Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2aYBiI0kMdsTbLJdwla_KgiELY.cer
File:                     f2aYBiI0kMdsTbLJdwla_KgiELY.cer (raw, json)
Hash identifier:          VsIdkBsIKTwCIXAOrvtDHz9lBWv+Rs8qgf7w9OT1mag=
Subject key identifier:   7F:66:98:06:22:34:90:C7:6C:4D:B2:C9:77:09:5A:FC:A8:22:10:B6
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01904ACBE5ED27C5B3B4C8D7D7116495A45B
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/45/d278e7-3493-49fb-b607-aa822d5c8e22/1/f2aYBiI0kMdsTbLJdwla_KgiELY.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/45/d278e7-3493-49fb-b607-aa822d5c8e22/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 24 Jun 2024 15:09:55 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    AS: 215085

Validation:               Failed, certificate revoked on Mon 02 Sep 2024 08:47:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:4a:cb:e5:ed:27:c5:b3:b4:c8:d7:d7:11:64:95:a4:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jun 24 15:09:55 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=7f669806223490c76c4db2c977095afca82210b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:8c:78:ee:91:b9:dd:45:63:08:2e:bf:93:01:
                    65:fa:1d:c5:4b:6c:71:9e:90:8e:38:47:0d:3d:eb:
                    21:07:fd:94:26:31:b4:9a:48:73:9c:97:e7:e8:aa:
                    88:ad:71:86:a9:64:22:42:f7:86:b8:7c:d9:e7:4d:
                    3a:60:f2:b1:f6:62:74:c9:ff:e2:84:25:6a:75:41:
                    3e:43:67:eb:65:60:f6:58:21:41:c9:89:8d:12:1e:
                    db:14:da:82:30:40:a0:29:6d:22:2c:94:9d:98:93:
                    c7:08:95:61:f7:5b:48:da:c3:86:a0:30:4f:31:ec:
                    1f:6f:87:5e:7e:a1:06:f0:6a:14:42:ed:64:e4:dc:
                    9f:9f:ae:11:c3:df:fb:95:6e:8b:57:6a:2b:b7:06:
                    58:0d:91:7b:23:64:ef:8c:93:bc:be:3e:14:90:09:
                    68:8d:1f:34:58:6d:43:49:93:39:e8:67:11:41:5c:
                    22:b9:4f:d6:34:41:70:59:2e:e9:d9:9c:cf:6b:c2:
                    a7:64:8b:95:86:f6:c3:f5:f2:7d:9e:71:57:78:9a:
                    40:95:8a:4a:71:3a:46:54:f1:49:11:8c:20:46:c4:
                    56:76:24:42:e6:1d:1d:f2:69:3e:87:df:68:e0:53:
                    4c:fb:dd:81:80:2f:95:54:2c:6b:6b:39:b4:57:21:
                    67:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:66:98:06:22:34:90:C7:6C:4D:B2:C9:77:09:5A:FC:A8:22:10:B6
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/d278e7-3493-49fb-b607-aa822d5c8e22/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/d278e7-3493-49fb-b607-aa822d5c8e22/1/f2aYBiI0kMdsTbLJdwla_KgiELY.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  215085

    Signature Algorithm: sha256WithRSAEncryption
         97:0f:7f:93:4d:04:da:ea:8a:f4:c0:1f:f3:eb:e7:50:54:67:
         c2:69:a1:d1:99:84:60:8d:60:43:3b:ed:45:89:f5:94:9a:79:
         46:36:7c:a9:7b:70:0f:87:91:ed:a2:33:62:a2:8f:8d:46:e2:
         ac:ab:a0:98:e4:93:d9:8e:0f:4f:8a:37:74:20:7b:4f:13:79:
         db:5f:86:de:93:10:c6:b1:91:1c:7e:0c:a9:bb:d8:73:22:dd:
         ae:ac:65:ab:99:b7:1d:5b:cb:19:67:cb:33:e0:e2:29:22:d4:
         d6:3b:91:0c:22:00:6a:fb:c9:29:39:5c:f7:40:f2:46:81:68:
         e1:22:2e:4c:7f:ed:b5:1b:12:53:df:99:05:d2:b6:5c:07:57:
         b3:b5:f8:b2:22:07:92:96:07:8f:4b:1a:74:8a:c9:f4:4c:4f:
         7c:ae:1a:72:1d:95:bb:f6:ab:fc:75:12:02:7c:f3:1b:5b:f7:
         0e:e3:f3:9e:a6:bb:df:2a:3f:bc:06:19:55:33:47:b5:91:2f:
         08:94:9b:9e:57:cb:51:fb:d9:fd:cb:90:d0:84:77:ca:73:29:
         fb:ee:74:0c:88:27:8d:18:de:86:3d:79:0b:4f:36:cf:15:07:
         f7:00:38:06:09:ee:2a:27:0c:5d:68:3e:9f:06:0a:1b:64:0f:
         36:cb:fa:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----