Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/UJKqDg2tUDywaBdnSNbSG-ylISM.cer
File:                     UJKqDg2tUDywaBdnSNbSG-ylISM.cer (raw, json)
Hash identifier:          IFmnkKh0+ZE4Y1SXpzSMhTCAdZVoFhj8tF2uODRLFII=
Subject key identifier:   50:92:AA:0E:0D:AD:50:3C:B0:68:17:67:48:D6:D2:1B:EC:A5:21:23
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018E37F90CBA1FBE347D65EEA3FDCCD7E9BF
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/a4/a64013-27a5-4721-a020-b9a3ef3a5856/1/UJKqDg2tUDywaBdnSNbSG-ylISM.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/a4/a64013-27a5-4721-a020-b9a3ef3a5856/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 13 Mar 2024 13:20:52 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    AS: 215364

Validation:               Failed, certificate revoked on Wed 26 Jun 2024 04:58:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8e:37:f9:0c:ba:1f:be:34:7d:65:ee:a3:fd:cc:d7:e9:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Mar 13 13:20:52 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=5092aa0e0dad503cb068176748d6d21beca52123
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:10:bd:2a:fa:f3:a2:3d:eb:23:ed:41:d9:9d:
                    e2:94:89:aa:8d:b4:dc:07:94:10:06:ae:c8:a7:c7:
                    21:57:76:55:e2:40:05:c5:78:b5:fe:41:00:f6:2a:
                    59:da:e7:50:79:d3:03:50:79:2d:97:0a:b4:94:1c:
                    77:31:82:29:b2:6b:94:d7:a0:65:ef:c9:17:3c:d7:
                    86:c1:c2:a1:7a:f9:a9:f7:ae:ab:f9:2c:6e:8d:79:
                    7d:a4:4c:2b:30:ab:7f:0c:b5:12:09:16:2b:5a:87:
                    62:1e:c2:c6:37:cb:b6:8b:f1:cb:d5:d3:87:9d:a9:
                    57:d2:70:1c:2a:4a:f9:5a:b6:ce:58:68:23:93:2d:
                    4d:6c:aa:fb:87:a4:fb:5c:6a:66:3b:92:bc:8c:9a:
                    64:fc:db:fc:14:b5:f3:96:a2:31:ac:25:71:1f:b4:
                    31:d0:ee:f4:6a:7e:ee:53:4e:ec:2e:87:f4:2e:01:
                    6c:b7:15:38:75:14:8b:3b:58:ee:a4:aa:2b:dc:54:
                    f2:60:16:8b:75:ca:c1:b0:0f:a4:ff:4a:a2:38:44:
                    dd:54:af:0e:62:88:52:d7:ca:9f:58:80:96:1b:5a:
                    c4:2a:84:42:46:a4:9d:b4:9f:fb:cf:19:4e:c1:cf:
                    f6:73:a4:37:e7:08:f0:a3:3a:aa:ec:41:69:d4:7c:
                    e3:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:92:AA:0E:0D:AD:50:3C:B0:68:17:67:48:D6:D2:1B:EC:A5:21:23
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/a64013-27a5-4721-a020-b9a3ef3a5856/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/a64013-27a5-4721-a020-b9a3ef3a5856/1/UJKqDg2tUDywaBdnSNbSG-ylISM.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  215364

    Signature Algorithm: sha256WithRSAEncryption
         34:9a:a0:cf:d4:dc:39:44:a5:9f:55:54:0b:80:dc:0a:22:78:
         2d:00:59:5c:af:d7:75:bc:87:e0:6b:16:70:40:be:5f:bd:fd:
         25:03:60:32:92:7e:13:e4:d0:d7:b3:0a:3e:76:87:ce:96:44:
         83:4e:45:06:b5:8f:03:8d:02:c3:cd:42:ab:37:bd:61:fa:22:
         28:5d:27:6f:39:f0:cd:c0:20:ca:ed:44:91:b2:6a:65:83:78:
         eb:cf:b2:06:e5:ca:57:6a:86:06:a4:fe:98:8e:dd:b7:45:38:
         19:28:98:98:db:de:ac:24:87:fa:e5:7f:20:af:4b:88:23:6c:
         d4:75:03:97:ba:71:3e:a0:6b:c7:f4:77:e7:7c:3a:8a:c8:94:
         5e:48:9c:21:0f:1e:e0:e5:cc:8e:7c:2c:b1:98:c4:d3:56:d7:
         62:10:73:75:c1:5b:7a:e3:65:27:74:74:a1:1b:49:2c:3f:c7:
         4b:f5:a3:e9:e1:7e:56:0d:d1:b0:15:ab:36:40:a9:f3:03:86:
         bb:62:f8:e3:ef:14:7e:d9:28:06:8e:54:81:92:7c:41:7f:d6:
         ba:43:df:c7:0c:bf:c2:75:db:8d:4a:55:bd:26:2e:fa:73:ce:
         b1:ee:99:20:96:76:a0:50:45:09:29:9b:84:56:65:2f:da:61:
         e9:e1:06:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----