Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/YirmDfEDFv8jngbIFJZYbORmquQ.cer
File:                     YirmDfEDFv8jngbIFJZYbORmquQ.cer (raw, json)
Hash identifier:          U3Oywe4bQ6NvaZ1cxsWQY5o0ZDI5l47rXpusXALQ+Vo=
Subject key identifier:   62:2A:E6:0D:F1:03:16:FF:23:9E:06:C8:14:96:58:6C:E4:66:AA:E4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01906910F061060FE59788D9168B80E16C28
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/25/622AE60DF10316FF239E06C81496586CE466AAE4.mft
caRepository:             rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/25/
Notify URL:               https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before:   Sun 30 Jun 2024 12:13:56 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    AS: 216254

Validation:               Failed, certificate revoked on Sun 07 Jul 2024 18:51:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:69:10:f0:61:06:0f:e5:97:88:d9:16:8b:80:e1:6c:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jun 30 12:13:56 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=622ae60df10316ff239e06c81496586ce466aae4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:8e:0b:42:69:cc:32:b6:28:b4:b9:48:b9:83:
                    b3:7f:bc:a0:f9:0b:0e:5c:fe:e3:f1:74:8d:e9:42:
                    48:c3:18:36:33:fd:32:f1:3e:99:aa:22:7e:cc:e5:
                    4f:7f:74:44:d1:32:77:54:7b:8e:fe:c7:2b:a7:d9:
                    89:ee:0a:27:10:01:43:41:dc:ba:dd:6f:a8:61:e8:
                    4d:8c:8d:fe:ce:b9:7e:02:f4:bb:2f:f6:01:0c:a3:
                    84:7a:f1:f9:92:bd:45:a0:4b:1b:a9:1c:cb:8a:f8:
                    17:11:7f:17:8c:01:17:bc:82:58:af:43:00:ad:e5:
                    e8:aa:66:7f:52:06:50:ae:d2:44:cc:7b:14:93:cc:
                    6f:84:66:50:19:f0:07:d1:32:fc:86:24:55:f6:72:
                    cb:7e:3b:27:5e:e1:e6:66:1f:02:84:06:fb:56:b7:
                    97:90:6d:05:5e:08:cf:96:d2:7f:4c:13:44:77:4d:
                    d3:f0:48:ca:60:88:c1:e9:06:9a:f3:d9:bc:98:45:
                    b0:6f:4a:a1:3c:64:74:2f:6a:4c:ca:74:8c:69:1b:
                    b3:00:a5:a2:cd:f9:e7:bc:79:5c:6b:13:cd:4c:a9:
                    35:da:f9:90:18:2e:68:76:ba:97:4e:03:e1:cb:6b:
                    41:cf:3f:17:f2:e4:e5:df:24:d4:81:e0:54:d7:66:
                    5f:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:2A:E6:0D:F1:03:16:FF:23:9E:06:C8:14:96:58:6C:E4:66:AA:E4
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/25/
                RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/25/622AE60DF10316FF239E06C81496586CE466AAE4.mft
                RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  216254

    Signature Algorithm: sha256WithRSAEncryption
         57:1f:a1:b6:84:63:54:75:b1:61:2a:59:bb:a8:8f:71:e4:a3:
         64:84:14:5f:d3:ac:56:00:3c:cd:dd:b1:9b:7a:08:5a:8a:18:
         fc:5e:22:9e:42:24:37:cd:17:45:69:17:37:4c:84:16:34:b7:
         c2:c1:b1:95:1b:c3:50:26:53:84:a2:80:8b:88:83:37:a4:5f:
         1d:3a:1f:f0:a9:50:4d:4f:f0:23:55:b5:34:90:4d:2a:5f:9c:
         39:52:b5:ed:0d:c0:3a:a5:7b:06:5b:67:14:db:10:2a:2b:0a:
         88:31:ee:ba:e6:1b:d5:4c:fa:32:18:b5:4e:83:da:0c:ca:c3:
         f1:db:2a:82:33:b3:c8:f1:b5:22:73:ec:b0:90:97:96:e1:5f:
         50:fe:91:35:8d:07:da:02:4d:2f:f0:ce:b3:7d:bd:41:22:08:
         bb:1e:3c:f4:d8:a7:a8:e8:8e:a4:04:03:b0:45:bc:eb:9e:5f:
         cb:59:c5:81:05:6c:00:2e:27:35:6f:b8:50:0f:99:40:0b:f8:
         11:78:f2:d5:75:e5:f3:e4:d0:ba:2f:62:09:85:86:2c:53:c6:
         0a:c2:f2:9a:bd:4a:3b:34:0e:ad:a1:24:4c:83:21:7a:72:8d:
         f4:ae:5d:05:dc:ea:33:f8:6b:cb:f5:14:56:8b:ec:cb:18:f9:
         a1:92:76:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----