1V1bOo7SZKVtZz1DJ4gA/fv9iLvrtRXco+fOMw=
Subject key identifier:   25:9C:78:6B:A1:20:C8:B6:5D:78:23:CB:EF:2B:FD:5E:DB:DB:4A:AF
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018571D70C8592A17DB9BA298EC86D8ADF84
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/b3/12548f-53e1-4acf-acc7-a4ba0f8d840e/1/JZx4a6EgyLZdeCPL7yv9XtvbSq8.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/b3/12548f-53e1-4acf-acc7-a4ba0f8d840e/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 02 Jan 2023 09:36:36 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    AS: 211880

Validation:               Failed, certificate revoked on Tue 06 Jun 2023 07:49:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:71:d7:0c:85:92:a1:7d:b9:ba:29:8e:c8:6d:8a:df:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 09:36:36 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=259c786ba120c8b65d7823cbef2bfd5edbdb4aaf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:87:0b:4a:36:f5:c2:89:14:f5:88:14:77:9d:
                    48:94:91:9a:16:a4:65:d3:e3:68:00:bd:e4:b0:8f:
                    cd:46:d3:d3:c9:83:66:4e:37:7b:bf:6b:f2:21:65:
                    4f:1b:58:a2:1a:52:c6:3a:58:e4:b5:1f:45:05:64:
                    77:55:d1:a3:f6:20:cc:00:20:c7:1b:ce:1a:04:95:
                    11:74:65:1f:4d:e7:74:40:ad:36:5f:76:1e:70:c6:
                    2a:07:fa:b0:6c:33:67:92:29:70:c0:8f:a3:73:88:
                    49:1c:49:0b:4b:39:62:88:61:2f:d0:c1:09:e2:3a:
                    53:6b:2a:b5:e5:ab:e7:c3:57:d5:b6:52:2b:df:d7:
                    80:71:ec:94:cc:61:b9:46:10:e6:79:a0:1e:f4:ec:
                    69:e2:8a:7c:c8:b9:6b:bd:37:60:74:8a:5b:fe:46:
                    c5:50:2a:84:aa:cb:3b:9a:00:b7:87:5f:b6:c1:f8:
                    55:c2:72:99:fb:8c:81:8b:9e:e8:ff:66:2d:15:80:
                    ff:64:71:70:59:70:e5:c3:e6:52:9b:32:67:17:b8:
                    97:09:eb:c8:f6:fc:76:af:97:85:5b:8c:3b:87:91:
                    4f:63:35:18:ec:c7:33:3b:3f:1c:db:3c:cb:18:a8:
                    75:84:b9:40:98:8a:bd:78:c1:b5:9e:91:29:03:14:
                    55:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:9C:78:6B:A1:20:C8:B6:5D:78:23:CB:EF:2B:FD:5E:DB:DB:4A:AF
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/12548f-53e1-4acf-acc7-a4ba0f8d840e/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/12548f-53e1-4acf-acc7-a4ba0f8d840e/1/JZx4a6EgyLZdeCPL7yv9XtvbSq8.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  211880

    Signature Algorithm: sha256WithRSAEncryption
         6a:cd:fe:7c:14:1f:c0:53:13:3d:f0:27:e5:18:8e:83:48:f8:
         5a:a6:2b:fc:90:bf:92:2e:b6:cf:55:2e:e3:82:dc:bf:b1:24:
         56:6d:a7:c6:2a:fd:07:c8:3c:e8:07:37:78:05:a7:3e:b4:be:
         a2:b5:9c:cf:f5:0c:1b:ae:c3:1c:8b:92:54:0e:5b:b9:71:ce:
         c7:c9:ce:bf:69:b1:11:ad:21:0c:ed:84:36:0f:2d:36:7e:92:
         7c:da:3c:f5:a4:37:07:67:f4:2a:d6:3c:8c:42:40:61:59:e2:
         3f:0c:12:69:7e:51:9c:68:ab:ad:d2:1d:8e:66:38:64:32:dc:
         c3:0a:c9:c5:ab:b5:14:19:03:c2:fc:d5:22:90:1a:8f:89:4f:
         bc:87:10:5c:47:cc:9d:32:e9:b6:41:d0:57:60:ac:a7:c4:e9:
         0e:e6:19:38:8b:c3:11:50:82:3d:7d:6e:43:68:ec:f8:7f:6e:
         d4:22:27:ea:ec:83:10:46:9a:f0:cd:87:82:48:a1:92:55:8a:
         cb:9a:31:ab:86:eb:fb:45:e5:6e:f2:26:d2:8e:ed:af:e1:00:
         6c:9a:ef:0c:99:52:e0:fe:bf:8a:46:4b:1d:cb:35:ca:17:52:
         11:9b:66:9a:6e:4e:70:2c:3f:ec:7f:c7:c5:7a:07:c5:a4:29:
         07:03:a3:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----