Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/OWqE5yk1Rx1q9a539jxqerSm5io.cer
File:                     OWqE5yk1Rx1q9a539jxqerSm5io.cer (raw, json)
Hash identifier:          DYxVOTe2wvD4SYRLRL9/OMnQkBhwM4x0ieSgBTqd6Ms=
Subject key identifier:   39:6A:84:E7:29:35:47:1D:6A:F5:AE:77:F6:3C:6A:7A:B4:A6:E6:2A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018C502995F8F672C405B30141083385F014
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rsync.paas.rpki.ripe.net/repository/be5277a1-1b41-45c2-90a2-2309993f3b34/0/396A84E72935471D6AF5AE77F63C6A7AB4A6E62A.mft
caRepository:             rsync://rsync.paas.rpki.ripe.net/repository/be5277a1-1b41-45c2-90a2-2309993f3b34/0/
Notify URL:               https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before:   Sat 09 Dec 2023 19:59:11 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    AS: 215978

Validation:               Failed, certificate revoked on Mon 11 Dec 2023 18:27:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:50:29:95:f8:f6:72:c4:05:b3:01:41:08:33:85:f0:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Dec  9 19:59:11 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=396a84e72935471d6af5ae77f63c6a7ab4a6e62a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:6f:f8:6d:6e:b7:b1:70:08:c4:df:24:01:3a:
                    97:2b:5f:15:86:05:53:67:fe:6e:3d:66:b1:0a:8b:
                    a8:8f:f1:3b:40:54:58:b9:cd:97:5d:5a:da:8a:54:
                    df:6c:a3:16:a7:1d:0f:a6:bc:28:b0:ae:80:ef:e0:
                    60:75:43:1e:98:5f:2a:4e:82:49:40:ff:14:69:4d:
                    15:29:80:f9:16:e3:12:bb:53:fd:be:d3:9c:42:45:
                    6c:b1:27:86:d4:71:78:8f:f5:ec:0d:57:ee:aa:91:
                    3c:a9:e6:4c:71:a7:75:fd:4a:d2:2d:9e:d2:eb:3b:
                    11:cd:7a:d9:91:f2:c2:c4:5b:15:fe:de:72:cb:7b:
                    87:5d:fb:31:7c:52:1c:7e:6c:9a:c8:78:b7:dc:a4:
                    bf:c3:16:ce:45:12:c0:b5:7d:8f:7d:6c:1a:c4:96:
                    7c:0b:85:e0:16:3c:27:41:94:ea:87:23:9e:f6:e0:
                    75:e7:15:f6:dc:2f:82:60:bf:f4:c0:f1:b4:a4:0e:
                    b6:64:c7:55:1c:a5:9a:1b:fc:cf:ff:63:61:bd:9c:
                    4b:a6:25:23:30:27:20:5e:92:83:89:50:84:83:23:
                    e3:1c:db:7f:e1:ed:b7:53:37:ce:69:c4:66:74:b6:
                    f0:ba:97:0f:b7:e2:5f:1f:60:ae:c6:19:78:77:1d:
                    6c:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:6A:84:E7:29:35:47:1D:6A:F5:AE:77:F6:3C:6A:7A:B4:A6:E6:2A
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/be5277a1-1b41-45c2-90a2-2309993f3b34/0/
                RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/be5277a1-1b41-45c2-90a2-2309993f3b34/0/396A84E72935471D6AF5AE77F63C6A7AB4A6E62A.mft
                RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  215978

    Signature Algorithm: sha256WithRSAEncryption
         a0:e3:65:45:1b:ff:87:5b:60:84:10:30:2c:51:4c:45:d2:da:
         a8:68:1b:e2:8e:f0:6d:bc:51:cf:d2:5e:e5:9b:05:c2:86:57:
         88:3b:12:30:b6:d0:7d:06:27:c4:cf:24:a1:2b:60:be:7b:21:
         b6:03:a1:a3:52:a6:68:9e:9d:1f:85:d3:da:7e:aa:b6:13:d8:
         bb:ed:b9:10:78:d0:97:b3:ea:bc:fb:b0:4b:62:b1:4c:c7:ff:
         6d:02:07:e9:28:a3:d1:93:d7:31:6a:c3:06:44:76:06:cf:e5:
         9f:d0:b0:4e:e0:34:df:a6:e5:e0:09:2e:b4:c1:78:52:7b:bc:
         a4:a8:37:76:5c:16:35:7c:4f:83:44:1f:c7:9d:c3:df:1f:f4:
         0b:23:96:c8:af:35:44:2a:7b:df:7e:b9:fb:0a:e6:01:27:85:
         56:cf:06:f5:2d:b7:7f:9e:51:7a:b6:86:2a:3b:d6:fb:11:3c:
         45:2b:04:49:4d:bc:78:9d:5e:93:63:28:2a:65:69:d9:61:f7:
         f2:14:58:de:36:83:25:9b:3b:6e:02:80:be:c0:e3:0d:48:4e:
         23:16:86:0c:13:a4:45:c9:b9:15:45:16:ba:95:79:0b:4a:e8:
         8f:6a:4f:89:b8:41:b3:06:8a:08:12:22:a6:ec:7a:0f:3d:6b:
         52:51:5e:4d
-----BEGIN CERTIFICATE-----
MIIFjzCCBHegAwIBAgISAYxQKZX49nLEBbMBQQgzhfAUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjMxMjA5MTk1OTExWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzOTZhODRlNzI5MzU0NzFkNmFmNWFlNzdmNjNjNmE3YWI0YTZlNjJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA42/4bW63sXAIxN8kATqXK18VhgVT
Z/5uPWaxCouoj/E7QFRYuc2XXVrailTfbKMWpx0PprwosK6A7+BgdUMemF8qToJJ
QP8UaU0VKYD5FuMSu1P9vtOcQkVssSeG1HF4j/XsDVfuqpE8qeZMcad1/UrSLZ7S
6zsRzXrZkfLCxFsV/t5yy3uHXfsxfFIcfmyayHi33KS/wxbORRLAtX2PfWwaxJZ8
C4XgFjwnQZTqhyOe9uB15xX23C+CYL/0wPG0pA62ZMdVHKWaG/zP/2NhvZxLpiUj
MCcgXpKDiVCEgyPjHNt/4e23UzfOacRmdLbwupcPt+JfH2Cuxhl4dx1sVwIDAQAB
o4ICmzCCApcwHQYDVR0OBBYEFDlqhOcpNUcdavWud/Y8anq0puYqMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggE/BggrBgEFBQcBCwSCATEwggEtMF8GCCsGAQUFBzAFhlNy
c3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2JlNTI3
N2ExLTFiNDEtNDVjMi05MGEyLTIzMDk5OTNmM2IzNC8wLzCBiwYIKwYBBQUHMAqG
f3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYmU1
Mjc3YTEtMWI0MS00NWMyLTkwYTItMjMwOTk5M2YzYjM0LzAvMzk2QTg0RTcyOTM1
NDcxRDZBRjVBRTc3RjYzQzZBN0FCNEE2RTYyQS5tZnQwPAYIKwYBBQUHMA2GMGh0
dHBzOi8vcnJkcC5wYWFzLnJwa2kucmlwZS5uZXQvbm90aWZpY2F0aW9uLnhtbDBZ
BgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jcmwwGAYDVR0g
AQH/BA4wDDAKBggrBgEFBQcOAjAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMDS6ow
DQYJKoZIhvcNAQELBQADggEBAKDjZUUb/4dbYIQQMCxRTEXS2qhoG+KO8G28Uc/S
XuWbBcKGV4g7EjC20H0GJ8TPJKErYL57IbYDoaNSpmienR+F09p+qrYT2LvtuRB4
0Jez6rz7sEtisUzH/20CB+koo9GT1zFqwwZEdgbP5Z/QsE7gNN+m5eAJLrTBeFJ7
vKSoN3ZcFjV8T4NEH8edw98f9AsjlsivNUQqe99+ufsK5gEnhVbPBvUtt3+eUXq2
hio71vsRPEUrBElNvHidXpNjKCpladlh9/IUWN42gyWbO24CgL7A4w1ITiMWhgwT
pEXJuRVFFrqVeQtK6I9qT4m4QbMGiggSIqbseg89a1JRXk0=
-----END CERTIFICATE-----