Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bGhYQ7aIG7EEWx43jx1reRCAlpU.cer
File:                     bGhYQ7aIG7EEWx43jx1reRCAlpU.cer (raw, json)
Hash identifier:          xukEJnkcLRqEcqpb1FSJtTNTosCxxuD3fgmo9UjZ+5M=
Subject key identifier:   6C:68:58:43:B6:88:1B:B1:04:5B:1E:37:8F:1D:6B:79:10:80:96:95
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856EFBDA2EEAC623BCB97EC4F7D77DFF34
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/50/a013b5-732a-4642-8ae6-2e2250fd5565/1/bGhYQ7aIG7EEWx43jx1reRCAlpU.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/50/a013b5-732a-4642-8ae6-2e2250fd5565/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 20:17:57 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    AS: 212334

Validation:               Failed, certificate revoked on Tue 30 May 2023 09:10:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6e:fb:da:2e:ea:c6:23:bc:b9:7e:c4:f7:d7:7d:ff:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 20:17:57 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=6c685843b6881bb1045b1e378f1d6b7910809695
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:e8:51:29:d0:9f:8a:05:42:0f:30:6e:3e:d8:
                    60:af:11:5b:ae:67:cb:05:ff:c3:37:6b:01:83:4d:
                    c2:dc:1c:2a:c8:77:9c:c3:54:77:15:d4:7d:0e:30:
                    ff:ee:af:69:93:d6:8f:f0:4e:2f:f1:31:af:3b:b0:
                    ba:37:49:9d:9f:9e:99:c0:c5:b4:3b:0d:9f:c2:23:
                    3f:a5:81:a8:24:bc:63:06:06:fb:73:50:b0:e3:bf:
                    42:a2:5c:a8:1c:a3:fd:73:22:1f:03:43:d0:7f:18:
                    02:23:ac:56:f9:ab:14:e2:62:f7:02:83:1f:c2:44:
                    62:00:cb:4f:0e:90:84:9f:a9:ba:dd:55:52:c4:3a:
                    a4:3b:f6:cc:42:f6:06:c9:25:29:fb:2d:16:53:8f:
                    e5:aa:44:48:4d:53:65:fc:08:fe:5b:6b:3e:2c:bc:
                    1d:4f:22:3b:52:e2:15:7b:50:a8:a2:f6:61:14:b6:
                    48:78:7f:ee:96:8f:47:ea:0c:8a:5f:4c:93:cb:ba:
                    67:cc:96:26:17:77:42:30:85:03:eb:d9:fc:d0:49:
                    6a:c0:b0:73:49:a5:e3:0e:e7:1c:39:d0:3a:34:92:
                    07:d6:4a:42:69:75:d7:9d:e5:6c:02:ee:6f:ca:4b:
                    5a:84:fe:d4:be:19:93:32:1f:3b:ed:b4:69:51:05:
                    01:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:68:58:43:B6:88:1B:B1:04:5B:1E:37:8F:1D:6B:79:10:80:96:95
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/a013b5-732a-4642-8ae6-2e2250fd5565/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/a013b5-732a-4642-8ae6-2e2250fd5565/1/bGhYQ7aIG7EEWx43jx1reRCAlpU.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  212334

    Signature Algorithm: sha256WithRSAEncryption
         48:4c:21:07:3d:0a:b4:2d:cf:d8:1f:73:6e:ad:27:5b:af:2b:
         58:5b:c5:21:8b:c5:8a:13:41:44:08:57:53:12:9a:ed:6e:6a:
         b7:73:df:95:6b:cc:b4:37:d6:64:fd:98:34:e1:37:9e:81:7e:
         88:5e:43:34:b5:14:38:ea:4d:ea:ad:21:68:e6:ac:64:b1:3f:
         6f:0c:e8:f7:e1:34:00:17:d7:f4:96:9d:5d:a3:58:00:41:32:
         0e:f8:d0:9c:db:f6:42:d3:70:c8:f5:28:71:76:8c:86:c1:81:
         34:5b:3b:50:c8:64:d4:39:51:de:3f:0f:1a:d2:f0:2a:e8:14:
         be:30:38:1f:75:52:c2:f5:f8:0a:2b:b1:77:c1:e6:33:60:2a:
         c8:40:1c:9b:c9:d6:2a:6a:4b:12:b9:47:65:b8:5c:eb:06:aa:
         3f:9c:db:fa:ab:9a:2a:42:c4:fd:41:1b:cc:59:93:01:76:66:
         b4:e3:fa:7b:0e:22:f0:42:af:68:f9:ac:0b:77:ed:36:a0:84:
         fd:34:b8:ec:02:69:f5:3f:dd:57:7f:a2:10:96:2b:d2:9d:50:
         b3:a4:3a:05:8a:51:81:93:f1:7d:c0:a5:d9:0b:32:27:13:fc:
         ec:b1:e1:d0:d7:8a:7f:13:2a:18:f8:ab:b3:5f:98:9c:73:01:
         83:e9:04:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----