Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bYNhz6ErMnLKKjGvvwTIID7GI3k.cer
File:                     bYNhz6ErMnLKKjGvvwTIID7GI3k.cer (raw, json)
Hash identifier:          xaJzj6H3Bp4bDSADdwv4puCKV7r8bI1RpWflGaoPdxc=
Subject key identifier:   6D:83:61:CF:A1:2B:32:72:CA:2A:31:AF:BF:04:C8:20:3E:C6:23:79
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01931BF59C5C4458697D4EC91E6DE9C7F9AE
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/e4/a797d2-eaac-4b31-b0ac-da577e5f3031/1/bYNhz6ErMnLKKjGvvwTIID7GI3k.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/e4/a797d2-eaac-4b31-b0ac-da577e5f3031/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 11 Nov 2024 16:01:41 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    AS: 213885

Validation:               Failed, certificate revoked on Mon 25 Nov 2024 10:41:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:1b:f5:9c:5c:44:58:69:7d:4e:c9:1e:6d:e9:c7:f9:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Nov 11 16:01:41 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=6d8361cfa12b3272ca2a31afbf04c8203ec62379
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:91:5d:9a:80:4f:af:ac:e3:c3:14:21:3f:79:
                    94:32:ca:07:90:fb:9e:b4:59:73:cd:89:42:6e:1d:
                    b2:b7:91:af:a6:c6:ad:31:3c:e7:4c:b8:4a:56:12:
                    0c:22:cd:43:82:ec:49:5c:45:bc:73:9f:33:c0:eb:
                    ba:f8:0a:ff:ff:1a:8f:2a:3b:68:85:76:8e:04:2e:
                    a4:06:f0:81:d1:23:bc:88:4e:55:82:75:43:cc:f4:
                    12:40:21:50:fc:7b:66:fe:fe:90:9a:d9:7d:fa:9b:
                    58:bc:9f:c7:29:f0:4b:a2:cc:0b:a3:c9:a4:86:1e:
                    44:37:a5:80:d9:52:77:84:c2:37:06:47:26:d7:60:
                    78:5c:4f:5a:cc:72:cc:2f:98:78:7c:bd:f7:16:d3:
                    8a:ea:79:9b:0c:d3:9a:bf:38:c3:b2:ef:b3:7e:4f:
                    b8:9d:ce:80:86:f1:da:69:a9:c5:d6:f4:c4:88:a4:
                    0a:58:40:64:92:9a:b1:54:77:fd:a9:7a:f7:41:73:
                    9c:e7:1e:92:58:4c:6d:13:03:74:e1:d2:46:7b:a1:
                    f7:84:ee:ca:9f:ca:85:d7:02:70:f1:2c:54:cf:ae:
                    8a:25:55:32:1c:39:54:70:59:3c:60:f2:96:76:39:
                    11:b0:04:71:09:9e:01:45:53:19:14:fd:32:22:92:
                    fe:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:83:61:CF:A1:2B:32:72:CA:2A:31:AF:BF:04:C8:20:3E:C6:23:79
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a797d2-eaac-4b31-b0ac-da577e5f3031/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a797d2-eaac-4b31-b0ac-da577e5f3031/1/bYNhz6ErMnLKKjGvvwTIID7GI3k.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  213885

    Signature Algorithm: sha256WithRSAEncryption
         66:0c:7c:5e:e7:70:1e:67:aa:b9:3b:fa:4f:d3:3a:78:8d:7f:
         f2:32:e3:f0:b0:a8:da:02:4e:63:62:34:a9:a9:1a:4c:c0:c1:
         b3:6c:7c:dd:67:9b:49:ad:58:23:13:30:da:84:85:8e:dc:70:
         5c:4c:29:bb:34:16:83:02:08:f9:ec:32:75:29:b2:d8:e0:ae:
         f9:08:1d:ef:c7:d3:af:22:f2:47:7c:4f:a3:55:d7:8a:34:9e:
         3a:e3:5f:4b:7d:f7:07:7e:d0:39:e8:9f:d9:0f:59:88:90:a1:
         99:40:b6:e3:41:ba:44:b5:89:7b:f3:d8:84:71:2f:61:3d:4c:
         15:be:d9:c9:4a:90:25:18:45:68:e2:2f:82:b5:7d:1e:cf:67:
         33:cf:8a:f4:d0:fb:91:2f:0f:38:f2:93:c0:ed:72:0f:ee:85:
         b6:0b:ae:a5:12:d9:a4:7c:7e:31:34:ea:b7:dc:30:3c:c5:12:
         ec:fb:dc:c7:fc:ce:77:04:f2:27:15:ce:95:86:94:61:9f:8d:
         4e:02:01:4d:38:df:f0:3f:73:b8:8e:87:31:50:cd:dc:8a:08:
         1c:be:54:d6:26:78:23:3a:11:60:44:dd:e0:c2:55:c1:53:93:
         8a:01:69:0b:db:e8:a9:74:6a:10:17:1e:76:3d:a2:31:ec:ac:
         d8:d9:12:8a
-----BEGIN CERTIFICATE-----
MIIFczCCBFugAwIBAgISAZMb9ZxcRFhpfU7JHm3px/muMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQxMTExMTYwMTQxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZDgzNjFjZmExMmIzMjcyY2EyYTMxYWZiZjA0YzgyMDNlYzYyMzc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2ZFdmoBPr6zjwxQhP3mUMsoHkPue
tFlzzYlCbh2yt5GvpsatMTznTLhKVhIMIs1DguxJXEW8c58zwOu6+Ar//xqPKjto
hXaOBC6kBvCB0SO8iE5VgnVDzPQSQCFQ/Htm/v6Qmtl9+ptYvJ/HKfBLoswLo8mk
hh5EN6WA2VJ3hMI3Bkcm12B4XE9azHLML5h4fL33FtOK6nmbDNOavzjDsu+zfk+4
nc6AhvHaaanF1vTEiKQKWEBkkpqxVHf9qXr3QXOc5x6SWExtEwN04dJGe6H3hO7K
n8qF1wJw8SxUz66KJVUyHDlUcFk8YPKWdjkRsARxCZ4BRVMZFP0yIpL+owIDAQAB
o4ICfzCCAnswHQYDVR0OBBYEFG2DYc+hKzJyyioxr78EyCA+xiN5MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2U0L2E3OTdk
Mi1lYWFjLTRiMzEtYjBhYy1kYTU3N2U1ZjMwMzEvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTQvYTc5N2Qy
LWVhYWMtNGIzMS1iMGFjLWRhNTc3ZTVmMzAzMS8xL2JZTmh6NkVyTW5MS0tqR3Z2
d1RJSUQ3R0kzay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwNDfTANBgkqhkiG9w0BAQsFAAOCAQEAZgx8XudwHmeq
uTv6T9M6eI1/8jLj8LCo2gJOY2I0qakaTMDBs2x83WebSa1YIxMw2oSFjtxwXEwp
uzQWgwII+ewydSmy2OCu+Qgd78fTryLyR3xPo1XXijSeOuNfS333B37QOeif2Q9Z
iJChmUC240G6RLWJe/PYhHEvYT1MFb7ZyUqQJRhFaOIvgrV9Hs9nM8+K9ND7kS8P
OPKTwO1yD+6FtguupRLZpHx+MTTqt9wwPMUS7Pvcx/zOdwTyJxXOlYaUYZ+NTgIB
TTjf8D9zuI6HMVDN3IoIHL5U1iZ4IzoRYETd4MJVwVOTigFpC9voqXRqEBcedj2i
Meys2NkSig==
-----END CERTIFICATE-----