Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/YCqy9uwYIKNYXIdZtdy-P2546Ag.cer
File:                     YCqy9uwYIKNYXIdZtdy-P2546Ag.cer (raw, json)
Hash identifier:          QviJAH775ZxtQX46rhZmnOKhLF6JUJXemKIPSgME1cA=
Subject key identifier:   60:2A:B2:F6:EC:18:20:A3:58:5C:87:59:B5:DC:BE:3F:6E:78:E8:08
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01906910E074D8E20B2B1625F50F28827FFE
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/4/602AB2F6EC1820A3585C8759B5DCBE3F6E78E808.mft
caRepository:             rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/4/
Notify URL:               https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before:   Sun 30 Jun 2024 12:13:52 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    AS: 211777

Validation:               Failed, certificate revoked on Sun 07 Jul 2024 18:49:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:69:10:e0:74:d8:e2:0b:2b:16:25:f5:0f:28:82:7f:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jun 30 12:13:52 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=602ab2f6ec1820a3585c8759b5dcbe3f6e78e808
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:1a:8c:cd:44:23:ad:9a:4e:d0:50:00:e7:31:
                    e1:41:6c:13:ac:c1:cb:3a:b1:31:2a:57:46:91:97:
                    9f:0b:82:d0:41:79:b3:95:b8:35:b3:c2:a8:f2:cb:
                    cd:6d:80:f6:18:d2:35:bc:1b:bd:62:70:f5:0e:d4:
                    6e:29:44:c6:e4:dd:a1:82:44:00:3d:b9:49:e8:d3:
                    a5:da:bd:0b:8a:46:40:52:92:c6:42:d5:6e:33:ed:
                    b6:94:43:35:c6:eb:63:66:ca:f5:58:38:ae:98:16:
                    8b:d1:23:90:c0:c2:3c:dd:ea:51:b5:47:40:b6:6c:
                    eb:02:66:32:04:02:4f:0f:db:81:e1:2f:47:0e:04:
                    82:4f:5c:b5:15:08:a3:5f:fa:10:d7:27:a6:cf:02:
                    97:50:b4:6a:6d:f4:b0:f2:21:e0:b8:27:c6:19:a1:
                    c7:67:ff:f5:1a:dc:5e:c0:80:6f:cc:19:70:13:64:
                    f2:95:6d:f6:75:e8:41:40:c8:eb:66:e9:43:9c:4e:
                    aa:7b:ed:0a:d6:f0:e3:ce:5f:12:c0:fe:9b:8c:d3:
                    39:c8:56:83:6c:2f:c0:94:15:8b:49:e1:3c:09:99:
                    85:9b:b2:9f:cb:49:e4:c4:8a:4c:72:0d:92:95:a4:
                    e0:b1:da:50:68:2d:bb:1b:67:9b:a0:8d:5a:c3:ba:
                    c1:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:2A:B2:F6:EC:18:20:A3:58:5C:87:59:B5:DC:BE:3F:6E:78:E8:08
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/4/
                RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/4/602AB2F6EC1820A3585C8759B5DCBE3F6E78E808.mft
                RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  211777

    Signature Algorithm: sha256WithRSAEncryption
         93:09:b9:43:25:94:1c:97:18:f7:20:ee:6c:7c:19:07:5a:89:
         a9:e2:ae:d8:d0:b4:98:43:7f:21:c3:56:62:2b:bd:ec:19:b1:
         e5:6f:40:42:dd:78:94:f1:c8:88:d5:a6:f8:db:3b:1f:35:2d:
         64:a1:ab:49:3d:13:aa:47:ff:c6:20:b4:0b:76:2d:70:02:6d:
         99:a9:92:28:ac:c0:91:e3:cf:65:f8:cc:1b:32:d3:15:42:1a:
         70:07:82:4f:5d:cc:aa:7b:ef:74:a7:8d:64:7f:4b:c3:8b:e5:
         48:e2:a4:a0:a8:fd:39:ff:4e:8a:d7:8a:07:35:8d:80:c9:ba:
         c6:9b:2a:8b:69:9f:73:f7:a1:6a:51:e2:49:ea:4a:2a:9f:c9:
         81:17:04:6c:7a:f9:30:3d:e6:b8:4a:83:c9:8f:30:57:f4:4b:
         27:ca:ac:11:47:36:50:3f:c2:45:8b:3e:24:fb:1f:34:84:11:
         83:1e:7b:2e:e0:1a:30:10:51:4d:d9:9a:1c:53:cd:53:20:1a:
         b7:7d:51:ae:77:61:20:72:21:fa:cb:f4:bb:5a:36:19:29:cd:
         92:81:d1:24:fd:17:2e:3e:63:54:0a:9f:4d:02:c2:7c:e2:d3:
         7b:1a:81:0b:8f:4a:73:60:96:ad:e9:e5:da:9d:72:21:07:c2:
         d4:be:54:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----