Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ZRokK7EsZ3Ct1qi9aRcCymKJVas.cer
File:                     ZRokK7EsZ3Ct1qi9aRcCymKJVas.cer (raw, json)
Hash identifier:          fKuANDDa2rf5W0N+uiBKG1iAwa8y2FvUy6rA08Wi3zY=
Subject key identifier:   65:1A:24:2B:B1:2C:67:70:AD:D6:A8:BD:69:17:02:CA:62:89:55:AB
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018CC7935F926AE29F1C1429CF2DF4112D95
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/a6/ec17ff-3368-4830-a55c-63ed8ace7bbd/1/ZRokK7EsZ3Ct1qi9aRcCymKJVas.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/a6/ec17ff-3368-4830-a55c-63ed8ace7bbd/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Tue 02 Jan 2024 00:29:33 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    AS: 210976

Validation:               Failed, certificate revoked on Tue 02 Jan 2024 11:32:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c7:93:5f:92:6a:e2:9f:1c:14:29:cf:2d:f4:11:2d:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 00:29:33 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=651a242bb12c6770add6a8bd691702ca628955ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:89:1c:9e:d3:00:62:5a:5f:86:06:0d:91:39:
                    ed:03:b1:0c:18:cd:b3:e0:27:a2:6f:a9:23:a5:73:
                    5d:ab:07:e7:f6:e5:21:3c:3a:e3:a2:25:37:47:6f:
                    1c:5c:1b:c8:ea:b5:ad:79:5c:03:35:96:7e:aa:71:
                    08:8f:58:7a:88:f9:19:05:db:43:12:d6:d4:37:de:
                    08:e9:ca:71:35:2b:30:ba:bd:c0:0e:89:59:b4:46:
                    f9:fb:7d:99:07:d5:70:46:4c:5f:d4:e5:14:e0:86:
                    45:82:65:f6:f1:a9:d8:39:a4:2f:e4:0e:23:ca:86:
                    35:00:fa:82:42:f8:c4:7c:8c:cb:aa:41:2f:35:33:
                    1e:96:c3:2b:6c:ae:f0:6e:48:92:ed:12:4e:58:ad:
                    2a:e9:cd:39:f1:29:ba:8b:37:fe:e7:28:ad:d4:94:
                    58:e3:92:55:ed:50:89:b8:7e:15:3f:7d:17:29:31:
                    14:7c:39:68:d8:7c:ac:ca:91:35:01:bd:ef:97:00:
                    41:03:13:5f:5c:7c:51:91:b6:6f:7b:28:fe:ee:6c:
                    78:01:12:c7:1d:52:66:bd:54:77:c1:42:16:39:82:
                    b6:e7:68:c1:f0:a7:fc:f8:8c:35:c2:8b:a2:48:c7:
                    45:3b:0d:9d:c1:5f:53:ed:d4:8e:6e:44:32:20:e0:
                    4a:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:1A:24:2B:B1:2C:67:70:AD:D6:A8:BD:69:17:02:CA:62:89:55:AB
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/ec17ff-3368-4830-a55c-63ed8ace7bbd/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/ec17ff-3368-4830-a55c-63ed8ace7bbd/1/ZRokK7EsZ3Ct1qi9aRcCymKJVas.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  210976

    Signature Algorithm: sha256WithRSAEncryption
         8a:44:63:e3:0b:4a:cd:8d:be:7b:e5:09:4e:b4:45:ee:f9:fd:
         23:80:a8:63:f3:1c:2d:f7:6a:b4:96:25:1f:66:28:03:88:88:
         04:00:97:c8:d4:93:5d:89:ec:c3:62:43:c2:dc:cd:dd:e3:a6:
         65:a5:e4:49:1f:37:27:ef:50:f1:f6:49:25:27:be:f4:47:c4:
         35:ae:35:65:f0:b7:e6:23:3c:8e:43:17:b1:f1:f7:be:c9:f3:
         46:d2:51:5a:6b:b7:9f:88:91:64:3e:21:dc:95:47:cd:5c:17:
         ab:83:5d:a4:4c:0a:bb:1c:d3:c0:58:a3:ae:15:8f:84:b2:bf:
         fe:11:4d:d2:63:eb:ff:93:ad:33:f4:e2:52:4f:7e:82:ae:48:
         1a:f3:3b:19:98:51:dc:8e:6d:5b:07:9f:39:80:60:6c:b4:03:
         cd:6f:9b:9a:63:9a:95:dd:23:7a:c8:86:6e:f9:ee:fb:67:97:
         9c:ec:b0:dd:e6:ef:37:ee:5a:d0:be:81:5a:9d:09:25:d6:d6:
         62:b4:73:0d:cb:a7:40:f6:5c:e0:63:63:e2:8e:5a:5f:a7:b5:
         63:a7:0f:bb:c0:c8:f6:c2:b6:dd:5c:71:84:e4:98:6f:e4:4b:
         c5:8f:ce:78:2b:38:b9:56:ad:01:f7:42:9d:bc:0b:a7:97:38:
         62:f3:18:3a
-----BEGIN CERTIFICATE-----
MIIFczCCBFugAwIBAgISAYzHk1+SauKfHBQpzy30ES2VMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAyMDAyOTMzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NTFhMjQyYmIxMmM2NzcwYWRkNmE4YmQ2OTE3MDJjYTYyODk1NWFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmIkcntMAYlpfhgYNkTntA7EMGM2z
4Ceib6kjpXNdqwfn9uUhPDrjoiU3R28cXBvI6rWteVwDNZZ+qnEIj1h6iPkZBdtD
EtbUN94I6cpxNSswur3ADolZtEb5+32ZB9VwRkxf1OUU4IZFgmX28anYOaQv5A4j
yoY1APqCQvjEfIzLqkEvNTMelsMrbK7wbkiS7RJOWK0q6c058Sm6izf+5yit1JRY
45JV7VCJuH4VP30XKTEUfDlo2HysypE1Ab3vlwBBAxNfXHxRkbZveyj+7mx4ARLH
HVJmvVR3wUIWOYK252jB8Kf8+Iw1wouiSMdFOw2dwV9T7dSObkQyIOBKAQIDAQAB
o4ICfzCCAnswHQYDVR0OBBYEFGUaJCuxLGdwrdaovWkXAspiiVWrMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2E2L2VjMTdm
Zi0zMzY4LTQ4MzAtYTU1Yy02M2VkOGFjZTdiYmQvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTYvZWMxN2Zm
LTMzNjgtNDgzMC1hNTVjLTYzZWQ4YWNlN2JiZC8xL1pSb2tLN0VzWjNDdDFxaTlh
UmNDeW1LSlZhcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwM4IDANBgkqhkiG9w0BAQsFAAOCAQEAikRj4wtKzY2+
e+UJTrRF7vn9I4CoY/McLfdqtJYlH2YoA4iIBACXyNSTXYnsw2JDwtzN3eOmZaXk
SR83J+9Q8fZJJSe+9EfENa41ZfC35iM8jkMXsfH3vsnzRtJRWmu3n4iRZD4h3JVH
zVwXq4NdpEwKuxzTwFijrhWPhLK//hFN0mPr/5OtM/TiUk9+gq5IGvM7GZhR3I5t
WwefOYBgbLQDzW+bmmOald0jesiGbvnu+2eXnOyw3ebvN+5a0L6BWp0JJdbWYrRz
DcunQPZc4GNj4o5aX6e1Y6cPu8DI9sK23VxxhOSYb+RLxY/OeCs4uVatAfdCnbwL
p5c4YvMYOg==
-----END CERTIFICATE-----