Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/iUCMZm-TadtDTormwz2gL7VtScE.cer
File:                     iUCMZm-TadtDTormwz2gL7VtScE.cer (raw, json)
Hash identifier:          Fm+5m4lfBmFOf56BYw6oeonD6beGPMXnQvSo5WfUE5k=
Subject key identifier:   89:40:8C:66:6F:93:69:DB:43:4E:8A:E6:C3:3D:A0:2F:B5:6D:49:C1
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018917450ABCE2655D805375F456A39BA7DE
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/58/e2411e-a243-47e8-8de3-3c2d4a08125c/1/iUCMZm-TadtDTormwz2gL7VtScE.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/58/e2411e-a243-47e8-8de3-3c2d4a08125c/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 02 Jul 2023 15:42:28 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    AS: 204829

Validation:               Failed, certificate revoked on Mon 11 Dec 2023 10:04:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:17:45:0a:bc:e2:65:5d:80:53:75:f4:56:a3:9b:a7:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jul  2 15:42:28 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=89408c666f9369db434e8ae6c33da02fb56d49c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:83:67:ee:25:af:c4:33:9a:20:da:2b:bd:59:
                    63:fd:f8:87:cd:0a:e7:09:3a:c1:25:47:dc:39:1e:
                    8a:93:74:6a:77:51:d1:c1:df:54:14:f4:d7:65:ab:
                    69:44:8e:b6:1d:78:d0:75:28:a6:08:c0:64:8d:3b:
                    eb:69:7d:37:b3:19:31:03:c2:28:4d:ae:15:e3:91:
                    d8:5c:da:52:05:e8:b2:8d:6d:5f:c0:5a:6f:7e:ba:
                    32:26:e4:7f:2a:6c:40:4d:63:e4:0a:18:d7:bd:bf:
                    3c:5c:d0:8c:03:1c:7d:c0:c5:b3:f8:b6:9f:10:d7:
                    d1:de:2c:47:82:aa:43:c0:12:9b:84:cf:33:74:bf:
                    b1:03:9e:65:44:a9:19:10:b3:be:0b:2f:0f:d0:6c:
                    df:71:70:f7:27:1f:af:b6:2f:95:24:ef:ed:a9:f3:
                    65:91:52:45:39:ee:f4:2b:c2:fb:31:9a:4c:7a:6b:
                    10:eb:ea:36:7d:bc:85:8b:16:01:12:9f:cd:41:57:
                    f9:8b:c9:35:fe:d7:f0:23:7c:09:7c:7e:84:5d:ff:
                    9c:ff:1a:29:85:31:0b:49:59:2f:55:02:a2:7d:57:
                    fd:01:10:a4:51:4a:54:f2:c2:c8:46:c5:e4:15:56:
                    55:f7:12:39:26:ff:f4:00:76:3e:df:4b:a8:9b:af:
                    3c:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:40:8C:66:6F:93:69:DB:43:4E:8A:E6:C3:3D:A0:2F:B5:6D:49:C1
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/e2411e-a243-47e8-8de3-3c2d4a08125c/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/e2411e-a243-47e8-8de3-3c2d4a08125c/1/iUCMZm-TadtDTormwz2gL7VtScE.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  204829

    Signature Algorithm: sha256WithRSAEncryption
         60:17:cd:4e:9e:9c:6e:6a:4f:98:d4:fa:18:98:3c:66:e6:73:
         21:b1:fd:a9:40:d3:86:bb:a2:af:ae:b5:af:d7:9b:77:36:7c:
         f7:5f:39:5b:78:9d:a8:13:cd:0b:08:97:90:75:d9:73:91:04:
         e6:01:59:80:2d:27:2c:33:a3:11:89:3c:86:9f:a5:f2:a6:fe:
         20:6e:41:7f:b1:b0:10:eb:af:d7:6a:49:ad:2a:4b:cb:34:1c:
         27:1c:99:81:69:b4:d5:20:f0:b0:f0:ff:6c:7d:fb:2f:4a:79:
         7d:f8:9a:d2:c3:9d:73:0d:3f:42:f9:4c:f5:06:87:19:29:fd:
         2d:03:e0:c1:38:d5:83:57:d4:e4:91:f6:07:ac:05:97:73:1e:
         0a:bc:30:ea:be:95:26:25:c1:7f:7d:66:76:50:94:75:84:b3:
         a8:26:d1:0b:6e:db:ad:73:8e:23:0f:06:23:6f:b4:0d:eb:3d:
         b8:e0:00:8b:da:d1:7a:fe:d8:ce:f1:0e:7b:45:11:05:05:4c:
         d1:0d:f7:59:2f:4e:13:69:85:d8:47:2a:55:8b:e4:48:d2:7b:
         15:90:b8:bc:9d:dd:43:64:1d:91:99:9d:ed:16:77:c9:08:54:
         8b:b8:6a:95:8d:a7:bb:55:0c:2f:2c:ec:d3:15:3f:e6:8c:51:
         f5:d1:c4:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----