Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/_HuZ3km216LiZ7snv9SO05S4S3w.cer
File:                     _HuZ3km216LiZ7snv9SO05S4S3w.cer (raw, json)
Hash identifier:          6L3hvTvyw3ViVlwoTRDyEA5apeXC2Y1LSv4QzsM9qTs=
Subject key identifier:   FC:7B:99:DE:49:B6:D7:A2:E2:67:BB:27:BF:D4:8E:D3:94:B8:4B:7C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018A82CD706AE0BD4C5A0092E8AD8EAF7CDD
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/d2/1d96a8-3627-46d4-b791-298d324f7542/1/_HuZ3km216LiZ7snv9SO05S4S3w.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/d2/1d96a8-3627-46d4-b791-298d324f7542/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 11 Sep 2023 05:53:36 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    AS: 201349

Validation:               Failed, certificate revoked on Tue 12 Sep 2023 06:07:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:82:cd:70:6a:e0:bd:4c:5a:00:92:e8:ad:8e:af:7c:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Sep 11 05:53:36 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=fc7b99de49b6d7a2e267bb27bfd48ed394b84b7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:71:7e:ce:c9:a0:cb:bf:d0:0d:30:ea:a4:02:
                    01:4e:46:c1:79:5d:56:c9:98:34:fd:6c:b5:f6:dc:
                    dc:4a:4a:f7:13:07:36:20:48:08:ec:5f:92:7a:ae:
                    7e:1e:d6:78:a5:18:98:4b:4e:07:71:0b:29:bf:17:
                    c5:51:ec:de:f8:56:5d:9e:ea:fc:a5:4d:0e:8f:72:
                    f8:82:cb:f5:14:c1:8d:0f:e8:90:ca:fe:87:1b:97:
                    f0:a5:93:3c:22:e8:f8:a4:d5:47:95:dc:77:46:45:
                    80:92:df:74:58:05:ff:96:24:75:cc:4c:9a:3f:9f:
                    95:4d:7f:dd:61:87:a8:06:b4:36:bf:cb:da:1f:20:
                    48:a7:fe:4c:88:cc:01:43:d7:d6:a2:cd:27:2d:c2:
                    f1:b3:dd:9f:cd:8c:5c:74:2e:7e:76:5e:81:83:96:
                    3a:5d:7c:5a:1e:4e:c0:d5:cd:90:2e:98:31:21:f9:
                    86:9c:13:21:af:7e:6a:53:e0:94:58:3f:a0:9a:ed:
                    de:4b:23:63:e9:f9:34:33:b3:4b:d6:c3:33:5e:a0:
                    8e:0d:cf:94:89:58:4b:20:e4:ad:b2:53:f6:8c:3d:
                    bd:7b:99:f3:34:ce:4b:d7:b8:cd:79:80:bb:09:b8:
                    e4:9d:f4:36:e1:d7:f8:f1:d2:95:f6:b2:fe:5c:df:
                    31:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:7B:99:DE:49:B6:D7:A2:E2:67:BB:27:BF:D4:8E:D3:94:B8:4B:7C
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/1d96a8-3627-46d4-b791-298d324f7542/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/1d96a8-3627-46d4-b791-298d324f7542/1/_HuZ3km216LiZ7snv9SO05S4S3w.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  201349

    Signature Algorithm: sha256WithRSAEncryption
         96:ee:eb:8b:07:44:0e:2e:b0:80:49:38:36:4f:b7:37:d5:10:
         ca:3e:16:bd:6d:b0:09:66:24:66:5a:f4:fe:cf:81:a2:fa:60:
         f5:1a:82:ba:0f:89:98:6e:9b:7f:41:e6:bd:4f:b2:3b:49:3e:
         02:47:6a:c6:26:cc:d4:03:26:13:41:c9:7b:13:62:03:45:f7:
         23:72:4c:37:2b:15:3f:30:07:5c:dd:af:75:32:16:22:42:76:
         70:95:84:a4:59:99:e1:e9:56:6b:93:de:b3:e1:72:ae:61:73:
         8f:c7:35:52:2a:aa:49:ce:95:8c:c7:b0:77:fa:d3:1b:5e:8f:
         57:b8:c9:88:82:9f:87:e4:bc:ca:04:04:e8:9d:b3:87:d4:cc:
         94:3d:f5:61:d8:01:00:f2:2b:18:7d:4d:ef:98:4c:da:8b:ae:
         0b:8b:ef:cd:52:bd:fe:2a:14:d4:a2:ad:ac:25:98:76:d3:b6:
         07:77:e8:ab:83:6f:dd:de:1d:56:9d:d1:2c:f7:68:bb:a4:06:
         9d:f3:71:69:8d:0d:ab:76:97:5a:ce:98:3c:bc:60:ae:c8:93:
         32:0f:76:35:25:a9:2c:2a:77:aa:9c:74:5a:ce:41:69:08:39:
         24:5f:b1:29:44:67:93:2c:b0:cc:d3:49:2c:71:11:0f:72:c2:
         74:8b:af:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----