Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/gTq9KOUcnEKegfgR2UrQImApdGY.cer
File:                     gTq9KOUcnEKegfgR2UrQImApdGY.cer (raw, json)
Hash identifier:          R7dNZfFFIVNhqPC5MvbSwR+Ab5gqy/BanSaVleFGaJE=
Subject key identifier:   81:3A:BD:28:E5:1C:9C:42:9E:81:F8:11:D9:4A:D0:22:60:29:74:66
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018CC348A05E53014A84C87B9531F621EBE2
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/b8/fd0c88-2e1b-4810-95ba-7bbf53314e80/1/gTq9KOUcnEKegfgR2UrQImApdGY.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/b8/fd0c88-2e1b-4810-95ba-7bbf53314e80/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 04:29:25 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    AS: 203758

Validation:               Failed, certificate revoked on Mon 15 Jan 2024 08:35:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c3:48:a0:5e:53:01:4a:84:c8:7b:95:31:f6:21:eb:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 04:29:25 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=813abd28e51c9c429e81f811d94ad02260297466
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:51:18:b0:31:65:55:52:c2:16:3f:51:ec:f8:
                    bf:2d:10:d6:e2:54:1f:2f:ba:e2:73:26:a7:38:cf:
                    ee:e0:2a:be:79:ba:b4:7f:22:38:0e:a4:93:fe:1b:
                    e8:d9:61:d5:16:cd:2b:dc:51:a2:57:ef:bd:57:90:
                    89:fa:59:6b:fa:6f:fa:a7:b2:9c:5e:58:50:6b:0f:
                    22:86:e6:9c:4f:c7:95:c3:04:82:5d:fc:87:64:2a:
                    be:12:cc:9d:5d:67:86:e8:fb:ea:62:e3:1c:88:a5:
                    a3:a5:f5:3e:ff:3b:f1:34:16:e8:b8:5d:02:42:55:
                    50:28:ce:01:d4:e5:01:52:a6:e8:df:3b:fe:60:26:
                    0b:89:e3:df:02:32:49:57:c5:e5:d8:9b:42:01:d8:
                    cd:c3:23:72:dc:89:cc:11:e0:6d:7b:80:6c:68:d7:
                    51:c7:4d:59:20:55:f7:82:b8:a2:ca:dc:13:e6:4a:
                    f2:8f:1d:88:e9:b8:1e:83:aa:37:85:b3:c4:e5:23:
                    46:b7:82:3c:c8:3f:4a:27:53:54:44:2c:34:c5:64:
                    de:e4:8b:b7:20:b8:db:df:45:c8:e6:a0:bf:77:06:
                    c8:6c:b6:48:99:60:1a:5a:27:19:a9:23:88:01:d4:
                    ed:b6:5c:87:bf:e1:01:88:91:10:ec:fa:b6:6c:57:
                    30:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:3A:BD:28:E5:1C:9C:42:9E:81:F8:11:D9:4A:D0:22:60:29:74:66
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/fd0c88-2e1b-4810-95ba-7bbf53314e80/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/fd0c88-2e1b-4810-95ba-7bbf53314e80/1/gTq9KOUcnEKegfgR2UrQImApdGY.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  203758

    Signature Algorithm: sha256WithRSAEncryption
         ad:11:cc:6d:28:8f:88:89:74:12:98:d8:76:91:0b:75:90:94:
         33:bd:a0:99:4b:56:5c:c6:3e:cc:c0:14:96:34:c1:43:6f:3e:
         02:c4:76:fd:b5:06:94:d8:47:c0:2b:d6:af:9d:24:7f:7e:77:
         c9:58:bd:66:78:09:d0:68:4f:57:a5:c1:8e:5a:2b:72:ac:2f:
         58:6d:45:b0:25:5d:2c:f7:fc:26:60:31:33:fd:c5:3c:8c:8f:
         53:99:78:38:31:36:b7:c9:3c:49:a1:08:50:e5:31:0b:61:10:
         7b:84:6b:78:01:7f:89:a6:4f:3d:89:86:2f:00:02:99:5d:99:
         8e:0e:9d:4f:99:70:8c:23:54:1a:ff:f7:4b:2e:ee:b3:6e:40:
         0c:6f:44:3a:cf:f0:f0:e9:b5:0a:d3:b7:64:c8:86:6e:da:d2:
         1b:1c:33:ba:fb:7d:31:74:d1:7b:63:2c:ee:f5:90:59:68:46:
         6d:0f:c4:96:a6:70:ce:41:f2:dd:c8:31:6c:aa:6f:cc:6b:bb:
         47:b3:0d:e4:76:e4:a2:5c:e7:4b:5f:60:e6:79:fb:52:94:d7:
         66:ab:6c:fe:a0:93:a4:03:8b:ad:11:1b:22:2d:51:e5:b0:b2:
         36:a7:6b:39:78:05:a4:1f:92:b4:9a:ac:ce:cf:3b:b4:75:d7:
         bd:b1:fc:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----