Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dpQzKHmwFOBArExm6CXuLWuEQzA.cer
File:                     dpQzKHmwFOBArExm6CXuLWuEQzA.cer (raw, json)
Hash identifier:          PJ1rNV/sjY9KRJnTJWlD/wsT0N0FV4vo1GgMOyNdExw=
Subject key identifier:   76:94:33:28:79:B0:14:E0:40:AC:4C:66:E8:25:EE:2D:6B:84:43:30
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018CC2DAD090F9B51A18BFA609BE3989358F
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/87/96c836-9cac-4fc8-b138-91ad9dfb67f8/1/dpQzKHmwFOBArExm6CXuLWuEQzA.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/87/96c836-9cac-4fc8-b138-91ad9dfb67f8/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 02:29:29 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    AS: 204675
                          IP: 2001:678:5dc::/48

Validation:               Failed, certificate revoked on Wed 27 Mar 2024 10:24:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c2:da:d0:90:f9:b5:1a:18:bf:a6:09:be:39:89:35:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 02:29:29 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=7694332879b014e040ac4c66e825ee2d6b844330
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:a8:a8:4d:ab:21:0a:df:8c:72:06:91:bb:d6:
                    19:bd:a7:84:3b:96:ff:c4:83:c6:ba:49:41:83:6f:
                    0f:a2:a6:48:f6:c2:65:c0:8f:26:3c:d4:3e:fa:6b:
                    39:df:8d:16:51:3f:81:b6:54:5d:e1:38:55:9b:97:
                    4a:90:2e:46:7c:41:83:ad:b1:c2:1c:6d:8a:a4:6c:
                    4e:53:7d:e2:53:87:0e:d5:11:5b:7b:fa:09:0b:5c:
                    9b:8d:bf:e0:29:68:ef:e7:4c:49:8f:80:da:8b:15:
                    19:9a:2e:71:da:22:a3:ed:a7:65:c1:73:1a:b6:a3:
                    30:07:df:bd:4a:ac:70:10:9a:49:1a:ea:cd:19:b7:
                    c8:8e:aa:a6:41:ec:3c:fb:34:c1:17:06:bc:5d:a5:
                    32:02:ac:1c:59:3a:6c:2c:94:95:b0:09:1e:47:25:
                    1a:f8:e7:f5:f8:d1:eb:14:5a:8d:77:a6:1d:b8:f0:
                    d3:d2:ea:a2:da:03:cd:5c:ba:59:7e:7a:aa:71:f5:
                    03:12:33:b9:7b:56:63:50:d7:2f:35:90:a9:47:b1:
                    23:51:a7:75:21:56:ed:8c:2a:37:e8:a9:6e:37:f3:
                    cc:d0:30:58:ab:0b:88:37:6a:d1:c8:f1:c3:4f:73:
                    fa:8c:ac:4d:9d:23:73:de:14:a7:ae:dc:e3:7e:b4:
                    50:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:94:33:28:79:B0:14:E0:40:AC:4C:66:E8:25:EE:2D:6B:84:43:30
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/96c836-9cac-4fc8-b138-91ad9dfb67f8/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/96c836-9cac-4fc8-b138-91ad9dfb67f8/1/dpQzKHmwFOBArExm6CXuLWuEQzA.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:678:5dc::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  204675

    Signature Algorithm: sha256WithRSAEncryption
         27:c1:37:fe:64:bd:2f:ad:cc:d2:c9:8f:db:19:a7:8e:82:9b:
         a0:bd:fd:0d:44:a7:13:cc:6e:28:3f:0d:74:87:bc:ba:7a:b3:
         aa:58:a5:4a:c5:ab:a7:f2:f8:b7:b8:15:e2:28:c2:75:f4:8f:
         f7:38:92:a4:24:76:2c:ff:03:3b:8b:2a:e1:7a:c6:06:e4:50:
         eb:2e:65:ef:48:00:2f:b8:ef:2f:1f:fa:11:15:91:e4:35:a8:
         25:44:42:27:8d:28:93:76:7a:ce:d7:f3:d6:2b:d1:5b:4d:02:
         4a:e7:cc:9c:84:a9:f3:e6:7f:73:27:a5:d7:11:b1:a3:ea:cd:
         e5:6d:5d:34:5c:94:d9:d2:36:1f:d4:60:ed:14:76:61:e3:3c:
         2d:7a:10:41:65:2f:75:70:ca:68:97:99:b4:99:f3:69:4c:b1:
         69:82:89:10:92:56:83:69:77:30:58:ee:c5:b5:17:5a:fc:f2:
         53:7b:79:c4:98:6a:2a:07:f3:f6:af:75:c4:28:b8:b0:f2:69:
         0f:b9:69:71:3d:ed:8a:bd:6b:a0:73:14:b3:11:01:ec:53:53:
         a8:cb:b9:c4:c0:35:11:43:8a:74:3a:f1:83:24:6f:ac:20:b3:
         b1:66:b4:ce:8b:81:3c:7b:ea:d0:16:c3:fa:7b:55:37:4c:e4:
         23:8e:a0:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----