Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ikSqR5L1Si-fmMNME9S8fPyaVpE.cer
File:                     ikSqR5L1Si-fmMNME9S8fPyaVpE.cer (raw, json)
Hash identifier:          eUNdOBKmx8otRfPVJLgTUhJr8khWJFRP7WZ18AUFSL8=
Subject key identifier:   8A:44:AA:47:92:F5:4A:2F:9F:98:C3:4C:13:D4:BC:7C:FC:9A:56:91
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018CC56DEDB457B29E83087509A3EBFAB143
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/bd/6e7b9d-dbdf-42dc-a79e-e0f1a82bf660/1/ikSqR5L1Si-fmMNME9S8fPyaVpE.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/bd/6e7b9d-dbdf-42dc-a79e-e0f1a82bf660/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 14:29:25 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    AS: 216410

Validation:               Failed, certificate revoked on Mon 23 Sep 2024 13:35:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c5:6d:ed:b4:57:b2:9e:83:08:75:09:a3:eb:fa:b1:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 14:29:25 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=8a44aa4792f54a2f9f98c34c13d4bc7cfc9a5691
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:ef:a7:65:e3:6b:ff:ae:bb:30:94:7c:5a:09:
                    bf:b2:b1:64:35:59:a3:18:9b:cc:a4:10:2b:0b:a8:
                    c5:f5:c3:60:17:2b:24:ad:62:8e:f5:a9:ce:d2:10:
                    c7:8f:27:f4:48:57:76:c7:6a:41:11:34:4d:2c:6f:
                    9a:4a:f2:3a:d5:d3:ae:c2:83:88:64:1d:1b:7e:63:
                    9c:ac:c6:9f:51:d4:b3:31:c9:a4:e3:27:43:71:12:
                    e8:8c:4c:0b:8c:a4:a2:10:50:14:6e:7d:d7:4a:60:
                    d9:b8:a4:9c:9c:77:5c:93:8c:92:6d:51:3a:39:e3:
                    bc:51:71:17:a9:71:c7:26:cd:14:b5:14:09:0d:11:
                    e8:4d:0a:c2:f8:b6:6d:cc:41:a8:7b:7b:07:f9:ae:
                    56:8a:89:fd:5c:af:d5:c5:ab:f8:31:fa:33:00:65:
                    92:15:f4:4d:2b:41:6c:b6:73:86:63:7a:bd:de:23:
                    ea:b5:bf:78:15:06:36:df:b9:2e:b1:af:20:6e:2f:
                    8f:48:88:e1:9e:48:c3:3e:b2:a7:29:4e:2c:79:c3:
                    18:61:1e:90:b6:86:19:89:f7:ee:b5:ab:ad:e2:95:
                    99:b3:7f:08:6f:44:a8:f1:5f:65:28:f4:8e:c2:12:
                    ca:8b:f0:24:f0:14:bf:12:f0:3e:c1:af:e5:ac:71:
                    43:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:44:AA:47:92:F5:4A:2F:9F:98:C3:4C:13:D4:BC:7C:FC:9A:56:91
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/6e7b9d-dbdf-42dc-a79e-e0f1a82bf660/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/6e7b9d-dbdf-42dc-a79e-e0f1a82bf660/1/ikSqR5L1Si-fmMNME9S8fPyaVpE.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  216410

    Signature Algorithm: sha256WithRSAEncryption
         41:63:bc:cc:d5:a0:a7:1e:f9:eb:7a:a5:cf:49:a1:cc:9f:bd:
         60:43:75:95:92:b1:fc:7b:fa:a1:89:92:5d:d4:6d:28:73:63:
         c1:d1:3a:0f:be:c2:be:2b:af:6a:7a:01:51:d7:80:1d:92:ac:
         81:06:dd:a1:f9:ae:7f:9a:e5:8f:66:27:91:0e:fd:21:7d:77:
         dc:f3:50:9b:e0:b6:0e:59:3e:d3:e7:21:ef:1a:20:80:82:c8:
         4f:46:12:f9:b9:89:f8:e8:f5:39:7f:57:74:39:17:ca:9e:bf:
         4b:04:1c:7c:0b:6a:a1:2e:df:ac:fb:96:4d:a8:b0:5a:76:67:
         5f:61:10:53:dc:24:bb:61:02:34:f4:3b:aa:a6:cc:9f:79:3c:
         32:48:30:0b:2b:c7:d5:47:80:88:f9:ec:96:61:d8:c7:76:cd:
         b2:c0:62:cf:90:cf:a4:e9:14:b1:bf:58:31:97:16:c2:4a:d0:
         2a:c2:e8:0a:a4:24:ff:74:b7:7a:f9:e5:c8:f8:01:6d:76:07:
         bd:16:13:1f:f3:54:21:c8:7b:b0:4d:c2:51:98:53:2a:a0:9e:
         21:08:27:94:62:1c:ed:be:82:28:6b:1d:40:91:62:09:87:15:
         36:0d:b0:40:c0:de:81:e6:43:db:0a:e6:96:8e:ac:d0:52:2b:
         54:a9:4e:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----