Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/_eL6gVVY0ggx_UYGKvm3iryOMC4.cer
File:                     _eL6gVVY0ggx_UYGKvm3iryOMC4.cer (raw, json)
Hash identifier:          bFe2bnDjvih7JsbGGzAAMxSy/ltXuwMiHqjdz86phFE=
Subject key identifier:   FD:E2:FA:81:55:58:D2:08:31:FD:46:06:2A:F9:B7:8A:BC:8E:30:2E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018CC493978A9819DFA4FFAA5F2AB8EBD2D1
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rsync.paas.rpki.ripe.net/repository/5be80edf-4126-4dc2-b337-5db6193122d4/0/FDE2FA815558D20831FD46062AF9B78ABC8E302E.mft
caRepository:             rsync://rsync.paas.rpki.ripe.net/repository/5be80edf-4126-4dc2-b337-5db6193122d4/0/
Notify URL:               https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 10:30:56 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    AS: 203236

Validation:               Failed, certificate revoked on Thu 04 Jan 2024 22:14:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c4:93:97:8a:98:19:df:a4:ff:aa:5f:2a:b8:eb:d2:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 10:30:56 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=fde2fa815558d20831fd46062af9b78abc8e302e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:bd:34:b0:67:b5:fb:bc:89:96:af:e3:b6:90:
                    a5:26:40:67:fb:02:e0:64:b3:0b:3b:2d:9b:67:49:
                    d3:58:fb:9a:1d:aa:38:e7:fc:aa:f0:fb:5f:d9:11:
                    51:67:4c:0d:72:22:24:2c:da:77:a2:ca:b3:0b:13:
                    62:82:40:36:75:17:f2:2e:34:09:87:6d:bb:9d:65:
                    e1:1c:b0:ab:15:bb:9e:0a:7e:de:ad:f4:9e:27:2f:
                    10:cf:96:46:d7:61:88:03:cb:8d:5d:76:87:6b:91:
                    32:78:57:9c:9b:87:b1:47:10:0b:9d:d7:80:fd:7f:
                    b3:04:cc:16:d7:bf:e3:fd:3b:36:65:17:d3:31:07:
                    a1:2d:fc:fb:b8:76:3a:0d:36:51:26:42:17:09:f4:
                    d5:0e:cf:7c:e5:f7:1f:93:13:86:c5:6c:81:50:0e:
                    f8:74:90:62:2f:f4:6d:f5:46:34:8f:7c:24:19:90:
                    ac:ab:ff:93:2b:16:22:d8:85:0e:fd:6b:5a:e0:04:
                    9b:04:13:ee:e7:40:6a:b1:a6:4d:87:2c:d4:de:4c:
                    53:f4:61:df:f2:1c:28:74:c6:a8:5c:25:8b:aa:b3:
                    01:4a:1a:05:13:98:58:fb:fd:29:ae:1a:12:49:c9:
                    6c:4a:e3:7d:ac:d3:8c:5c:8e:f4:53:b7:0b:bd:81:
                    24:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:E2:FA:81:55:58:D2:08:31:FD:46:06:2A:F9:B7:8A:BC:8E:30:2E
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/5be80edf-4126-4dc2-b337-5db6193122d4/0/
                RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/5be80edf-4126-4dc2-b337-5db6193122d4/0/FDE2FA815558D20831FD46062AF9B78ABC8E302E.mft
                RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  203236

    Signature Algorithm: sha256WithRSAEncryption
         68:45:06:34:1e:07:49:a8:96:5b:11:83:ab:6c:6a:18:bc:d9:
         87:41:50:5f:43:d5:b4:b5:9f:6e:0f:37:6c:28:6a:dc:e2:2d:
         2f:75:9d:b9:d7:6c:9c:35:b6:e3:df:cf:cc:2e:67:2c:99:b7:
         75:ac:55:7c:16:e8:39:78:8f:3e:81:8c:75:90:a9:6e:78:c2:
         62:a0:b9:f6:ee:d5:0b:40:d3:cf:f1:65:38:4c:8d:4e:61:77:
         46:7f:e7:2d:e9:f5:e3:12:5f:a9:db:64:de:3d:b7:72:d7:08:
         48:6b:4e:0c:e4:de:94:15:9e:b1:05:b0:0a:08:67:33:9e:6c:
         48:75:44:eb:0d:f9:cb:f8:51:a0:97:58:21:df:73:5f:53:4b:
         39:e7:7e:d9:c8:69:9e:6a:1c:c3:fa:98:dd:75:e1:f9:ab:9e:
         a7:3a:3c:aa:37:22:37:84:81:f0:b3:16:b9:53:d3:5f:8c:0d:
         7e:83:30:14:7f:16:85:a6:c6:86:ca:7c:e2:23:bc:9b:01:a5:
         46:78:39:ce:a1:c9:d8:bc:13:cd:d8:aa:b7:f0:0f:c2:91:11:
         49:a7:ae:38:2f:46:8d:eb:e3:35:71:07:fa:dc:ec:10:6e:3b:
         8f:e7:21:d4:0b:aa:ca:0b:4b:fd:82:4a:e0:39:a6:10:c7:d8:
         41:bb:89:03
-----BEGIN CERTIFICATE-----
MIIFjzCCBHegAwIBAgISAYzEk5eKmBnfpP+qXyq469LRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMTAzMDU2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZGUyZmE4MTU1NThkMjA4MzFmZDQ2MDYyYWY5Yjc4YWJjOGUzMDJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAob00sGe1+7yJlq/jtpClJkBn+wLg
ZLMLOy2bZ0nTWPuaHao45/yq8Ptf2RFRZ0wNciIkLNp3osqzCxNigkA2dRfyLjQJ
h227nWXhHLCrFbueCn7erfSeJy8Qz5ZG12GIA8uNXXaHa5EyeFecm4exRxALndeA
/X+zBMwW17/j/Ts2ZRfTMQehLfz7uHY6DTZRJkIXCfTVDs985fcfkxOGxWyBUA74
dJBiL/Rt9UY0j3wkGZCsq/+TKxYi2IUO/Wta4ASbBBPu50BqsaZNhyzU3kxT9GHf
8hwodMaoXCWLqrMBShoFE5hY+/0prhoSSclsSuN9rNOMXI70U7cLvYEkdwIDAQAB
o4ICmzCCApcwHQYDVR0OBBYEFP3i+oFVWNIIMf1GBir5t4q8jjAuMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggE/BggrBgEFBQcBCwSCATEwggEtMF8GCCsGAQUFBzAFhlNy
c3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzViZTgw
ZWRmLTQxMjYtNGRjMi1iMzM3LTVkYjYxOTMxMjJkNC8wLzCBiwYIKwYBBQUHMAqG
f3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNWJl
ODBlZGYtNDEyNi00ZGMyLWIzMzctNWRiNjE5MzEyMmQ0LzAvRkRFMkZBODE1NTU4
RDIwODMxRkQ0NjA2MkFGOUI3OEFCQzhFMzAyRS5tZnQwPAYIKwYBBQUHMA2GMGh0
dHBzOi8vcnJkcC5wYWFzLnJwa2kucmlwZS5uZXQvbm90aWZpY2F0aW9uLnhtbDBZ
BgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jcmwwGAYDVR0g
AQH/BA4wDDAKBggrBgEFBQcOAjAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMDGeQw
DQYJKoZIhvcNAQELBQADggEBAGhFBjQeB0mollsRg6tsahi82YdBUF9D1bS1n24P
N2woatziLS91nbnXbJw1tuPfz8wuZyyZt3WsVXwW6Dl4jz6BjHWQqW54wmKgufbu
1QtA08/xZThMjU5hd0Z/5y3p9eMSX6nbZN49t3LXCEhrTgzk3pQVnrEFsAoIZzOe
bEh1ROsN+cv4UaCXWCHfc19TSznnftnIaZ5qHMP6mN114fmrnqc6PKo3IjeEgfCz
FrlT01+MDX6DMBR/FoWmxobKfOIjvJsBpUZ4Oc6hydi8E83YqrfwD8KREUmnrjgv
Ro3r4zVxB/rc7BBuO4/nIdQLqsoLS/2CSuA5phDH2EG7iQM=
-----END CERTIFICATE-----