Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dP3b8FkTxOvDDub-pMAPPVU7nyQ.cer
File:                     dP3b8FkTxOvDDub-pMAPPVU7nyQ.cer (raw, json)
Hash identifier:          ZMNkTOkb0PGn3laZaPctrRkyc94DDRafJtayilsElGU=
Subject key identifier:   74:FD:DB:F0:59:13:C4:EB:C3:0E:E6:FE:A4:C0:0F:3D:55:3B:9F:24
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018A274F07DEE664AA812DAB2531417172DB
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/b2/a0cd74-260c-4342-8805-1f36260ca430/1/dP3b8FkTxOvDDub-pMAPPVU7nyQ.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/b2/a0cd74-260c-4342-8805-1f36260ca430/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 24 Aug 2023 11:30:05 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    AS: 216411

Validation:               Failed, certificate revoked on Thu 24 Aug 2023 16:55:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:27:4f:07:de:e6:64:aa:81:2d:ab:25:31:41:71:72:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Aug 24 11:30:05 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=74fddbf05913c4ebc30ee6fea4c00f3d553b9f24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:ab:46:bb:69:52:a8:cc:3e:c8:ff:95:c7:6b:
                    cb:d2:9b:38:86:b0:77:76:b1:d7:1b:8b:92:68:34:
                    e1:f2:c4:3b:7e:a6:eb:14:72:f3:ce:4d:9e:c6:30:
                    22:78:06:eb:25:eb:22:45:fe:63:67:61:5a:a2:98:
                    57:a7:12:89:77:02:d2:00:c9:ba:9b:ac:84:93:f7:
                    f2:b4:15:b9:8f:fb:04:91:40:aa:0a:65:9d:51:a5:
                    82:64:ff:ae:40:e1:f9:33:37:7a:91:e8:37:0b:b5:
                    0b:57:e1:33:a5:bc:19:f2:5f:8a:dd:05:a4:88:f8:
                    6e:62:fb:ca:92:92:7b:f5:4f:81:66:ab:b2:8b:b0:
                    e7:23:8c:ea:29:c9:ac:c0:c2:b8:a0:17:8d:4a:a7:
                    55:6b:93:5c:80:c7:e8:88:f8:26:2e:10:35:67:63:
                    3f:35:8d:e4:40:1a:ac:27:ea:c4:91:30:55:fb:11:
                    ad:b1:4d:b1:85:46:1d:49:12:33:e7:d4:00:e5:64:
                    0a:f1:8e:e4:1a:62:cb:0f:1b:ae:80:ca:75:68:2e:
                    d6:68:8b:fb:7f:5e:08:34:ec:d5:82:9b:db:dc:1f:
                    f4:6c:e3:c4:5d:51:c8:7c:90:4d:d4:42:dc:69:e9:
                    3c:b5:59:80:15:2b:23:4f:53:bf:ea:35:f1:07:cd:
                    4c:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:FD:DB:F0:59:13:C4:EB:C3:0E:E6:FE:A4:C0:0F:3D:55:3B:9F:24
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/a0cd74-260c-4342-8805-1f36260ca430/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/a0cd74-260c-4342-8805-1f36260ca430/1/dP3b8FkTxOvDDub-pMAPPVU7nyQ.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  216411

    Signature Algorithm: sha256WithRSAEncryption
         65:2c:e4:ed:f0:35:e1:26:89:2e:1d:b1:26:9b:0e:3e:52:2c:
         d0:bc:c6:44:4c:49:93:3c:bb:ed:f0:b8:0f:d5:b7:e6:b0:07:
         90:b7:f7:2c:de:e2:54:37:42:d7:9c:51:5f:46:31:8f:1e:12:
         d0:9b:37:17:8a:c8:fe:db:23:c2:13:06:22:5a:90:32:23:98:
         5a:d4:9e:50:10:a0:a4:27:7b:8f:ec:64:bb:5d:37:86:15:6e:
         ab:7c:c8:6c:77:d5:97:ee:8c:96:81:2b:dc:77:ed:07:c5:a1:
         9e:30:9d:30:bf:9e:f3:16:8e:96:95:fd:c6:4c:8f:cd:b9:27:
         82:c6:1f:3b:3b:1f:27:7d:cc:fc:d3:05:27:38:bc:70:40:1f:
         a4:08:80:17:38:5c:33:36:ff:6f:76:0d:ec:36:14:11:cd:33:
         8d:f6:ad:fb:43:3b:36:88:21:29:1f:70:6c:3a:68:9a:95:b6:
         dd:c6:12:f0:cb:9b:09:5f:7f:1d:62:7c:47:3b:bd:7c:a5:0d:
         05:37:25:a3:e9:ee:82:56:5c:27:83:41:ad:ec:59:31:b8:95:
         0b:81:af:d7:fc:e8:bf:b0:a7:7a:ab:70:b7:34:c3:8f:51:4b:
         07:f1:b8:f9:e9:1e:67:4e:bc:09:46:4e:c7:0f:12:51:ad:c9:
         aa:79:fe:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----