Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/NPctY_w7zlpb_utr9f88n89niL4.cer
File:                     NPctY_w7zlpb_utr9f88n89niL4.cer (raw, json)
Hash identifier:          eZl8Mvlox8fApQWyjTBWYpn/qDuBEOkikuVUK4TwWec=
Subject key identifier:   34:F7:2D:63:FC:3B:CE:5A:5B:FE:EB:6B:F5:FF:3C:9F:CF:67:88:BE
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01906910CFF6F84F684C08FF118ECF3AD108
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/8/34F72D63FC3BCE5A5BFEEB6BF5FF3C9FCF6788BE.mft
caRepository:             rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/8/
Notify URL:               https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before:   Sun 30 Jun 2024 12:13:47 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    AS: 210563

Validation:               Failed, certificate revoked on Sun 07 Jul 2024 18:56:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:69:10:cf:f6:f8:4f:68:4c:08:ff:11:8e:cf:3a:d1:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jun 30 12:13:47 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=34f72d63fc3bce5a5bfeeb6bf5ff3c9fcf6788be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:ba:b9:53:af:74:b6:99:7d:26:c2:20:3b:10:
                    69:cf:9a:7b:0d:4d:f2:d8:a7:0d:d5:12:6b:1f:a1:
                    63:88:54:5a:fe:1b:b1:cc:72:9f:cc:47:da:61:3f:
                    a4:25:de:de:a8:16:7d:8c:48:cf:fc:58:3e:ad:3c:
                    96:77:31:96:5f:3b:a4:12:8d:e4:b1:67:95:ec:45:
                    43:8c:c7:e1:02:00:76:e6:c3:f6:ef:6d:58:6a:b2:
                    b8:c7:55:69:1f:c0:b3:d4:d7:2e:21:52:bc:7c:16:
                    4d:3d:80:cd:21:91:00:22:63:7d:58:a8:0f:62:99:
                    b5:0d:88:ce:c6:89:9a:d6:90:c4:14:b6:6e:af:b2:
                    d3:11:bd:43:2a:21:9b:1d:ac:c4:77:7e:83:6a:73:
                    2c:a6:2f:89:ce:cf:d6:ea:e6:72:b5:ef:99:07:45:
                    34:3c:22:d2:7b:29:0f:44:a3:b0:7d:66:01:a1:ae:
                    08:91:4d:2d:7a:9c:e3:c2:ff:d5:ca:8a:5c:a7:95:
                    16:6c:1b:fa:75:16:d6:3a:5d:10:00:84:c2:7f:3e:
                    ef:2a:44:97:27:64:ea:9d:da:37:e4:99:f7:08:9a:
                    84:22:6d:5b:89:fc:79:a8:2c:07:55:4d:66:3f:59:
                    a0:c3:03:ff:00:26:a3:3d:f5:c4:61:e9:62:6e:63:
                    4a:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:F7:2D:63:FC:3B:CE:5A:5B:FE:EB:6B:F5:FF:3C:9F:CF:67:88:BE
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/8/
                RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/8/34F72D63FC3BCE5A5BFEEB6BF5FF3C9FCF6788BE.mft
                RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  210563

    Signature Algorithm: sha256WithRSAEncryption
         6a:e4:8f:b3:7b:b4:c1:20:ae:80:df:3d:07:40:cb:e4:8c:1c:
         dd:85:e1:fd:90:cc:d0:99:67:eb:77:66:69:be:94:f1:1b:15:
         62:b7:6f:4e:c3:b1:5d:25:bb:6c:dd:f5:a7:7d:7b:10:ca:8e:
         92:e7:39:82:f4:9d:e8:d3:b2:1f:35:4f:8d:8e:ca:e1:dd:ae:
         ad:bb:2d:36:65:3b:49:d3:7a:e2:44:8a:27:e3:6b:2b:4c:35:
         4e:ba:7e:7a:f9:38:3f:4f:d2:7b:cd:f6:b3:f1:8f:ca:c1:f0:
         65:f1:28:1c:4a:c4:fa:e8:e2:9e:44:41:2d:15:97:6d:fa:f7:
         ed:04:5a:4d:b9:ea:eb:7b:95:8d:ed:b8:ce:db:90:3c:7a:c4:
         8d:8f:5c:0e:85:23:8d:f1:85:1e:61:ec:6d:b7:60:48:7c:f7:
         73:09:8f:2e:3f:9a:7f:0a:6b:83:09:ba:3b:71:b0:c1:3d:75:
         c2:88:23:38:02:79:3a:dc:b5:18:ad:fe:25:e4:ea:cd:25:70:
         fa:8b:1a:ec:f4:9d:b8:d0:50:f6:4d:02:49:28:8b:85:93:c5:
         43:ad:02:93:ab:2e:e6:fe:81:db:bf:ea:99:69:4f:97:1d:e6:
         f7:61:81:d8:58:e9:5e:9c:ba:d1:3f:ed:f1:38:61:42:72:0d:
         64:03:fe:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----