Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/LcIimFcDswAW35Uln9iKlscVFoI.cer
File:                     LcIimFcDswAW35Uln9iKlscVFoI.cer (raw, json)
Hash identifier:          gUeRi9s5mPghRb+y5kQiE4Y0qziAD5vWzEEqokSLDoQ=
Subject key identifier:   2D:C2:22:98:57:03:B3:00:16:DF:95:25:9F:D8:8A:96:C7:15:16:82
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0189F7598F388B2076B3D4B566930ED08EC6
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/26/330aad-ee2c-4892-9e58-053c3351959e/1/LcIimFcDswAW35Uln9iKlscVFoI.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/26/330aad-ee2c-4892-9e58-053c3351959e/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Tue 15 Aug 2023 03:59:49 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    AS: 203023

Validation:               Failed, certificate revoked on Thu 02 Nov 2023 12:52:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:f7:59:8f:38:8b:20:76:b3:d4:b5:66:93:0e:d0:8e:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Aug 15 03:59:49 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=2dc222985703b30016df95259fd88a96c7151682
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:66:32:ae:3d:00:8e:9b:c7:79:9a:cd:64:4a:
                    81:56:43:09:1e:72:f1:2a:06:26:2f:50:ab:f4:69:
                    db:b0:f2:d4:bb:b3:02:a7:e5:97:47:e9:b5:78:de:
                    b2:a0:6e:74:95:33:ca:26:82:39:d9:b9:fd:bd:20:
                    0d:c6:0d:c2:ab:15:2e:a5:fb:2e:4d:73:d2:7d:74:
                    03:e8:0f:d5:77:73:cf:44:eb:fd:15:62:9e:e2:24:
                    c2:58:45:fc:e1:2c:0f:e5:37:59:f8:53:84:bb:6e:
                    ba:96:31:1c:6d:ed:20:3f:cd:34:df:2a:62:64:55:
                    cd:96:5e:46:8a:a2:a3:f7:14:68:0d:6c:fc:2d:70:
                    5f:ac:da:48:e0:ca:62:51:48:1d:96:99:9b:72:b5:
                    84:f1:28:70:b9:5a:11:a5:7c:fd:97:41:8f:6e:9b:
                    47:85:0f:6a:d8:81:b6:1f:ed:09:7e:38:35:fb:c5:
                    f0:c6:88:0b:d9:b1:54:94:74:3b:5c:14:b7:2f:61:
                    1a:72:19:c0:54:29:2c:ef:7b:0f:5f:58:34:b1:07:
                    95:77:26:03:ab:a1:a8:5e:65:c7:bd:cd:dc:33:3a:
                    f1:2e:f0:1f:aa:d8:46:d5:9d:42:d3:b8:9b:1b:0d:
                    1e:8a:c0:ec:ce:07:be:06:52:c9:7e:f6:cc:20:e3:
                    0b:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:C2:22:98:57:03:B3:00:16:DF:95:25:9F:D8:8A:96:C7:15:16:82
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/330aad-ee2c-4892-9e58-053c3351959e/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/330aad-ee2c-4892-9e58-053c3351959e/1/LcIimFcDswAW35Uln9iKlscVFoI.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  203023

    Signature Algorithm: sha256WithRSAEncryption
         3e:2c:9a:7d:d1:f4:52:19:42:94:6b:94:3f:d9:69:bd:13:fc:
         e0:95:c5:82:43:df:6e:8d:fc:b4:83:34:c4:9f:0d:75:dc:f6:
         6f:a5:c1:fd:c7:e9:36:f9:cf:b3:bf:5d:16:40:a4:25:57:b4:
         a4:1b:62:2f:da:a0:1b:18:2e:ee:d2:bf:d0:c4:e0:c7:98:d0:
         e4:5f:9a:34:cb:95:d3:ae:80:21:03:19:f9:84:0e:8f:48:31:
         59:73:ee:44:53:67:dc:ff:54:72:23:c2:ba:bb:58:e8:0b:32:
         1d:82:ec:42:41:f1:51:5a:19:71:d8:96:e8:ac:ae:86:31:1f:
         80:c7:04:47:13:34:6a:00:28:1e:dd:72:41:b6:ed:20:d7:c1:
         b5:15:b9:5a:d0:35:39:b9:66:e4:d2:38:8e:5f:88:fb:09:e2:
         67:de:74:51:47:26:a0:97:c1:bf:f3:e8:4e:cd:36:b3:ca:bf:
         ab:b5:46:31:8c:35:c4:51:e0:f0:61:b4:99:d8:4e:09:40:bb:
         f5:d2:ce:0e:3d:a9:f9:37:dd:c5:80:59:ff:2b:7d:ef:ab:35:
         60:c4:36:65:ae:4d:e0:7b:ae:9c:cf:5c:f9:34:2c:85:54:ea:
         ee:c7:97:1d:3b:db:29:08:17:4e:2e:ea:f9:64:42:ac:2d:bb:
         f1:00:78:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----