Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/T2DOzpGkDKzo-66uiDgYreeQcCY.cer
File:                     T2DOzpGkDKzo-66uiDgYreeQcCY.cer (raw, json)
Hash identifier:          hjCitd9GE/+cs9D5gxuj9sWGzWENUIys5uJ2TyCHSFc=
Subject key identifier:   4F:60:CE:CE:91:A4:0C:AC:E8:FB:AE:AE:88:38:18:AD:E7:90:70:26
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018BAA827868A6DECFBBAEDE35C6813A8380
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/91/d0bfa4-090a-4ee2-afd5-8f36061989cd/1/T2DOzpGkDKzo-66uiDgYreeQcCY.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/91/d0bfa4-090a-4ee2-afd5-8f36061989cd/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Tue 07 Nov 2023 15:59:19 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    AS: 48808

Validation:               Failed, certificate revoked on Thu 09 Nov 2023 12:55:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:aa:82:78:68:a6:de:cf:bb:ae:de:35:c6:81:3a:83:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Nov  7 15:59:19 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=4f60cece91a40cace8fbaeae883818ade7907026
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:73:8c:b2:17:79:f4:5c:1a:e1:dd:1d:5d:3d:
                    60:17:c4:3f:e6:98:cb:3d:7b:bf:13:3d:36:a4:83:
                    82:7a:3c:8d:66:56:27:a5:68:7f:9c:09:d4:7c:b0:
                    22:9e:db:c8:6f:39:56:89:4e:8e:40:df:f1:15:c2:
                    07:2b:b3:91:32:e5:07:ae:64:18:88:62:0f:9d:8c:
                    00:6a:21:9b:98:e0:6f:1e:1d:37:35:2a:0d:9e:1b:
                    95:5e:8a:0f:1c:c9:7d:14:c7:9d:34:46:1b:2b:90:
                    5e:9c:b1:13:68:da:a6:a0:82:7e:2f:9f:f4:80:7e:
                    8d:97:96:48:07:36:ba:09:a7:72:1b:7f:d7:62:d6:
                    5e:3d:d7:58:31:f6:b6:72:5c:9a:6f:14:4a:4e:5a:
                    5b:0e:2b:2f:65:f4:18:15:ed:fe:06:5a:13:07:d6:
                    19:0e:2f:c6:0f:6b:15:2c:6d:d0:c5:e3:22:dc:84:
                    68:17:fe:16:58:0d:37:ba:95:82:f2:22:f9:95:f2:
                    19:d8:de:19:4f:e8:68:ae:8a:27:a7:25:1f:fd:b0:
                    80:79:67:be:89:cb:cb:18:dd:16:ef:b4:f3:e3:9f:
                    74:c6:99:91:c9:c4:5e:8d:77:be:8a:a3:d1:d6:1f:
                    e2:2a:c9:88:44:0d:11:03:ab:b8:2b:4f:23:82:0a:
                    b5:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:60:CE:CE:91:A4:0C:AC:E8:FB:AE:AE:88:38:18:AD:E7:90:70:26
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/d0bfa4-090a-4ee2-afd5-8f36061989cd/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/d0bfa4-090a-4ee2-afd5-8f36061989cd/1/T2DOzpGkDKzo-66uiDgYreeQcCY.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  48808

    Signature Algorithm: sha256WithRSAEncryption
         18:9d:53:67:b6:f3:76:85:63:7f:94:51:8d:63:fc:6e:99:c2:
         9b:12:af:13:e1:5c:23:bc:20:c5:bb:ce:a0:ec:66:69:92:a8:
         a9:2d:3e:c4:76:d6:aa:bc:ef:9b:e2:55:f6:88:51:1b:42:22:
         38:9f:09:61:63:08:bd:ea:8f:41:34:b7:cf:de:d6:b3:8e:6c:
         5d:60:50:09:e0:25:1c:26:a5:f8:85:49:03:cd:f2:e7:50:73:
         35:98:58:af:65:13:e6:77:4b:d7:51:fc:e3:c8:d0:dc:70:89:
         bc:ea:2e:ee:07:6f:89:69:36:c2:d9:bb:18:3e:5d:df:85:cf:
         2a:4e:e9:28:87:9e:ed:31:4f:65:fe:b4:e1:b6:e4:49:b9:7b:
         75:e5:1a:2d:1b:0b:a1:87:de:c7:00:4f:56:d0:a3:bd:74:7d:
         10:dc:83:9c:42:81:6c:ae:cf:39:df:1c:27:6e:5d:20:0a:df:
         3f:f9:1d:a4:68:78:55:3f:34:94:f5:42:11:37:b1:d1:eb:d5:
         87:b8:07:58:b1:dd:d5:3c:d4:3d:79:45:21:eb:0a:67:c6:43:
         94:93:c3:72:5e:5f:9b:37:91:bb:21:f4:09:87:6d:35:1a:cd:
         10:b4:ca:e4:d0:fc:9d:2b:17:14:ca:34:e8:52:49:4f:cd:ae:
         2f:80:07:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----