Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fWiskaKvtL6dcPy3KW88o95FOdw.cer
File:                     fWiskaKvtL6dcPy3KW88o95FOdw.cer (raw, json)
Hash identifier:          mu3bCxV3J/ES/u833wfQ7YWX9+Ex2ERVxsYPb+R1t40=
Subject key identifier:   7D:68:AC:91:A2:AF:B4:BE:9D:70:FC:B7:29:6F:3C:A3:DE:45:39:DC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0186EB94F2C84B5B527735EF11B9636E8191
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/10/753688-5e83-41b2-8063-1b1df41f1478/1/fWiskaKvtL6dcPy3KW88o95FOdw.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/10/753688-5e83-41b2-8063-1b1df41f1478/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 16 Mar 2023 18:00:52 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    AS: 199847

Validation:               Failed, certificate revoked on Wed 22 Mar 2023 07:09:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:eb:94:f2:c8:4b:5b:52:77:35:ef:11:b9:63:6e:81:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Mar 16 18:00:52 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=7d68ac91a2afb4be9d70fcb7296f3ca3de4539dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:2b:12:69:ad:13:8e:07:fb:25:f8:f9:cf:c5:
                    0a:43:0a:da:3e:f8:5f:9d:b6:d8:a7:90:47:92:12:
                    ee:0b:d7:e4:02:39:68:f6:91:8f:2a:a1:17:f9:2f:
                    79:5e:90:3e:cf:16:52:57:73:90:f5:3c:21:97:70:
                    a1:1b:d4:53:a4:7e:29:7d:22:b8:ab:b8:f9:16:9e:
                    04:b9:ea:3b:b6:08:e0:33:0b:d8:2f:fe:d5:3e:ed:
                    84:a5:29:04:29:5e:7e:f6:07:97:ad:e1:d6:85:e7:
                    9d:0c:2c:0f:96:6e:3b:f7:b7:1c:50:9c:10:1d:e5:
                    fb:8e:e2:ed:89:98:9a:c9:fa:8c:eb:08:42:71:6f:
                    01:8d:14:06:a9:c3:40:4a:02:d1:5d:56:20:a1:89:
                    83:28:87:07:4e:6f:c6:90:a0:87:72:08:2c:8d:77:
                    45:bc:2d:db:0e:94:2d:ea:2e:f3:a1:2c:64:d5:bd:
                    38:bb:f9:8f:5d:6f:07:01:f4:7b:94:f5:a1:60:fe:
                    7f:8f:88:75:5d:fa:3d:c4:d6:c6:96:3f:22:7a:95:
                    62:a6:91:83:62:95:df:c4:ec:32:5e:65:fb:a0:d8:
                    9b:83:4e:7f:6e:c6:e7:eb:2c:88:de:b1:60:02:12:
                    a0:9f:4e:4d:96:29:ac:bd:3c:cc:39:c7:dd:29:43:
                    99:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:68:AC:91:A2:AF:B4:BE:9D:70:FC:B7:29:6F:3C:A3:DE:45:39:DC
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/753688-5e83-41b2-8063-1b1df41f1478/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/753688-5e83-41b2-8063-1b1df41f1478/1/fWiskaKvtL6dcPy3KW88o95FOdw.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  199847

    Signature Algorithm: sha256WithRSAEncryption
         47:37:0e:37:a7:0d:9d:50:cf:c4:27:35:ba:0d:07:a9:6f:76:
         07:d1:17:44:1a:26:fb:39:8d:d6:2f:7f:3e:41:76:c7:b0:05:
         bc:d5:45:73:17:99:41:f3:71:27:c5:d6:55:ff:4c:f4:05:8f:
         3a:a6:01:b3:c6:55:53:a8:24:c0:75:23:cd:e6:e2:37:cd:f9:
         ee:56:b7:d6:9c:4f:d0:11:5c:02:ac:49:77:04:8d:f9:36:a5:
         70:6a:e7:68:de:a4:29:63:65:e2:96:e9:9e:a0:87:dc:60:b2:
         6d:9b:93:4d:f4:41:02:6f:50:ac:2e:c5:65:fb:7d:4f:dd:6a:
         f0:bf:24:90:0d:47:34:d1:2f:cc:39:49:56:34:8c:64:73:b4:
         2e:1e:a6:41:50:12:87:d6:e9:c8:92:1a:61:e8:93:e3:e1:7f:
         26:b5:3b:da:7c:5d:2d:76:96:66:71:7b:af:c4:95:d2:0f:db:
         48:a8:be:34:65:21:40:5f:7e:a3:bf:0d:17:04:cf:a2:b2:ca:
         39:e0:81:5d:02:c9:86:c9:58:0d:81:a4:c2:f9:5f:47:03:df:
         48:d8:59:71:45:56:4f:ae:83:f1:f9:50:56:a5:c2:d4:ad:2a:
         78:8f:33:66:80:12:d5:5c:14:31:3b:55:f0:b1:67:31:5f:6f:
         c6:cf:a2:8c
-----BEGIN CERTIFICATE-----
MIIFczCCBFugAwIBAgISAYbrlPLIS1tSdzXvEbljboGRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjMwMzE2MTgwMDUyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZDY4YWM5MWEyYWZiNGJlOWQ3MGZjYjcyOTZmM2NhM2RlNDUzOWRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwCsSaa0Tjgf7Jfj5z8UKQwraPvhf
nbbYp5BHkhLuC9fkAjlo9pGPKqEX+S95XpA+zxZSV3OQ9Twhl3ChG9RTpH4pfSK4
q7j5Fp4Eueo7tgjgMwvYL/7VPu2EpSkEKV5+9geXreHWheedDCwPlm4797ccUJwQ
HeX7juLtiZiayfqM6whCcW8BjRQGqcNASgLRXVYgoYmDKIcHTm/GkKCHcggsjXdF
vC3bDpQt6i7zoSxk1b04u/mPXW8HAfR7lPWhYP5/j4h1Xfo9xNbGlj8iepVippGD
YpXfxOwyXmX7oNibg05/bsbn6yyI3rFgAhKgn05NlimsvTzMOcfdKUOZaQIDAQAB
o4ICfzCCAnswHQYDVR0OBBYEFH1orJGir7S+nXD8tylvPKPeRTncMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzEwLzc1MzY4
OC01ZTgzLTQxYjItODA2My0xYjFkZjQxZjE0NzgvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTAvNzUzNjg4
LTVlODMtNDFiMi04MDYzLTFiMWRmNDFmMTQ3OC8xL2ZXaXNrYUt2dEw2ZGNQeTNL
Vzg4bzk1Rk9kdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwMMpzANBgkqhkiG9w0BAQsFAAOCAQEARzcON6cNnVDP
xCc1ug0HqW92B9EXRBom+zmN1i9/PkF2x7AFvNVFcxeZQfNxJ8XWVf9M9AWPOqYB
s8ZVU6gkwHUjzebiN8357la31pxP0BFcAqxJdwSN+TalcGrnaN6kKWNl4pbpnqCH
3GCybZuTTfRBAm9QrC7FZft9T91q8L8kkA1HNNEvzDlJVjSMZHO0Lh6mQVASh9bp
yJIaYeiT4+F/JrU72nxdLXaWZnF7r8SV0g/bSKi+NGUhQF9+o78NFwTPorLKOeCB
XQLJhslYDYGkwvlfRwPfSNhZcUVWT66D8flQVqXC1K0qeI8zZoAS1VwUMTtV8LFn
MV9vxs+ijA==
-----END CERTIFICATE-----