Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/jgcDQ4zlH9Qq5D_TUADfmHR6GC0.cer
File:                     jgcDQ4zlH9Qq5D_TUADfmHR6GC0.cer (raw, json)
Hash identifier:          UTWEd4w29/gjNrOAVBKXPlckGmiNFvt74iXIMLHSYJY=
Subject key identifier:   8E:07:03:43:8C:E5:1F:D4:2A:E4:3F:D3:50:00:DF:98:74:7A:18:2D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856ED41D1CAA6F2959D38BC17CB721AD22
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/de/631f54-0322-4854-8930-e22d3d073b8d/1/jgcDQ4zlH9Qq5D_TUADfmHR6GC0.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/de/631f54-0322-4854-8930-e22d3d073b8d/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 19:34:32 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    AS: 209699

Validation:               Failed, certificate revoked on Thu 20 Apr 2023 06:47:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6e:d4:1d:1c:aa:6f:29:59:d3:8b:c1:7c:b7:21:ad:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 19:34:32 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=8e0703438ce51fd42ae43fd35000df98747a182d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:7c:48:6f:1a:ab:1f:c3:5f:5c:6f:44:de:d8:
                    b0:5d:36:c4:a7:7e:84:e9:38:31:6e:91:38:5c:9c:
                    51:7b:58:85:03:f9:f3:c9:dc:ef:9d:95:23:28:75:
                    8d:44:78:2d:3b:8b:a6:98:79:44:53:fc:2c:93:71:
                    0e:cd:94:9b:77:e9:99:db:d4:70:28:69:a2:af:91:
                    93:28:48:44:e1:f8:e6:d4:78:48:94:1b:14:54:b9:
                    c8:1f:07:61:f6:59:39:cf:a4:2a:06:22:ae:0d:8c:
                    4c:33:cc:d3:7e:3a:56:2b:80:cd:2f:27:ab:45:6b:
                    07:11:0b:e6:ef:9a:2b:db:86:a7:d9:8c:5c:c1:3b:
                    91:08:b5:64:4b:65:54:d1:0c:fe:9b:b7:ae:1d:de:
                    55:fb:b5:c5:fd:ac:16:ee:64:71:cf:2e:20:d2:55:
                    55:60:dc:38:9c:40:ea:f8:b2:18:ab:86:28:f5:6a:
                    f0:c3:45:36:eb:c1:52:1e:5a:03:22:48:12:79:35:
                    22:eb:0d:49:12:cb:b8:0b:64:1e:92:e1:e3:b6:97:
                    88:7c:2f:a9:ad:53:85:67:e4:07:5a:f5:f5:05:a9:
                    44:b8:a0:fe:d9:a3:fe:32:47:96:15:99:3d:82:27:
                    c7:a6:63:b0:ee:e2:62:02:bc:66:2c:94:83:bb:c9:
                    7a:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:07:03:43:8C:E5:1F:D4:2A:E4:3F:D3:50:00:DF:98:74:7A:18:2D
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/631f54-0322-4854-8930-e22d3d073b8d/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/631f54-0322-4854-8930-e22d3d073b8d/1/jgcDQ4zlH9Qq5D_TUADfmHR6GC0.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  209699

    Signature Algorithm: sha256WithRSAEncryption
         15:06:4d:73:51:1d:51:16:96:79:7d:f9:56:fd:6a:a8:26:f2:
         66:74:14:4a:94:c7:ee:59:6c:a6:f5:c3:b1:fc:5c:f9:a2:d2:
         c3:2c:08:98:83:a2:6b:f3:f7:66:2a:6a:bd:8a:f4:d3:8d:26:
         b4:31:e3:cc:dc:8a:6f:63:60:f5:7b:61:cb:b4:10:77:ad:4d:
         7c:e0:57:dc:c3:9d:fd:78:30:98:e3:a5:14:55:04:f9:3c:d5:
         6c:07:98:61:18:c1:6e:1b:80:19:8a:8c:7c:72:65:0b:39:26:
         9f:05:70:b6:79:fc:0f:48:5f:95:4c:32:00:53:18:0b:9c:86:
         60:28:59:35:85:67:8a:8c:a6:b8:01:14:0f:5b:25:7c:10:c3:
         ec:ee:5b:d4:05:82:3d:d2:7d:d9:26:94:f2:31:84:d0:4c:09:
         ab:40:ca:12:33:8f:84:84:f4:50:7c:13:ca:74:52:03:b4:fd:
         24:81:0b:c6:b2:ae:5f:f2:0b:41:a6:48:19:f6:9c:6f:9b:1c:
         75:1b:f9:bc:6a:7e:8c:bc:a5:74:6f:75:6f:4b:40:9d:98:b2:
         ce:2f:4d:74:eb:06:c5:7d:72:9d:5b:df:e5:02:25:a3:14:ec:
         fb:83:26:94:07:af:a8:61:72:9c:a0:8a:db:ae:7e:77:9a:ff:
         48:90:b1:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----