Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Kxi2u_02b2RizPL9TLA9-64TI2s.cer
File:                     Kxi2u_02b2RizPL9TLA9-64TI2s.cer (raw, json)
Hash identifier:          WuAxDIeazrUy1vEDX/+ruF9kKBqIVjMs8tHTdVsaJOE=
Subject key identifier:   2B:18:B6:BB:FD:36:6F:64:62:CC:F2:FD:4C:B0:3D:FB:AE:13:23:6B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018888FEE27CFE804602ADE83D2EAD5675C0
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/15/ba7012-97fd-4416-85a8-38a5f5e1d5e3/1/Kxi2u_02b2RizPL9TLA9-64TI2s.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/15/ba7012-97fd-4416-85a8-38a5f5e1d5e3/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 05 Jun 2023 00:39:45 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    AS: 198366

Validation:               Failed, certificate revoked on Mon 05 Jun 2023 00:49:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:88:fe:e2:7c:fe:80:46:02:ad:e8:3d:2e:ad:56:75:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jun  5 00:39:45 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=2b18b6bbfd366f6462ccf2fd4cb03dfbae13236b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:92:9d:37:38:65:d0:2a:5c:e5:cc:cf:5d:af:
                    2e:53:ee:af:e5:f4:cb:fb:04:13:d9:59:30:6c:9b:
                    01:be:0d:a3:8d:23:7e:91:ff:57:a6:1e:20:8d:3a:
                    de:fd:a2:11:5e:db:86:6b:2d:41:21:e2:53:95:6c:
                    22:54:d4:23:75:a0:cb:4f:de:17:52:3f:e0:0e:e5:
                    c5:b7:22:d6:46:2a:f2:aa:8d:f9:a6:7b:fd:67:7d:
                    98:51:dd:e6:21:aa:9c:c9:36:98:9f:db:ef:17:4b:
                    03:9c:21:09:1e:68:5a:7a:38:c6:c8:95:e5:4d:f5:
                    8d:a3:3d:14:67:6d:9b:e7:cb:fe:1c:a2:5e:80:ae:
                    85:90:82:85:93:25:c8:57:86:4a:8c:88:32:ee:aa:
                    b2:a1:1a:47:2a:cf:e4:04:26:db:64:51:24:ca:77:
                    12:22:e2:4e:0c:81:16:27:2a:47:4a:dd:3b:51:e2:
                    af:b6:11:f7:cc:3c:3e:71:de:67:28:24:a6:3a:e6:
                    31:0b:89:42:c1:0e:74:14:ef:41:e1:cb:2b:f0:07:
                    8e:69:36:e4:71:df:6d:04:6c:a3:5e:31:9c:c8:50:
                    5e:39:2c:80:5b:40:ff:00:90:ea:77:15:f0:e3:52:
                    1a:3d:a8:2c:2a:db:8a:0c:1d:d3:c7:7f:14:65:72:
                    64:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:18:B6:BB:FD:36:6F:64:62:CC:F2:FD:4C:B0:3D:FB:AE:13:23:6B
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/ba7012-97fd-4416-85a8-38a5f5e1d5e3/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/ba7012-97fd-4416-85a8-38a5f5e1d5e3/1/Kxi2u_02b2RizPL9TLA9-64TI2s.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  198366

    Signature Algorithm: sha256WithRSAEncryption
         7f:17:cf:f0:51:af:ff:1c:c1:51:e5:a9:45:86:53:32:a8:21:
         26:68:13:11:9d:19:d7:59:fc:e6:ee:8c:ad:9f:f5:22:e3:f6:
         91:0a:de:4e:3b:9d:55:3a:59:25:bf:1b:9f:aa:10:76:e6:fd:
         d2:1f:4d:88:42:20:0a:4b:69:b9:04:e0:89:12:88:d3:13:93:
         83:74:d2:39:ba:35:72:9d:4c:c8:d5:f2:44:31:04:08:92:87:
         9a:5e:fc:89:11:d8:73:85:de:76:45:d0:8d:91:30:8e:93:05:
         d0:3d:dd:f0:13:c5:67:04:4e:f7:00:1f:43:99:34:05:58:2a:
         7e:de:30:14:ec:77:66:51:bd:3b:14:20:91:e9:fc:d1:cf:33:
         af:24:c1:cb:e7:15:b8:cc:ad:99:08:18:57:f8:ce:a2:00:7b:
         ab:05:d9:82:fe:be:4d:37:5d:4a:8b:90:4f:31:ee:b1:02:6b:
         2c:07:a0:25:22:b1:30:31:6a:c3:0d:a0:85:32:33:a2:bd:64:
         c1:26:01:20:04:51:76:7a:cc:34:05:4b:aa:fe:ea:eb:fc:dd:
         bb:aa:95:db:0d:12:5d:49:4f:9a:c0:38:d2:ea:d8:17:81:9e:
         97:93:13:83:28:30:7f:f9:ba:1e:86:8a:a7:d8:d1:56:45:f7:
         bf:38:16:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----