Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aTzdgTHon97ap2sFSt2LjQuzvY4.cer
File:                     aTzdgTHon97ap2sFSt2LjQuzvY4.cer (raw, json)
Hash identifier:          gTRdAP4ueoGPNN8MvQPs7Bu+fT6oB/WaZK/KnQ6ucZw=
Subject key identifier:   69:3C:DD:81:31:E8:9F:DE:DA:A7:6B:05:4A:DD:8B:8D:0B:B3:BD:8E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0186FF0BE3693249B4D1C415A2EB8D79B6F2
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/65/f6c39b-94b1-4855-b094-c939f9bdd5eb/1/aTzdgTHon97ap2sFSt2LjQuzvY4.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/65/f6c39b-94b1-4855-b094-c939f9bdd5eb/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 20 Mar 2023 12:43:34 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    AS: 202151

Validation:               Failed, certificate revoked on Wed 22 Mar 2023 17:16:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:ff:0b:e3:69:32:49:b4:d1:c4:15:a2:eb:8d:79:b6:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Mar 20 12:43:34 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=693cdd8131e89fdedaa76b054add8b8d0bb3bd8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:ee:89:c6:ab:b3:55:60:1f:b1:43:d2:2e:68:
                    e4:29:20:28:1d:bd:af:41:9f:19:9f:37:91:24:c3:
                    33:6b:a3:52:03:8f:18:fc:ca:9b:f8:f4:ea:4f:3d:
                    92:02:55:8a:4d:20:28:b1:69:fd:14:81:72:1b:bc:
                    f1:10:31:58:70:0d:42:53:77:a3:7b:d4:8d:e5:a8:
                    7f:7c:97:92:5a:c1:22:5e:4a:66:0b:41:4e:82:1c:
                    d6:25:43:26:a1:00:fe:39:f2:cb:57:c1:0f:c8:5b:
                    b6:b6:d5:14:69:af:5a:79:e3:cf:0d:ce:14:2c:d4:
                    41:e3:ff:c7:fb:de:c4:c3:d0:bb:74:0b:ed:db:d4:
                    a0:c2:82:50:72:ad:5b:02:64:a5:4d:33:54:35:1e:
                    55:ab:63:d3:d1:c0:7e:e7:3a:3d:d8:d6:43:ac:d9:
                    e1:85:63:f1:15:94:a3:87:9a:39:e1:80:e9:e0:66:
                    bc:d3:4c:49:9a:b1:5c:aa:77:71:61:4e:fd:44:06:
                    64:7e:9b:56:ff:c2:15:2f:60:a8:61:fe:ca:64:69:
                    33:e6:fc:32:65:8b:37:71:7a:5e:ed:c5:a6:e4:71:
                    a1:14:cf:67:fd:e0:af:d3:32:57:9b:2e:02:25:27:
                    ac:dc:94:27:6c:f5:65:49:4a:a6:bd:64:8d:f1:9d:
                    9e:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:3C:DD:81:31:E8:9F:DE:DA:A7:6B:05:4A:DD:8B:8D:0B:B3:BD:8E
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/f6c39b-94b1-4855-b094-c939f9bdd5eb/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/f6c39b-94b1-4855-b094-c939f9bdd5eb/1/aTzdgTHon97ap2sFSt2LjQuzvY4.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  202151

    Signature Algorithm: sha256WithRSAEncryption
         49:b0:d6:df:74:18:80:75:83:72:e0:dd:0e:8b:11:a1:d6:68:
         e0:69:9b:5e:79:d1:2c:fa:61:cf:b7:43:d9:18:3b:09:14:e5:
         e2:58:43:67:ad:11:c6:2e:94:2d:90:f5:11:17:a7:7a:17:16:
         d4:4e:64:d7:ab:20:5f:d1:65:aa:01:2b:e0:ad:31:86:ad:33:
         04:ec:65:b0:de:4f:9a:95:83:29:e9:6c:da:44:34:95:fb:87:
         00:00:ed:48:e6:d5:a3:6e:cf:02:c5:89:9a:38:aa:0a:f4:56:
         dd:45:1f:a7:a9:31:79:ed:39:fa:79:e3:15:95:9f:46:b3:52:
         ad:be:38:d5:9e:8c:1e:31:b0:c9:fc:36:85:b1:9f:a0:fc:43:
         4a:32:09:47:36:26:ac:58:2c:87:38:a6:37:7f:7c:8d:44:2e:
         f7:aa:b1:27:60:2a:16:50:57:9a:fa:0d:d8:1b:2d:5f:5a:64:
         2e:11:58:b4:01:bb:a3:5a:aa:bf:5d:6b:d4:85:8c:21:9c:52:
         76:d6:8c:40:a0:e3:6d:98:a6:50:b3:8b:8d:1f:04:b2:92:22:
         13:52:db:87:98:68:d5:6c:e1:d9:08:32:f8:19:73:f7:bb:e0:
         60:d2:99:35:3d:0a:d9:bb:3c:b2:1d:1f:24:26:03:a2:fd:c5:
         8d:5d:7d:99
-----BEGIN CERTIFICATE-----
MIIFczCCBFugAwIBAgISAYb/C+NpMkm00cQVouuNebbyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjMwMzIwMTI0MzM0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2OTNjZGQ4MTMxZTg5ZmRlZGFhNzZiMDU0YWRkOGI4ZDBiYjNiZDhlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0O6JxquzVWAfsUPSLmjkKSAoHb2v
QZ8ZnzeRJMMza6NSA48Y/Mqb+PTqTz2SAlWKTSAosWn9FIFyG7zxEDFYcA1CU3ej
e9SN5ah/fJeSWsEiXkpmC0FOghzWJUMmoQD+OfLLV8EPyFu2ttUUaa9aeePPDc4U
LNRB4//H+97Ew9C7dAvt29SgwoJQcq1bAmSlTTNUNR5Vq2PT0cB+5zo92NZDrNnh
hWPxFZSjh5o54YDp4Ga800xJmrFcqndxYU79RAZkfptW/8IVL2CoYf7KZGkz5vwy
ZYs3cXpe7cWm5HGhFM9n/eCv0zJXmy4CJSes3JQnbPVlSUqmvWSN8Z2eswIDAQAB
o4ICfzCCAnswHQYDVR0OBBYEFGk83YEx6J/e2qdrBUrdi40Ls72OMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzY1L2Y2YzM5
Yi05NGIxLTQ4NTUtYjA5NC1jOTM5ZjliZGQ1ZWIvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjUvZjZjMzli
LTk0YjEtNDg1NS1iMDk0LWM5MzlmOWJkZDVlYi8xL2FUemRnVEhvbjk3YXAyc0ZT
dDJMalF1enZZNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwMVpzANBgkqhkiG9w0BAQsFAAOCAQEASbDW33QYgHWD
cuDdDosRodZo4GmbXnnRLPphz7dD2Rg7CRTl4lhDZ60Rxi6ULZD1ERenehcW1E5k
16sgX9FlqgEr4K0xhq0zBOxlsN5PmpWDKels2kQ0lfuHAADtSObVo27PAsWJmjiq
CvRW3UUfp6kxee05+nnjFZWfRrNSrb441Z6MHjGwyfw2hbGfoPxDSjIJRzYmrFgs
hzimN398jUQu96qxJ2AqFlBXmvoN2BstX1pkLhFYtAG7o1qqv11r1IWMIZxSdtaM
QKDjbZimULOLjR8EspIiE1Lbh5ho1Wzh2Qgy+Blz97vgYNKZNT0K2bs8sh0fJCYD
ov3FjV19mQ==
-----END CERTIFICATE-----