Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/TIp1JMEF2qC7SxQIJ41lVB1tSqM.cer
File:                     TIp1JMEF2qC7SxQIJ41lVB1tSqM.cer (raw, json)
Hash identifier:          ZJHenMkZpmVvHIaO1ziehDGGo1IHkkDMAj5YlSNqX7s=
Subject key identifier:   4C:8A:75:24:C1:05:DA:A0:BB:4B:14:08:27:8D:65:54:1D:6D:4A:A3
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018811EBD3CB034522696E8327834D98CB90
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/3d/1d3148-0941-427a-b86a-2d9c5b8ccc07/1/TIp1JMEF2qC7SxQIJ41lVB1tSqM.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/3d/1d3148-0941-427a-b86a-2d9c5b8ccc07/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 12 May 2023 21:44:07 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    AS: 198585

Validation:               Failed, certificate revoked on Thu 06 Jul 2023 14:57:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:11:eb:d3:cb:03:45:22:69:6e:83:27:83:4d:98:cb:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: May 12 21:44:07 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=4c8a7524c105daa0bb4b1408278d65541d6d4aa3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:5d:ae:7b:f3:63:e2:64:88:2a:03:5f:24:19:
                    01:64:86:ba:dd:c3:30:93:e9:16:da:32:18:57:8b:
                    17:3f:86:48:18:1a:10:67:3f:78:2f:1c:54:f4:23:
                    9b:1f:0f:bc:5f:1d:b7:3e:7a:32:17:56:b8:df:fe:
                    df:0d:8c:27:fa:66:aa:9e:bb:9c:de:bb:ad:e1:97:
                    37:e9:fb:de:3e:47:75:69:00:13:fa:30:e1:a4:71:
                    f1:25:a7:d7:57:ae:d8:c3:62:d3:52:14:66:f6:aa:
                    0e:e0:27:d9:2e:e2:d9:bc:41:7e:ee:aa:d8:af:95:
                    3d:10:b6:9b:1c:a6:8e:ea:61:05:c7:de:44:f3:89:
                    58:de:75:ba:ed:f0:dd:44:c9:e6:ec:16:f3:c4:d9:
                    d7:15:52:59:e2:e3:05:e8:23:01:8a:ca:c7:9d:2e:
                    6e:ea:3c:a1:a0:4c:5f:4b:b6:63:da:c4:83:cc:a1:
                    d0:43:4a:bc:ef:7b:0f:55:3d:19:dd:df:b5:d3:80:
                    76:17:b1:32:89:ff:d0:7b:b3:5a:a7:79:be:68:cd:
                    b5:1a:37:42:3f:40:34:fd:c9:61:56:94:72:ac:73:
                    f8:49:ce:c8:9b:12:1b:96:fc:f5:03:9b:ce:6e:44:
                    38:81:50:d9:f8:cb:55:c1:b7:a4:a5:f5:1e:8a:bb:
                    da:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:8A:75:24:C1:05:DA:A0:BB:4B:14:08:27:8D:65:54:1D:6D:4A:A3
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/1d3148-0941-427a-b86a-2d9c5b8ccc07/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/1d3148-0941-427a-b86a-2d9c5b8ccc07/1/TIp1JMEF2qC7SxQIJ41lVB1tSqM.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  198585

    Signature Algorithm: sha256WithRSAEncryption
         19:fd:fe:62:0d:de:3a:a0:6e:3a:b2:f4:d3:5a:1a:f9:44:48:
         26:91:85:28:22:a5:63:24:59:52:9b:53:0d:83:3d:e0:92:8b:
         31:fd:fa:e7:20:e6:b9:a9:b7:32:3a:fc:b9:a4:21:50:74:a0:
         90:4f:82:fc:99:f6:f4:67:cb:c2:5f:a3:11:6b:06:45:45:32:
         0a:39:1c:49:19:d6:b7:ba:63:48:94:53:4f:4c:36:99:1e:d7:
         16:bd:20:f6:59:4f:71:7c:35:34:ea:a9:40:f2:ec:2e:91:95:
         05:9b:2a:1b:fb:e6:c1:8c:88:5a:c8:1d:b4:c0:92:49:6e:04:
         9b:e1:21:d6:7e:37:e2:11:3a:98:2d:61:32:71:c9:04:f5:c3:
         11:89:bd:71:ab:67:a8:cd:07:73:d7:7a:7f:8b:e7:f3:e3:f6:
         54:2b:42:7d:42:74:e7:72:0d:cc:b9:4f:80:d8:22:a7:a2:da:
         5c:d7:15:aa:3b:6f:89:2d:91:e3:1f:95:06:27:ba:85:5b:14:
         e7:e5:59:c9:f3:61:78:c4:8a:92:3a:8e:a3:d5:e3:44:86:c4:
         2e:16:c8:4a:a6:78:ae:cb:66:41:74:9d:6e:6e:4f:77:d0:71:
         32:67:a9:c8:66:10:09:75:44:45:81:78:be:bc:26:01:ab:3f:
         55:7e:da:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----