Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aivBN2etLSFAYsnPzyCYF9HhYd0.cer
File:                     aivBN2etLSFAYsnPzyCYF9HhYd0.cer (raw, json)
Hash identifier:          S/vlAUKZ+2XV9POTqSP9aDybmD2Dmn+2bOYX4LpBkVk=
Subject key identifier:   6A:2B:C1:37:67:AD:2D:21:40:62:C9:CF:CF:20:98:17:D1:E1:61:DD
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0191FE7A59D710702690ED80165A6EED754C
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/1d/ee03ca-197e-4d1a-a3dc-86e342a85f9b/1/aivBN2etLSFAYsnPzyCYF9HhYd0.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/1d/ee03ca-197e-4d1a-a3dc-86e342a85f9b/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Tue 17 Sep 2024 05:35:16 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    AS: 211008

Validation:               Failed, certificate revoked on Fri 15 Nov 2024 14:41:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:fe:7a:59:d7:10:70:26:90:ed:80:16:5a:6e:ed:75:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Sep 17 05:35:16 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=6a2bc13767ad2d214062c9cfcf209817d1e161dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:ea:82:b7:95:3a:48:26:28:03:5b:2f:58:70:
                    32:2b:5c:cd:a1:7e:ff:c3:0f:eb:dc:a6:b0:ae:b7:
                    86:00:c0:ac:01:db:6d:77:8e:0d:36:f4:25:20:26:
                    4e:93:52:7d:20:90:1d:2e:fe:f0:8f:2a:2f:a5:9b:
                    93:e3:b0:3d:04:9b:af:6e:a5:14:ef:85:23:9e:4a:
                    c3:b1:57:75:91:a8:cc:bf:32:bd:03:bf:db:80:38:
                    3e:9b:cd:a3:14:c8:e6:22:0d:7c:ca:08:99:e9:ad:
                    0e:f2:1b:b7:9f:28:ff:40:7b:4d:c7:06:89:ee:23:
                    29:80:9a:ed:b4:9c:4b:2e:76:5c:b8:50:a4:18:e9:
                    47:10:0c:a4:ce:68:53:6b:c1:e6:7c:f0:07:a9:be:
                    dc:08:3a:e6:30:8a:fb:2b:b4:48:06:2a:5e:42:d8:
                    83:18:93:bc:d4:be:ab:46:4a:b2:43:57:d5:67:c0:
                    37:bf:e8:d8:a3:fe:31:eb:f0:bc:a0:3e:90:e4:de:
                    65:1b:94:c4:bd:53:9e:d7:fd:6f:5e:0e:62:73:d9:
                    4d:86:9c:da:42:d3:38:61:d5:9c:d3:ed:1e:6b:fa:
                    fd:83:3c:bf:d5:47:2a:0f:d8:6a:70:fa:c0:d6:af:
                    6b:99:7d:db:50:38:9b:d2:b5:90:bc:d7:23:25:83:
                    2a:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:2B:C1:37:67:AD:2D:21:40:62:C9:CF:CF:20:98:17:D1:E1:61:DD
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/ee03ca-197e-4d1a-a3dc-86e342a85f9b/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/ee03ca-197e-4d1a-a3dc-86e342a85f9b/1/aivBN2etLSFAYsnPzyCYF9HhYd0.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  211008

    Signature Algorithm: sha256WithRSAEncryption
         4a:a5:b3:cf:9e:b2:8c:90:94:78:47:ae:01:fa:64:2f:93:04:
         59:4e:49:e2:fb:55:12:cb:09:bd:9a:bc:45:1a:2e:45:01:cd:
         d8:75:33:7f:3e:c0:09:c3:c5:de:1b:c4:bc:27:83:25:71:2d:
         19:b1:14:47:66:e3:31:eb:79:62:98:c8:f9:fc:f8:f6:0b:5b:
         66:f9:e0:a4:02:83:51:4d:04:db:b9:ab:2b:41:e9:ce:0c:01:
         9b:fd:f7:2f:0e:f7:62:72:10:32:8d:bc:46:4d:38:a3:0c:ed:
         23:67:58:79:60:68:0f:83:72:23:ed:86:10:fa:65:0f:11:fa:
         5c:23:34:17:49:8f:21:b2:ad:90:29:a5:a0:02:25:7b:47:7f:
         66:8e:12:f2:4f:58:71:71:c1:fa:63:6f:c2:8d:2b:d4:76:17:
         e8:07:24:20:a6:9f:02:45:e0:10:1f:cd:0a:de:2d:62:f5:68:
         d5:8f:9c:df:bd:23:5b:d7:09:f5:a7:73:6e:ad:ff:11:2b:a2:
         d4:fe:91:a5:18:34:f5:7c:b1:e6:4a:90:b9:1d:52:2c:aa:93:
         c3:f0:d2:11:01:3c:f9:77:c7:78:e7:2f:70:62:ec:e6:62:31:
         68:56:49:fd:0e:b1:c4:c2:1c:b1:91:20:d6:15:b0:3c:21:74:
         30:2b:0c:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----