Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Z5Zb9DtEWxYFHUoDufDWvlrQ4qY.cer
File:                     Z5Zb9DtEWxYFHUoDufDWvlrQ4qY.cer (raw, json)
Hash identifier:          t1ByGJsqChpp69vzUwY6TXGn4aqky468fmbf5M80bSw=
Subject key identifier:   67:96:5B:F4:3B:44:5B:16:05:1D:4A:03:B9:F0:D6:BE:5A:D0:E2:A6
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0188456EDFEB074F192B9F437D26481631AA
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.co/repo/August/10/67965BF43B445B16051D4A03B9F0D6BE5AD0E2A6.mft
caRepository:             rsync://rpki.co/repo/August/10/
Notify URL:               https://rrdp.rpki.co/rrdp/notification.xml
Certificate not before:   Mon 22 May 2023 21:47:54 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    AS: 49867

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:45:6e:df:eb:07:4f:19:2b:9f:43:7d:26:48:16:31:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: May 22 21:47:54 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=67965bf43b445b16051d4a03b9f0d6be5ad0e2a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:73:9f:05:9f:13:80:01:de:19:5e:aa:4d:90:
                    41:d8:c8:07:05:7a:ac:e6:9d:2e:f1:c3:e9:0c:f7:
                    a8:ef:b3:b0:c9:8f:6b:6c:00:6f:38:27:51:40:41:
                    a2:d2:f1:f8:0e:dc:18:20:22:5a:95:f9:ac:df:00:
                    df:ec:e9:00:ce:79:68:e0:7a:ba:20:b2:61:4f:d5:
                    b9:de:11:aa:1d:46:c3:2d:61:fe:04:0c:a9:bc:c5:
                    d2:a8:61:3a:ef:7c:24:17:9f:eb:fe:df:7c:88:d4:
                    e9:01:b2:c6:31:a0:ce:2a:15:02:28:47:c9:7b:fd:
                    92:2d:8e:1c:f2:d7:94:02:5e:f3:7d:23:ef:47:bf:
                    24:70:5f:8a:e9:75:ef:5c:8a:e0:45:11:f0:02:49:
                    fb:f2:ba:2f:b8:93:21:b4:03:c5:65:c0:e3:ab:eb:
                    c5:29:52:10:15:63:80:8f:d7:59:5c:7b:c4:be:dc:
                    c2:bb:d3:6b:0e:9c:1a:94:7d:23:8e:98:41:dc:dc:
                    42:ef:dd:4b:81:e7:75:50:ef:c0:7b:f6:0d:c4:5e:
                    b2:93:d3:00:ba:0a:74:d9:de:f3:da:f1:1a:0d:e9:
                    4b:bb:33:65:fb:7d:d5:91:8b:f4:ea:54:a6:33:c5:
                    3d:c7:1d:8c:bb:fb:ce:6a:a3:9e:c3:d8:00:02:5f:
                    dd:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:96:5B:F4:3B:44:5B:16:05:1D:4A:03:B9:F0:D6:BE:5A:D0:E2:A6
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.co/repo/August/10/
                RPKI Manifest - URI:rsync://rpki.co/repo/August/10/67965BF43B445B16051D4A03B9F0D6BE5AD0E2A6.mft
                RPKI Notify - URI:https://rrdp.rpki.co/rrdp/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  49867

    Signature Algorithm: sha256WithRSAEncryption
         11:7b:a8:45:31:b9:84:a6:ea:b3:b7:1c:5e:d2:14:c5:02:cd:
         e0:7a:28:93:80:5f:cc:af:f5:65:15:87:ef:87:23:eb:f8:ff:
         32:ee:87:89:f6:95:77:75:13:6b:ed:b1:b6:b3:8f:c3:5a:ba:
         a6:ca:56:88:81:04:96:68:a9:b0:39:9f:82:ae:93:88:a0:63:
         98:aa:1e:e8:68:5b:13:e1:b8:37:be:13:a1:7f:3e:b6:fd:40:
         a5:ce:33:ae:28:b7:34:66:d8:d9:ee:5e:30:d4:07:b2:28:d8:
         c0:ac:15:88:35:f0:22:ea:05:64:4f:25:2a:e6:17:42:c5:cb:
         a0:40:40:a9:1a:06:6d:3e:9a:05:5b:c4:ca:7a:3a:b8:ec:3e:
         c4:ac:ba:a5:71:67:98:15:33:69:31:99:9c:2d:30:45:cd:6f:
         4f:1b:ab:d0:71:76:d3:37:52:2e:b3:0d:04:f3:e5:bc:d0:66:
         4d:d0:a3:6f:7c:74:bc:02:03:d1:1e:49:d1:99:89:06:fa:1c:
         ec:db:4d:0a:66:12:bb:ae:d9:28:06:df:04:54:72:1a:77:c6:
         d3:f8:88:43:c2:d6:46:6b:72:d9:51:19:3f:5c:28:df:e6:f8:
         8b:fd:99:4c:cf:cc:10:92:c6:f6:60:d6:16:ac:55:f5:8b:f1:
         b8:3a:fe:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 15 04:10:49 2023 by rpki-client on console-fra.rpki-client.org