Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/hC_5QcAmViLaq0E1JQlLowjhJdk.cer
File:                     hC_5QcAmViLaq0E1JQlLowjhJdk.cer (raw, json)
Hash identifier:          l2DIj3Xks4+0j0GUfkhoZjRIVZZ45c1EkAiKjU5JDSU=
Subject key identifier:   84:2F:F9:41:C0:26:56:22:DA:AB:41:35:25:09:4B:A3:08:E1:25:D9
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0185E4CC931DD8422897158B78CA3E0669ED
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/f1/c01e94-400b-4299-b096-b827340228ea/1/hC_5QcAmViLaq0E1JQlLowjhJdk.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/f1/c01e94-400b-4299-b096-b827340228ea/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Tue 24 Jan 2023 17:21:30 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    AS: 41732
                          AS: 211940

Validation:               Failed, certificate revoked on Fri 27 Jan 2023 19:34:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:e4:cc:93:1d:d8:42:28:97:15:8b:78:ca:3e:06:69:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan 24 17:21:30 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=842ff941c0265622daab413525094ba308e125d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:a5:b6:d9:1c:41:6f:dd:99:8b:95:48:ef:33:
                    23:a6:ae:17:31:21:9e:4d:bb:9d:c3:1e:ab:ec:a0:
                    ea:93:b1:88:72:bd:76:08:5c:4f:84:11:2e:ce:9f:
                    e2:03:dd:54:4d:9e:8d:4e:f2:4f:97:a7:d2:1f:26:
                    76:ad:e7:20:26:4e:f4:11:ac:df:42:ea:4e:08:58:
                    4d:ae:f6:dc:3e:5f:48:98:66:d9:8c:81:00:f2:a0:
                    c6:51:d2:a4:dd:c5:e4:1a:5f:ba:d7:cf:b8:69:70:
                    b5:6d:50:fe:4c:6a:e0:9a:ba:31:ba:f1:33:03:1f:
                    fa:fb:ae:80:8e:29:2e:39:ec:53:2e:4d:ec:44:d2:
                    43:fc:d3:69:1f:25:c2:47:d4:94:fb:c9:fa:06:64:
                    4b:22:b4:98:45:ea:1e:f3:e0:ac:25:87:b4:1a:6e:
                    28:7a:97:ee:bc:92:95:ad:9d:d0:cd:37:54:be:97:
                    78:38:da:13:4b:5b:1a:0f:9d:56:f8:27:da:ce:a6:
                    64:52:9e:80:6e:91:66:b8:ed:5a:3b:f6:66:71:e7:
                    52:b7:17:7e:c1:35:9d:0b:17:51:b4:0a:67:33:73:
                    19:ed:fa:e7:7f:32:f9:7f:50:9c:21:90:aa:4b:01:
                    6a:71:89:3e:ac:81:12:96:01:66:31:9e:67:7c:a4:
                    63:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:2F:F9:41:C0:26:56:22:DA:AB:41:35:25:09:4B:A3:08:E1:25:D9
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/c01e94-400b-4299-b096-b827340228ea/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/c01e94-400b-4299-b096-b827340228ea/1/hC_5QcAmViLaq0E1JQlLowjhJdk.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  41732
                  211940

    Signature Algorithm: sha256WithRSAEncryption
         90:e5:b6:29:9e:3c:81:e2:9e:f8:79:77:0c:a4:5f:0f:3a:fd:
         f4:d8:9b:a7:b0:ca:07:da:29:1e:ef:dc:4e:b5:1a:a7:20:d5:
         92:50:0c:67:0b:46:fd:18:0e:d5:fd:da:e9:02:13:59:2f:23:
         92:3c:89:5c:4e:ef:14:d5:0b:c4:2c:a4:59:de:66:09:dc:e6:
         06:33:90:c2:e9:5b:19:4f:c0:0e:58:12:39:c1:db:cf:64:fa:
         2d:00:50:e0:35:c2:5b:e7:d1:13:1a:b3:a8:2a:69:8d:52:8f:
         40:85:4c:48:39:d0:64:12:c4:89:23:e0:3a:f8:2a:6e:3b:50:
         8c:32:ac:81:50:07:19:d1:d3:b4:8b:4a:a0:91:92:5a:7c:6b:
         a3:e2:88:af:aa:d2:12:d2:84:81:ff:ec:d3:8a:1a:27:25:a8:
         5f:31:61:a4:22:1f:70:1f:6f:cf:96:ac:f6:1a:b2:7b:47:12:
         fe:f3:35:b3:1b:67:75:7e:19:19:89:08:7d:88:49:0d:48:5a:
         9c:2f:d2:ed:ba:b2:48:c9:a0:d3:ee:84:39:bf:dc:39:b5:84:
         07:8e:d5:6a:b2:fe:aa:f6:d1:e4:95:1e:01:01:a4:80:c5:93:
         c0:f3:89:e5:2a:cd:e8:65:08:a7:c3:4c:75:ce:c8:90:5d:ab:
         2a:e4:f2:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----