Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fLm6DGX6cx62X7zhJlEg90W6vGU.cer
File:                     fLm6DGX6cx62X7zhJlEg90W6vGU.cer (raw, json)
Hash identifier:          T0iJ/yqbVvUmZlCFvw17/y97yryDCYvNzp4MPW4Zzrg=
Subject key identifier:   7C:B9:BA:0C:65:FA:73:1E:B6:5F:BC:E1:26:51:20:F7:45:BA:BC:65
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018CC94E1C8CD8B9CA2DE2029D667EED1A4F
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/cf/5499c3-6239-44b0-aa74-551625741efe/1/fLm6DGX6cx62X7zhJlEg90W6vGU.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/cf/5499c3-6239-44b0-aa74-551625741efe/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Tue 02 Jan 2024 08:33:08 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    AS: 212599

Validation:               Failed, certificate revoked on Thu 11 Apr 2024 06:43:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c9:4e:1c:8c:d8:b9:ca:2d:e2:02:9d:66:7e:ed:1a:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 08:33:08 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=7cb9ba0c65fa731eb65fbce1265120f745babc65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:42:92:be:e5:9d:08:a9:92:39:4b:3f:26:e8:
                    9b:02:74:58:b3:f0:e1:82:ad:e3:2a:1c:00:d5:16:
                    f4:9f:2c:e0:9f:d3:a5:ee:0b:3b:56:4b:ea:4e:ed:
                    47:4d:13:08:b2:20:a4:20:52:4e:7f:41:b0:4b:3f:
                    3b:7f:b1:ca:95:eb:57:38:e2:9b:5f:ab:2b:cf:0c:
                    93:1b:bd:66:a2:30:01:96:fc:6b:b0:37:f3:d0:ff:
                    fb:09:27:5a:90:dc:4d:c4:9f:87:93:6b:1c:a8:86:
                    2c:b7:21:af:90:7e:c4:c3:e6:0d:00:d8:72:df:40:
                    05:40:7e:b1:8f:38:93:bd:b7:c5:be:af:b7:6b:d3:
                    f1:94:e1:99:9c:9c:af:52:f4:b3:3c:7d:cc:d1:07:
                    cb:d5:9e:bd:6f:b0:dd:e7:dd:23:a5:2d:98:47:a7:
                    9b:2d:78:e1:a2:52:68:27:34:ba:97:ba:e9:10:db:
                    58:0a:24:5a:f3:38:63:7e:e0:84:56:b9:77:9a:bb:
                    fb:35:f9:fe:ec:f3:0f:8d:48:98:ea:68:ad:2d:84:
                    23:78:12:b5:01:33:a5:e6:29:6c:14:30:38:3d:d7:
                    1a:8a:96:31:0a:08:35:ca:a7:6b:d0:e4:f3:1b:d4:
                    d2:3a:08:a0:af:16:ee:c2:23:de:5a:f0:3d:ac:0b:
                    20:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:B9:BA:0C:65:FA:73:1E:B6:5F:BC:E1:26:51:20:F7:45:BA:BC:65
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/5499c3-6239-44b0-aa74-551625741efe/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/5499c3-6239-44b0-aa74-551625741efe/1/fLm6DGX6cx62X7zhJlEg90W6vGU.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  212599

    Signature Algorithm: sha256WithRSAEncryption
         5c:85:19:69:a4:b2:5c:68:ca:bb:9b:74:d4:92:a9:45:d4:f1:
         9f:06:3a:41:06:e3:79:d1:72:95:24:ee:ea:82:63:01:4a:ae:
         d2:7a:27:b6:69:1d:ef:10:fc:93:05:a3:ae:18:f7:4e:19:b2:
         e3:97:09:6c:c8:18:99:9c:42:49:8e:d9:f3:a3:61:e6:e9:41:
         38:cd:e4:61:42:47:8f:50:8a:56:b8:e3:62:ac:71:2f:9c:26:
         57:71:68:a4:5b:07:b2:66:9c:1f:01:9e:9c:0d:d9:37:9c:4b:
         d5:b3:ee:c5:dd:a0:1a:3e:cb:9f:d5:7d:30:09:5c:3d:41:e0:
         f2:ff:26:16:2d:14:52:3e:0b:6c:4f:2d:e8:d3:43:42:bc:b4:
         86:a8:83:27:04:5f:e0:b6:32:bf:c8:fc:5e:fd:f5:59:ba:d3:
         7f:0d:ae:d9:4c:75:86:89:a2:ce:7d:02:aa:4f:f1:ef:21:89:
         e6:c1:5e:a2:46:28:19:3c:f9:49:ad:73:da:95:ee:27:cd:62:
         01:44:96:22:11:fb:ca:22:f8:11:ae:fb:ea:68:b0:51:02:9b:
         8e:cc:5d:b9:36:ef:aa:c8:d5:25:57:74:e9:88:f5:0f:bb:2a:
         24:9c:88:4e:54:96:09:ce:c2:d1:f9:b4:ba:58:3d:7d:5c:3e:
         59:63:bc:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----