Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/QTg14Q9N-kYRt6Nh_m5EuZ-AYps.cer
File:                     QTg14Q9N-kYRt6Nh_m5EuZ-AYps.cer (raw, json)
Hash identifier:          qGBsydOyfjZ+A8QwsDUOBux+kqk73jENm+2sctalxeM=
Subject key identifier:   41:38:35:E1:0F:4D:FA:46:11:B7:A3:61:FE:6E:44:B9:9F:80:62:9B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018CC56EB9EC85CB39891C10737B2C4A5F76
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/fc/f9c9cb-ed8b-4713-bb95-041fb620f8f8/1/QTg14Q9N-kYRt6Nh_m5EuZ-AYps.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/fc/f9c9cb-ed8b-4713-bb95-041fb620f8f8/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 14:30:17 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    AS: 200007

Validation:               Failed, certificate revoked on Sat 20 Jan 2024 23:11:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c5:6e:b9:ec:85:cb:39:89:1c:10:73:7b:2c:4a:5f:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 14:30:17 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=413835e10f4dfa4611b7a361fe6e44b99f80629b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:50:4f:36:ac:4a:bf:2e:85:fb:8b:ee:f9:3b:
                    b2:9d:76:41:31:b8:81:47:f3:7c:72:77:70:47:8b:
                    bc:35:a9:4e:ee:2c:7d:0b:ec:39:2b:dc:b2:ee:11:
                    66:db:5c:0f:f9:cb:73:5b:b9:a5:ef:7c:2d:05:6b:
                    c6:fa:17:95:be:0f:cf:9e:10:fc:5f:43:85:11:3e:
                    ec:1a:bd:11:1c:82:cd:c8:4c:9a:12:9b:54:a2:d7:
                    87:07:36:21:ce:1c:d8:0b:22:dd:ca:62:42:28:09:
                    87:10:7a:b6:bf:02:bd:e1:bc:11:97:11:ef:25:10:
                    60:c2:8d:b9:c5:16:9d:c9:1c:ea:57:65:38:ea:70:
                    2c:69:78:8c:bc:2b:bd:72:72:16:ba:b7:6e:58:b4:
                    d2:5a:ae:19:25:09:e6:4d:fd:1b:62:9f:95:96:bc:
                    e7:5b:17:9e:98:55:38:e3:84:c3:77:e2:ad:c5:bd:
                    c2:28:eb:57:fa:2c:37:a8:86:98:b0:b7:d0:5d:ec:
                    5a:65:25:9b:5d:c4:6c:73:cc:0b:33:02:63:e1:13:
                    2a:58:a7:17:47:08:bf:54:64:cc:bb:5e:a5:c4:c4:
                    f8:58:3d:c2:7b:08:1f:3c:7c:6e:13:b9:90:2f:42:
                    32:ed:66:fb:1d:d0:4f:90:29:a2:1c:e7:25:cf:f4:
                    e6:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:38:35:E1:0F:4D:FA:46:11:B7:A3:61:FE:6E:44:B9:9F:80:62:9B
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/f9c9cb-ed8b-4713-bb95-041fb620f8f8/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/f9c9cb-ed8b-4713-bb95-041fb620f8f8/1/QTg14Q9N-kYRt6Nh_m5EuZ-AYps.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  200007

    Signature Algorithm: sha256WithRSAEncryption
         65:dd:da:69:55:13:c1:55:c9:3f:81:aa:84:43:a8:48:21:44:
         50:4e:ed:b9:c9:7c:93:13:fe:18:c3:2b:a8:dc:d1:80:a7:48:
         a5:05:3f:f8:18:43:d5:80:fc:4c:ff:18:d5:17:1a:f5:8c:a9:
         4f:20:64:58:08:5b:b5:97:a7:42:05:f8:84:a4:f5:ae:61:e8:
         ea:12:b2:c6:2e:c0:23:72:9d:b6:e9:05:26:4e:b9:2a:de:b9:
         96:1f:51:26:0c:74:c0:da:d5:bd:64:5f:36:dc:84:fb:6f:ee:
         29:b5:ec:6b:dd:d7:0b:7a:6f:7f:ed:b6:a6:15:83:ee:1a:ce:
         df:7e:a5:16:d0:78:cd:da:94:72:51:6d:db:f4:6c:0b:7d:f6:
         db:b3:ec:0a:4d:a8:ed:9e:24:be:ed:9e:99:3e:c7:8e:ff:fe:
         e7:16:36:d1:29:94:92:76:52:80:6b:be:b3:f9:c5:ea:fa:0a:
         01:33:a7:c1:1c:ea:f9:db:5e:1f:5f:43:72:66:96:5c:a5:ee:
         4c:02:90:89:18:15:e0:71:b6:ef:be:6a:a2:52:94:25:87:0c:
         98:f7:b6:38:48:7f:e6:f5:0b:a0:64:6f:ca:09:93:f6:f4:cb:
         e4:6a:b4:a0:64:82:e0:74:87:d7:75:2e:93:ec:8d:e4:aa:16:
         96:7b:76:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----