Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bD_-v8PDO2EbWHXjcX7vuEzuuh0.cer
File:                     bD_-v8PDO2EbWHXjcX7vuEzuuh0.cer (raw, json)
Hash identifier:          Dv0+UkfdBVUVEDuYMDKGQljfdW5jnC09VHZc2T2kEBU=
Subject key identifier:   6C:3F:FE:BF:C3:C3:3B:61:1B:58:75:E3:71:7E:EF:B8:4C:EE:BA:1D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856FB07C6EE5AC5673A6EFF0DF6DE896F4
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/75/13be0d-9d81-4cc9-befe-b75ae64115cc/1/bD_-v8PDO2EbWHXjcX7vuEzuuh0.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/75/13be0d-9d81-4cc9-befe-b75ae64115cc/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 23:35:15 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    AS: 208702
                          IP: 2001:678:a98::/48

Validation:               Failed, certificate revoked on Fri 26 May 2023 08:10:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:b0:7c:6e:e5:ac:56:73:a6:ef:f0:df:6d:e8:96:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 23:35:15 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=6c3ffebfc3c33b611b5875e3717eefb84ceeba1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:46:ed:33:6f:f9:1e:77:0a:bd:1b:0e:63:89:
                    b0:a6:83:a5:85:84:19:b5:f1:13:6b:8a:35:fa:69:
                    0a:14:eb:27:98:69:c4:f9:c9:3e:88:3a:7f:2a:78:
                    33:b9:5d:2c:2f:3e:12:51:24:98:fd:9b:4d:62:f2:
                    a5:74:dc:87:71:f2:03:2e:23:fa:95:a7:54:4e:91:
                    7e:ad:90:68:ae:45:ea:5e:88:36:41:78:77:c7:e7:
                    64:29:db:65:83:0d:60:a1:ee:92:b8:89:29:b3:5d:
                    69:7b:83:9b:4e:37:02:1a:b8:49:36:df:04:c2:4b:
                    44:1e:88:f1:5c:80:ad:2a:c0:74:c9:5d:16:99:c7:
                    7d:77:3a:6c:9b:3d:c9:8f:1c:91:c0:dc:21:31:39:
                    66:71:c3:d8:72:8e:9a:c2:66:f3:c5:95:73:59:3d:
                    18:14:10:fc:e8:3c:fd:27:1d:bf:70:cd:26:59:e4:
                    3d:49:82:88:06:d1:36:5c:54:f1:df:c2:f1:76:de:
                    b0:ce:f1:28:09:4b:b2:a1:e4:c5:45:61:ef:0d:03:
                    a5:ff:43:66:3e:a7:f8:6c:70:f4:7a:0c:5d:85:8c:
                    f3:c1:d9:b1:6c:5f:85:4e:30:17:46:a3:47:72:5e:
                    d8:94:5b:f3:c3:05:d8:d1:09:3b:7d:e0:a2:1f:76:
                    5a:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:3F:FE:BF:C3:C3:3B:61:1B:58:75:E3:71:7E:EF:B8:4C:EE:BA:1D
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/13be0d-9d81-4cc9-befe-b75ae64115cc/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/13be0d-9d81-4cc9-befe-b75ae64115cc/1/bD_-v8PDO2EbWHXjcX7vuEzuuh0.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:678:a98::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  208702

    Signature Algorithm: sha256WithRSAEncryption
         18:43:68:fc:6a:56:67:ad:60:7e:fb:cd:e5:a6:a6:f4:71:12:
         41:1e:69:df:13:3a:b1:3f:a5:7c:a0:e3:b2:14:bf:ed:fb:28:
         4c:b7:7e:91:21:19:bf:24:55:52:84:73:d0:81:ca:b1:0f:82:
         97:da:6c:3e:22:a0:5d:46:ce:85:d8:eb:5c:b6:70:4e:e8:de:
         86:44:0c:bc:d3:83:8c:73:ec:dc:0b:69:88:b1:5c:34:ab:96:
         19:1a:7c:3c:28:67:76:b9:4b:cc:4d:5b:8a:98:9d:d7:4f:75:
         74:7d:c0:cf:d2:b8:80:93:d3:f4:50:2e:f5:06:55:cc:4a:a4:
         ec:be:a2:fb:bb:38:8a:53:a9:09:3f:c9:84:26:31:eb:f5:8d:
         52:7a:d4:f3:55:bf:20:58:cf:aa:1c:d2:97:71:76:8b:63:5c:
         0b:8d:b2:e8:53:9e:d5:78:0f:f6:e6:0e:e8:78:aa:68:03:e9:
         f4:26:08:88:dc:64:62:5c:0e:d4:de:99:5a:28:56:5b:2b:d7:
         1b:24:a4:b7:dc:2c:e7:27:c3:1b:cb:83:bc:6d:fb:fe:b8:81:
         0b:90:09:d3:d8:e8:5f:e2:3b:a2:92:36:f7:0b:d7:ef:77:2a:
         a6:91:b3:c5:d2:42:71:5f:a6:23:13:af:77:ab:ea:43:55:46:
         10:3c:fb:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----