Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/W-zw2-0mB946Penmhf1udPvli5Q.cer
File:                     W-zw2-0mB946Penmhf1udPvli5Q.cer (raw, json)
Hash identifier:          P0RS0R6kfU8lyCz3P4EJ9TcYLR/Bfk/IMeVSAzikGC4=
Subject key identifier:   5B:EC:F0:DB:ED:26:07:DE:3A:3D:E9:E6:85:FD:6E:74:FB:E5:8B:94
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018CC26D7CF9DF9878AAEA7F0900E6E8BBAE
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/76/fcd977-fd41-4b71-b26f-8077816d304f/1/W-zw2-0mB946Penmhf1udPvli5Q.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/76/fcd977-fd41-4b71-b26f-8077816d304f/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 00:30:04 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    AS: 206023

Validation:               Failed, certificate revoked on Tue 09 Jul 2024 12:17:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c2:6d:7c:f9:df:98:78:aa:ea:7f:09:00:e6:e8:bb:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 00:30:04 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=5becf0dbed2607de3a3de9e685fd6e74fbe58b94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:d2:ee:8f:67:48:47:1e:06:81:30:56:d7:f6:
                    86:c1:ff:bc:49:d5:17:ef:88:3d:f4:75:dc:cb:4b:
                    71:d6:26:2a:38:dc:39:86:2e:ed:c8:21:14:90:6e:
                    8e:1b:be:51:1e:6d:4d:5f:62:ff:6a:3c:5e:0d:37:
                    0f:e4:a4:3c:17:8a:19:56:ec:53:d3:c8:9d:bb:80:
                    0b:ad:40:5a:a0:3d:06:8b:8c:a9:b1:30:6f:be:6a:
                    20:05:19:80:1f:53:5d:f7:e1:d9:ac:a2:66:35:4b:
                    d9:0e:3e:8f:d4:64:c2:23:62:21:f9:78:4e:16:db:
                    2b:46:bf:c3:db:b1:a7:b0:13:8d:4c:44:56:52:76:
                    96:3d:68:82:f0:ce:02:62:cb:35:6b:d9:20:f8:51:
                    91:1b:47:cf:8b:bd:fa:ea:4e:2d:c2:64:4b:12:9f:
                    a3:02:46:de:80:47:0d:37:45:e5:43:1e:a6:7a:56:
                    a2:55:53:27:91:69:3f:31:38:66:d0:04:b8:8c:78:
                    ec:07:7a:b7:cd:74:e4:d8:51:a5:97:d8:e9:5f:cf:
                    d7:15:ad:d1:4d:e4:c7:bd:c4:cc:a9:15:d1:8b:10:
                    fd:c3:07:07:da:d6:e1:6d:de:03:8c:b0:be:37:73:
                    55:ff:ad:36:30:f4:5d:d0:df:3f:99:d5:50:f2:1b:
                    4c:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:EC:F0:DB:ED:26:07:DE:3A:3D:E9:E6:85:FD:6E:74:FB:E5:8B:94
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/fcd977-fd41-4b71-b26f-8077816d304f/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/fcd977-fd41-4b71-b26f-8077816d304f/1/W-zw2-0mB946Penmhf1udPvli5Q.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  206023

    Signature Algorithm: sha256WithRSAEncryption
         19:ef:45:b2:e2:f4:93:63:5b:e5:64:c9:f9:0c:2b:7a:2a:16:
         84:00:2f:bd:ea:29:ff:a2:ba:f0:4d:1e:bc:0a:66:78:f2:e6:
         41:03:64:48:8b:51:8e:dc:b3:c3:17:10:7b:68:07:10:a6:44:
         d0:74:05:12:09:51:09:8d:1d:0c:86:d0:1e:24:e8:db:ca:3b:
         73:e6:90:ac:c8:4e:7c:12:02:b9:cc:8f:44:52:08:5c:fd:6c:
         0d:31:70:c7:2b:17:e5:f9:b6:06:58:1f:d3:6d:85:c9:34:84:
         84:ae:b1:06:32:e1:38:7f:63:ea:7d:fd:27:31:14:b4:b7:b4:
         da:66:a6:82:04:f9:af:84:ec:34:9d:d3:6c:f3:18:81:d5:c5:
         3d:54:bf:c8:28:75:e9:45:0b:f5:88:10:0c:c9:5c:42:84:85:
         c2:3b:d0:d6:3c:2f:1f:d5:2e:c9:e4:11:30:16:0c:5c:a5:b6:
         e7:c8:c2:ce:35:32:99:7a:a5:93:49:37:58:a7:40:35:46:50:
         70:35:74:b0:c0:c4:c6:66:18:d3:b8:2b:db:cb:ce:61:16:3c:
         d0:71:66:fe:e6:de:0f:27:e7:1e:c1:84:09:64:18:2a:d7:3d:
         1f:b1:f0:ba:b8:15:3d:9a:d5:a5:e0:b8:98:57:23:9c:bf:d4:
         11:6c:61:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----