Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/TokpFMXH3ZNUNYHg_8HKuJHVnyY.cer
File:                     TokpFMXH3ZNUNYHg_8HKuJHVnyY.cer (raw, json)
Hash identifier:          4R3QCuZVBBb2xClwzLL/J4gRUKxwB77EwNYQZBq++js=
Subject key identifier:   4E:89:29:14:C5:C7:DD:93:54:35:81:E0:FF:C1:CA:B8:91:D5:9F:26
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0186A3460C037D931E3675F2269501C04BF3
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/e1/cf9ae6-ab68-4b09-b55f-60ba355f5b02/1/TokpFMXH3ZNUNYHg_8HKuJHVnyY.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/e1/cf9ae6-ab68-4b09-b55f-60ba355f5b02/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Mar 2023 17:02:02 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    AS: 213086

Validation:               Failed, certificate revoked on Fri 01 Dec 2023 11:48:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:a3:46:0c:03:7d:93:1e:36:75:f2:26:95:01:c0:4b:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Mar  2 17:02:02 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=4e892914c5c7dd93543581e0ffc1cab891d59f26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:a4:0e:e4:7f:87:8e:69:07:28:f7:87:b2:6e:
                    af:5c:ef:dc:60:44:c9:a7:b3:73:b4:c6:8a:58:cf:
                    13:81:f5:ab:ef:44:67:a0:c3:7a:f4:c9:99:e0:42:
                    0b:4b:2a:9a:80:e0:8b:c1:d4:5f:a4:30:34:b2:d8:
                    56:f3:a6:87:ab:7c:a8:7c:10:d0:93:0e:09:26:cb:
                    1b:53:de:bc:ec:7c:7f:be:ed:42:55:5d:82:42:10:
                    de:f7:f4:8d:c4:b7:85:18:27:ee:df:44:2c:16:9c:
                    2d:5e:b3:c6:f2:89:13:84:0d:7c:44:38:ba:c9:b9:
                    95:5e:75:79:f1:bf:a5:89:91:84:75:f0:48:48:9f:
                    6f:bf:c3:51:d3:fe:d1:60:21:b9:ae:17:bd:66:b3:
                    51:41:13:20:03:88:34:80:f1:53:95:a1:e2:f9:ed:
                    e5:cc:b7:0c:d3:2d:58:ac:a4:19:65:76:b0:86:be:
                    26:16:35:b6:e3:2f:69:1b:55:c1:81:9c:32:be:66:
                    72:37:83:b7:b0:2c:9c:53:14:19:5c:2e:4c:47:ba:
                    1b:b1:ec:86:94:07:4a:9f:08:4a:43:fb:80:e1:45:
                    7b:6f:c1:28:4d:23:55:46:0e:72:5a:7a:8e:cc:30:
                    5d:09:86:a0:66:12:97:54:28:bd:fd:3e:f0:cb:a9:
                    f8:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:89:29:14:C5:C7:DD:93:54:35:81:E0:FF:C1:CA:B8:91:D5:9F:26
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/cf9ae6-ab68-4b09-b55f-60ba355f5b02/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/cf9ae6-ab68-4b09-b55f-60ba355f5b02/1/TokpFMXH3ZNUNYHg_8HKuJHVnyY.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  213086

    Signature Algorithm: sha256WithRSAEncryption
         7b:6e:41:92:57:93:2f:70:0b:b0:54:a1:c3:e8:14:99:4f:2a:
         90:3e:53:5b:f2:63:6e:80:d3:01:b9:26:1a:5c:e6:ae:59:ae:
         5a:99:5e:b9:78:44:fb:99:60:c1:eb:34:80:52:ca:fa:29:46:
         ed:74:5d:ae:37:5c:93:7a:16:27:a4:9c:e4:71:55:9e:af:4e:
         fa:70:9e:4c:54:6b:49:c1:68:15:ac:56:48:69:18:5d:26:3e:
         a2:fd:3e:0e:d3:7a:2d:90:72:f9:a6:66:2f:97:ec:03:6a:ff:
         9d:6d:bb:a7:bf:f8:c5:c8:b0:0f:d9:d5:bd:a9:0a:cb:99:a1:
         59:24:49:2b:bb:7d:27:59:df:25:de:7f:86:44:1f:14:d1:bb:
         3a:82:36:ba:45:7e:ef:45:9f:f4:e6:fd:db:a9:99:af:c5:66:
         4e:dd:7e:93:d3:5f:23:7f:0c:68:0b:b1:fc:d4:8b:58:be:e3:
         b9:ce:7e:b0:f1:f2:c4:22:8e:57:c1:cd:96:d3:d6:93:c8:12:
         8c:08:6a:6f:52:9b:5b:47:a9:2b:5c:f2:82:88:52:8f:b2:f6:
         ce:34:93:84:83:c3:bf:64:cd:50:29:5a:10:24:fa:2e:03:47:
         e5:88:af:c2:c3:4c:7b:8b:87:7a:e8:ed:57:71:56:3e:92:8b:
         73:da:fe:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----