Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cqO28qiJ5BjS61Kk8RCGKDzGY1A.cer
File:                     cqO28qiJ5BjS61Kk8RCGKDzGY1A.cer (raw, json)
Hash identifier:          C+xVKgiYvI/MfBCWQWmFRiH7m4BayHPZspCtPipCATk=
Subject key identifier:   72:A3:B6:F2:A8:89:E4:18:D2:EB:52:A4:F1:10:86:28:3C:C6:63:50
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01909A106C5D913D23AA5476866A7B7481C5
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/1e/bdf80b-e152-46b5-b748-e41233731d79/1/cqO28qiJ5BjS61Kk8RCGKDzGY1A.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/1e/bdf80b-e152-46b5-b748-e41233731d79/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 10 Jul 2024 00:34:45 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    AS: 214569

Validation:               Failed, certificate revoked on Mon 15 Jul 2024 14:32:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:9a:10:6c:5d:91:3d:23:aa:54:76:86:6a:7b:74:81:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jul 10 00:34:45 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=72a3b6f2a889e418d2eb52a4f11086283cc66350
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:fd:eb:5b:ce:ba:22:eb:e0:45:09:35:b6:52:
                    06:9b:8e:c9:a8:37:1a:b8:8c:c2:68:ff:ff:03:09:
                    7d:db:47:d2:33:39:7f:12:66:18:0f:dc:77:41:14:
                    a8:bf:7a:d6:d0:43:aa:7f:c3:2d:3b:42:ee:25:bd:
                    5f:ae:27:60:cd:18:5a:2c:68:98:38:ec:39:74:01:
                    c6:36:30:0b:a7:06:43:bf:fa:e6:2e:e4:61:32:5a:
                    3d:51:60:61:f5:64:5c:ed:3a:b4:4b:52:d7:7a:69:
                    b3:2e:b7:37:78:8d:ce:1a:0c:c0:3a:27:4c:1b:e7:
                    4c:41:96:eb:3e:11:4f:1e:6b:6d:5f:6b:93:65:0b:
                    db:cf:d5:4a:95:7b:f9:19:58:68:77:cc:4f:78:0f:
                    c2:c8:b5:9b:b3:3e:f9:29:ba:35:70:df:09:0a:c7:
                    52:9f:99:a2:70:10:fb:b8:b6:ce:03:66:c3:cb:50:
                    21:a0:43:68:b8:65:cc:72:1c:33:06:90:30:ba:46:
                    32:f4:df:38:61:fc:b0:78:13:6e:38:5c:1e:61:a6:
                    75:23:5b:c1:f9:10:c4:34:95:21:d4:ef:1e:b5:d5:
                    73:c7:e7:45:c2:00:7a:fe:46:64:a9:a3:0a:f6:bf:
                    4c:c6:b2:e5:9a:4e:1a:9c:73:2a:ac:d7:81:71:81:
                    d1:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:A3:B6:F2:A8:89:E4:18:D2:EB:52:A4:F1:10:86:28:3C:C6:63:50
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/bdf80b-e152-46b5-b748-e41233731d79/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/bdf80b-e152-46b5-b748-e41233731d79/1/cqO28qiJ5BjS61Kk8RCGKDzGY1A.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  214569

    Signature Algorithm: sha256WithRSAEncryption
         a7:1e:f2:15:35:51:34:23:af:6d:2d:8d:c3:bd:51:1f:51:7e:
         90:56:31:d3:e3:dc:e5:f3:50:19:8e:fb:8a:2c:73:39:c1:b9:
         92:d5:06:0e:42:8e:fb:5a:ee:62:1b:6f:c9:53:75:e8:53:f2:
         2c:84:cc:de:12:5d:70:03:35:30:c8:fe:78:08:ed:0d:91:6d:
         2c:b1:72:dc:7c:29:ae:39:1d:e5:22:06:15:a3:4b:99:a6:19:
         47:de:92:09:c0:96:0e:d0:25:2c:a8:dd:f7:b7:eb:be:bb:7e:
         5b:3a:f8:61:ba:e9:28:99:3a:d4:0c:2a:e9:1b:86:3b:08:90:
         8a:c6:91:66:3f:14:ac:2b:13:66:42:5a:03:18:39:2d:de:00:
         fe:f4:7c:11:1c:72:d6:07:d7:f5:91:0b:20:b4:27:8a:0b:13:
         f9:f5:b6:0b:c4:41:06:3f:09:78:6d:66:43:74:2b:69:a8:17:
         81:f1:ab:63:90:7c:bc:47:6a:ad:ad:e8:6c:8c:6a:87:92:7a:
         e0:47:39:00:30:b9:d6:0c:fb:85:4e:cb:74:ee:54:7a:44:d2:
         90:be:6c:ad:ee:8b:8f:97:a9:42:87:27:74:27:ed:cc:e2:ad:
         82:a4:e5:20:9c:82:7c:b8:f7:2e:b4:47:f1:6a:99:9d:31:7f:
         9b:fc:a2:ce
-----BEGIN CERTIFICATE-----
MIIFczCCBFugAwIBAgISAZCaEGxdkT0jqlR2hmp7dIHFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwNzEwMDAzNDQ1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MmEzYjZmMmE4ODllNDE4ZDJlYjUyYTRmMTEwODYyODNjYzY2MzUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmv3rW866IuvgRQk1tlIGm47JqDca
uIzCaP//Awl920fSMzl/EmYYD9x3QRSov3rW0EOqf8MtO0LuJb1fridgzRhaLGiY
OOw5dAHGNjALpwZDv/rmLuRhMlo9UWBh9WRc7Tq0S1LXemmzLrc3eI3OGgzAOidM
G+dMQZbrPhFPHmttX2uTZQvbz9VKlXv5GVhod8xPeA/CyLWbsz75Kbo1cN8JCsdS
n5micBD7uLbOA2bDy1AhoENouGXMchwzBpAwukYy9N84YfyweBNuOFweYaZ1I1vB
+RDENJUh1O8etdVzx+dFwgB6/kZkqaMK9r9MxrLlmk4anHMqrNeBcYHRpQIDAQAB
o4ICfzCCAnswHQYDVR0OBBYEFHKjtvKoieQY0utSpPEQhig8xmNQMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzFlL2JkZjgw
Yi1lMTUyLTQ2YjUtYjc0OC1lNDEyMzM3MzFkNzkvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMWUvYmRmODBi
LWUxNTItNDZiNS1iNzQ4LWU0MTIzMzczMWQ3OS8xL2NxTzI4cWlKNUJqUzYxS2s4
UkNHS0R6R1kxQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwNGKTANBgkqhkiG9w0BAQsFAAOCAQEApx7yFTVRNCOv
bS2Nw71RH1F+kFYx0+Pc5fNQGY77iixzOcG5ktUGDkKO+1ruYhtvyVN16FPyLITM
3hJdcAM1MMj+eAjtDZFtLLFy3Hwprjkd5SIGFaNLmaYZR96SCcCWDtAlLKjd97fr
vrt+Wzr4YbrpKJk61Awq6RuGOwiQisaRZj8UrCsTZkJaAxg5Ld4A/vR8ERxy1gfX
9ZELILQnigsT+fW2C8RBBj8JeG1mQ3QraagXgfGrY5B8vEdqra3obIxqh5J64Ec5
ADC51gz7hU7LdO5UekTSkL5sre6Lj5epQocndCftzOKtgqTlIJyCfLj3LrRH8WqZ
nTF/m/yizg==
-----END CERTIFICATE-----