Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/PapdJNy-WGLoLk9c1RNPnlwjwlg.cer
File:                     PapdJNy-WGLoLk9c1RNPnlwjwlg.cer (raw, json)
Hash identifier:          zKXB6xAMP/pVE1fWp2Rgc2ppVAOsD+C52jEiwHvm7yE=
Subject key identifier:   3D:AA:5D:24:DC:BE:58:62:E8:2E:4F:5C:D5:13:4F:9E:5C:23:C2:58
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018CC9BC20A33E7C1977F3DA719DC354759F
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/ba/07ac9f-7b4c-44fd-964e-c3409ec161b7/1/PapdJNy-WGLoLk9c1RNPnlwjwlg.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/ba/07ac9f-7b4c-44fd-964e-c3409ec161b7/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Tue 02 Jan 2024 10:33:18 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    AS: 61364

Validation:               Failed, certificate revoked on Mon 27 May 2024 10:15:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c9:bc:20:a3:3e:7c:19:77:f3:da:71:9d:c3:54:75:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 10:33:18 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=3daa5d24dcbe5862e82e4f5cd5134f9e5c23c258
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:29:f5:c8:90:7c:1a:d0:1b:27:17:61:d9:6f:
                    96:5c:fc:89:79:95:f7:fe:15:51:8e:11:da:2f:cc:
                    75:b0:9c:15:53:f4:5e:7f:4a:46:f4:35:6b:10:b7:
                    4b:11:03:3b:26:7a:3e:d6:d5:c5:45:79:3b:13:a6:
                    c6:41:5d:9c:d5:ef:97:c6:eb:d3:fc:d3:f3:5c:9e:
                    48:17:ad:b5:1c:8d:a2:e0:8a:14:17:2f:d0:a5:85:
                    63:8e:cc:0f:b6:51:ac:6c:97:6f:8a:83:37:02:9f:
                    53:5a:1e:7e:b5:79:00:18:70:0f:a5:56:fe:01:07:
                    00:4f:b1:6f:11:91:f2:32:b8:a5:6a:47:17:4b:80:
                    de:4b:22:0c:ef:79:1d:93:cd:93:bf:b0:d2:ff:2d:
                    f2:18:68:a7:1b:d7:1f:0a:4f:e3:58:98:05:cf:c1:
                    14:3f:07:92:46:b2:42:cb:90:e3:8f:cb:58:35:c1:
                    29:f3:7e:be:cb:e7:2d:59:c3:48:25:0e:ff:85:77:
                    45:63:dc:8e:f7:41:4a:ed:cd:53:c0:3f:5f:8a:1a:
                    c9:6b:09:12:81:41:13:f3:6e:89:04:c6:c5:ba:64:
                    e6:6b:a7:9c:35:4a:e3:55:ee:cb:e2:73:dc:f4:54:
                    ab:5a:75:f1:1e:70:61:54:92:2b:ec:9b:e2:90:6e:
                    81:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:AA:5D:24:DC:BE:58:62:E8:2E:4F:5C:D5:13:4F:9E:5C:23:C2:58
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/07ac9f-7b4c-44fd-964e-c3409ec161b7/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/07ac9f-7b4c-44fd-964e-c3409ec161b7/1/PapdJNy-WGLoLk9c1RNPnlwjwlg.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61364

    Signature Algorithm: sha256WithRSAEncryption
         2e:3c:eb:56:a4:86:9d:0c:65:e3:4b:e6:1c:3a:10:42:ce:cc:
         57:6a:c7:44:d0:89:2b:78:ff:c4:1d:78:c5:46:d0:92:96:51:
         c8:66:6e:37:a6:24:51:81:7d:a8:48:c5:95:d7:03:49:4b:ed:
         53:f7:a0:67:2b:cc:8e:21:65:5c:66:3f:4c:4b:f4:8d:e2:fd:
         4f:75:22:d9:bc:39:a3:72:14:7c:25:71:6d:93:a2:34:dd:1f:
         03:99:4f:1d:44:0e:20:c9:d8:8c:6a:6e:d9:59:91:14:1c:ba:
         a4:87:37:b6:61:d1:fa:03:73:ac:08:09:27:cd:53:f0:73:24:
         e2:2c:3a:86:e0:20:d3:37:82:5f:a5:23:40:eb:60:e4:79:4a:
         96:e3:3b:df:a4:dc:99:1c:5a:a0:7c:9d:65:99:eb:9c:59:a4:
         1b:7b:f4:4a:36:4c:19:50:fe:3b:88:91:25:94:a1:09:09:bd:
         c7:03:19:a0:08:94:84:55:80:40:e3:ae:7d:f7:de:f2:9c:17:
         b1:7b:fa:66:ba:f1:d9:d3:a9:49:09:1f:eb:cd:7b:15:c0:3c:
         e9:fc:56:5f:7b:48:3d:f9:5d:14:2c:08:c6:8a:7b:f8:9e:50:
         19:41:d7:f3:55:e7:f4:01:19:42:eb:92:aa:f5:a7:ec:95:e7:
         de:de:e7:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----