Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/YdNLJV_dtV2pYrQStJRWAHW7caw.cer
File:                     YdNLJV_dtV2pYrQStJRWAHW7caw.cer (raw, json)
Hash identifier:          WoWwVKQ8xoGdF8GeV1kaDCAirvwD4TtKgnoeiezj7mQ=
Subject key identifier:   61:D3:4B:25:5F:DD:B5:5D:A9:62:B4:12:B4:94:56:00:75:BB:71:AC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018570FA3B6F776EF391ED029F288A84AD55
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/74/1a2c97-30b1-48c2-b002-dea508867986/1/YdNLJV_dtV2pYrQStJRWAHW7caw.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/74/1a2c97-30b1-48c2-b002-dea508867986/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 02 Jan 2023 05:35:25 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    AS: 208690

Validation:               Failed, certificate revoked on Thu 13 Apr 2023 08:12:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:fa:3b:6f:77:6e:f3:91:ed:02:9f:28:8a:84:ad:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 05:35:25 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=61d34b255fddb55da962b412b494560075bb71ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:b8:10:ff:68:e7:df:13:fe:4e:68:a9:61:f2:
                    a0:5c:10:7d:8f:03:54:a0:e7:2e:34:12:48:3b:ac:
                    6b:e5:1d:ca:13:d4:92:e4:07:3c:8d:12:93:bf:94:
                    54:8b:bf:0a:60:1a:73:eb:4c:71:3b:fc:be:cd:e5:
                    af:54:e2:92:70:12:98:fe:dc:1e:1b:58:89:ea:48:
                    85:13:d7:fd:0d:a9:7a:88:09:ff:c8:a7:af:f6:b9:
                    81:32:8c:37:65:67:fb:59:80:91:d1:a6:2e:99:f1:
                    41:3e:3f:f1:96:13:40:08:d5:5e:b0:9a:46:1c:f1:
                    ac:8b:95:71:41:39:aa:d4:a4:ec:f3:b6:83:7e:93:
                    bb:33:fa:66:96:df:d9:af:42:04:73:5c:97:d7:48:
                    b9:ac:77:c2:74:d1:d3:93:de:33:5f:08:21:20:cd:
                    ba:a7:c6:c3:bd:ce:96:50:df:c2:30:d4:8c:72:5a:
                    ad:1b:76:30:7f:be:04:89:3c:7f:fb:d7:3f:49:16:
                    9e:0d:84:9a:11:3e:2d:be:f7:ac:bc:02:02:cc:c8:
                    79:b1:78:81:2a:8c:18:84:98:06:9e:81:fb:2c:f9:
                    25:52:33:76:75:02:3e:4f:c7:2d:cd:d5:29:61:38:
                    cf:b6:d8:aa:b2:7b:04:db:34:d2:09:8e:7c:29:8b:
                    a9:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:D3:4B:25:5F:DD:B5:5D:A9:62:B4:12:B4:94:56:00:75:BB:71:AC
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/1a2c97-30b1-48c2-b002-dea508867986/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/1a2c97-30b1-48c2-b002-dea508867986/1/YdNLJV_dtV2pYrQStJRWAHW7caw.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  208690

    Signature Algorithm: sha256WithRSAEncryption
         15:1f:ca:2f:6d:c8:44:63:1d:cd:4b:04:c4:43:83:40:31:8a:
         63:b7:cd:b4:3d:ae:87:33:cd:bf:b0:71:a9:78:c3:92:0b:0a:
         28:bb:b5:78:38:8e:e3:ee:44:1d:7b:b3:72:bc:46:b2:23:07:
         00:8a:a8:95:87:88:83:35:3f:83:cb:87:8e:c1:ae:52:b4:d8:
         ae:a0:f8:5f:d0:fe:95:3b:69:87:c6:72:04:3e:79:99:78:15:
         39:3d:a1:c8:08:cc:77:40:40:13:1f:67:bf:a6:9e:b3:f4:79:
         73:f6:fe:13:40:9d:d5:3c:7b:e4:22:50:70:e3:e8:f6:eb:e2:
         5d:09:85:b2:e8:9e:6a:71:78:f8:eb:c9:42:84:cb:2b:7f:23:
         d9:45:68:00:dd:4d:98:f3:dd:1e:e7:9c:e2:fc:dd:19:9a:bd:
         77:68:08:61:29:c7:8a:42:a9:cc:19:dd:d6:e7:29:66:9c:aa:
         85:a3:96:16:cd:c2:0b:3e:31:f3:5b:ca:9d:b9:6c:cd:1d:e5:
         a7:8f:08:f3:e8:62:1d:b5:e1:f5:ec:ba:33:03:f9:99:8e:1c:
         01:de:a9:8e:22:4c:27:c2:e8:8b:8b:5a:45:a6:3c:34:4a:94:
         49:3d:2f:fd:01:39:ca:80:5f:45:19:ef:80:63:b5:b4:87:3e:
         ef:a3:27:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----