Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/OV0LIy1YxovmwD8sFET1EDq8jKE.cer
File:                     OV0LIy1YxovmwD8sFET1EDq8jKE.cer (raw, json)
Hash identifier:          1eUF04xzFBsajNfP1B56wvxdQZmPysA6eprz2ENjBKs=
Subject key identifier:   39:5D:0B:23:2D:58:C6:8B:E6:C0:3F:2C:14:44:F5:10:3A:BC:8C:A1
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194228DA36B936F6E0ED91AA0BE17B4E4A8
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/93/9dfcfb-ae2d-4c04-a400-b8edeb166d62/1/OV0LIy1YxovmwD8sFET1EDq8jKE.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/93/9dfcfb-ae2d-4c04-a400-b8edeb166d62/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 15:48:15 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 207160
                          IP: 2001:67c:232c::/48
Validation:               Failed, certificate revoked on Thu 23 Jan 2025 14:04:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:22:8d:a3:6b:93:6f:6e:0e:d9:1a:a0:be:17:b4:e4:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 15:48:15 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=395d0b232d58c68be6c03f2c1444f5103abc8ca1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:27:b6:25:75:4d:10:62:55:16:d5:f7:f1:f8:
                    7d:2e:fa:37:a2:68:89:0f:c0:05:be:de:e4:a9:02:
                    35:8f:4c:0a:c7:47:bb:46:d8:a3:55:b7:ed:07:5e:
                    f0:d0:c4:29:3c:c7:74:21:69:93:26:b7:67:1c:20:
                    fd:82:bc:7d:91:ff:c0:75:c2:7c:3b:12:35:e1:68:
                    7c:c4:d9:28:b6:20:0d:fe:0e:d1:84:28:9e:9b:4f:
                    23:91:40:8f:b0:05:9a:bb:a3:ff:c5:9f:a4:87:16:
                    8d:f7:31:7d:4c:a9:5c:6e:eb:b2:4c:3f:c7:79:d4:
                    c6:40:cc:77:9e:90:6f:10:0d:a7:3f:0d:1c:91:56:
                    c2:7c:ba:0b:11:cd:e1:b6:37:4f:26:82:f4:61:b3:
                    d2:97:94:01:8f:eb:e1:d6:14:e6:5d:d5:19:a1:79:
                    3a:c0:6a:17:2b:27:48:15:63:d7:c9:6b:c1:e8:1e:
                    97:cd:8f:68:e7:d4:20:c5:25:c7:70:8c:73:1b:ac:
                    a2:73:14:ad:0f:42:83:91:6b:cc:2d:35:0f:60:4c:
                    4c:bd:56:9f:14:e8:b1:c1:62:3e:b0:5a:6b:ea:2d:
                    4b:28:a5:f3:19:8b:3b:54:75:01:bd:17:b7:a7:ce:
                    d3:f3:7d:7b:76:d1:8b:7c:03:fb:0c:e2:aa:e3:0e:
                    d6:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:5D:0B:23:2D:58:C6:8B:E6:C0:3F:2C:14:44:F5:10:3A:BC:8C:A1
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/9dfcfb-ae2d-4c04-a400-b8edeb166d62/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/9dfcfb-ae2d-4c04-a400-b8edeb166d62/1/OV0LIy1YxovmwD8sFET1EDq8jKE.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:232c::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  207160

    Signature Algorithm: sha256WithRSAEncryption
         a6:ea:0a:de:0e:3b:6c:16:06:c7:e1:ed:e1:ca:12:8f:7e:ec:
         5b:ba:f1:44:fa:3d:21:5d:11:7c:2e:1b:c6:52:a5:f0:a8:40:
         be:90:4f:6e:2a:3a:c8:b6:89:92:f7:25:58:6c:34:a5:33:95:
         f0:83:d1:9f:6a:05:9e:2a:d6:e9:3c:07:e6:c5:17:c5:ef:85:
         52:46:10:bc:28:17:ec:ff:af:85:3d:f9:9a:a9:69:76:9f:72:
         9a:32:e3:11:5e:7e:3c:09:af:87:ac:85:f9:ad:d1:2d:f8:35:
         e7:bd:f7:d9:d9:2e:04:72:f0:38:96:9b:a0:73:9b:4c:be:70:
         29:8b:0f:92:5f:97:2e:a8:13:4e:39:66:3c:40:fb:ff:e9:d6:
         f7:e4:dd:00:15:ba:9e:61:01:5f:7f:4f:02:3a:24:81:e0:82:
         d1:2f:a9:53:fa:86:1f:43:72:9a:8e:05:fb:1d:80:b6:42:a8:
         db:ff:5d:bd:c5:d9:9f:9d:e4:70:e2:08:c1:cd:4a:01:20:44:
         84:81:6f:ae:e8:15:4e:d1:4a:54:78:ec:f7:25:37:08:e1:c7:
         8d:44:d5:4f:e6:e4:1c:89:7e:f7:e4:7e:0f:fc:34:d5:49:2d:
         7a:55:3e:2f:c9:67:86:a0:5e:8f:11:95:a4:25:c7:35:cd:c8:
         da:ed:3d:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----