Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/UTaJaZNhbdbSJRqoSsBzgD1rU08.cer
File:                     UTaJaZNhbdbSJRqoSsBzgD1rU08.cer (raw, json)
Hash identifier:          aQYXc8uwjUQMW0mCgycnDZKZ7KvBOmq+z0fKTaoKQqw=
Subject key identifier:   51:36:89:69:93:61:6D:D6:D2:25:1A:A8:4A:C0:73:80:3D:6B:53:4F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018CC5DC3C7EE605C59F7FDBE9AF53B5E16E
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/1b/679a4e-192a-4eb2-9cfb-e88969f5863e/1/UTaJaZNhbdbSJRqoSsBzgD1rU08.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/1b/679a4e-192a-4eb2-9cfb-e88969f5863e/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 16:29:54 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    AS: 59728

Validation:               Failed, certificate revoked on Tue 19 Mar 2024 07:54:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c5:dc:3c:7e:e6:05:c5:9f:7f:db:e9:af:53:b5:e1:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 16:29:54 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=5136896993616dd6d2251aa84ac073803d6b534f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:ae:3a:bd:24:2f:11:26:49:63:f6:64:d7:c2:
                    18:83:ad:e3:f9:d9:fd:19:fa:6c:bd:fa:2a:78:a6:
                    23:17:52:a5:23:f5:7f:3d:07:80:6b:cf:ca:cc:c6:
                    a6:1b:46:17:95:65:a9:7c:8a:3c:d6:c2:53:23:51:
                    fa:a2:e1:8e:f1:d4:6e:f7:67:2e:61:2e:20:67:ec:
                    5d:83:6c:a1:69:1d:a7:d6:32:f7:25:ff:b6:77:04:
                    82:42:90:20:4c:b3:45:fe:a8:98:67:24:43:3e:46:
                    05:0d:82:4a:3f:94:80:90:55:48:84:3f:0a:8f:17:
                    37:f1:8c:cf:fb:6c:d8:7b:89:73:05:94:32:f3:f2:
                    40:c3:55:11:63:d0:1e:8a:86:31:f0:b1:2d:64:b5:
                    06:04:1a:10:25:67:62:88:cb:ea:e3:57:5a:5b:72:
                    f3:21:ac:27:c4:e8:0e:86:e3:63:8c:27:20:86:13:
                    df:7e:5f:c0:70:91:80:a3:fa:92:c7:84:29:3b:d1:
                    44:5a:13:4b:e9:3a:a5:9a:5b:f6:4b:73:8d:22:14:
                    61:15:1f:1f:11:c4:98:43:fc:e1:1a:6e:14:91:23:
                    4c:5b:79:f6:02:b5:0a:07:6e:4c:8f:a1:a9:d0:a4:
                    bc:18:05:53:34:e2:06:e6:ce:91:20:8a:83:a1:34:
                    7e:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:36:89:69:93:61:6D:D6:D2:25:1A:A8:4A:C0:73:80:3D:6B:53:4F
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/679a4e-192a-4eb2-9cfb-e88969f5863e/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/679a4e-192a-4eb2-9cfb-e88969f5863e/1/UTaJaZNhbdbSJRqoSsBzgD1rU08.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  59728

    Signature Algorithm: sha256WithRSAEncryption
         0c:50:62:74:a0:e7:fa:35:c7:20:e4:00:14:3c:0e:80:90:3c:
         af:90:84:ac:3c:06:2d:3f:3f:66:16:1b:a9:b8:8c:3c:7a:31:
         4b:b2:c5:bf:a4:4e:5f:47:8d:3d:dd:35:02:5c:d0:3a:4c:89:
         32:7c:2e:ec:c6:e1:90:8a:f2:9e:3a:21:d8:d2:7a:f5:12:33:
         d7:de:e5:6b:00:33:08:3d:59:44:92:30:89:0c:3a:4c:56:a4:
         76:3e:8d:50:62:59:67:b1:f8:a4:0d:27:f7:0d:e9:b9:0a:e9:
         a0:ae:f7:d9:05:5c:e0:85:b9:64:db:da:12:29:85:4f:be:17:
         f1:59:df:fa:d4:d7:fc:d3:39:6a:7c:84:9b:64:44:1b:eb:f4:
         30:9a:1c:ec:2b:11:02:62:6d:fb:51:73:42:46:2a:eb:dd:9a:
         19:4c:fd:3d:d8:13:97:82:c7:5b:cd:c1:06:1d:7a:01:bf:44:
         20:85:5d:3c:97:c9:e1:96:ff:84:15:42:78:33:3f:6c:72:c8:
         ea:25:82:f8:b5:ad:5c:18:a2:3c:8c:af:57:ca:44:45:97:2d:
         0b:fc:b9:2e:cf:d1:83:c7:2c:08:ab:85:6e:36:14:df:99:35:
         4b:dd:86:16:15:b2:fd:60:3d:81:56:79:2a:8b:23:4e:72:fe:
         c8:ea:24:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----