Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/jh_LikNy8MoOL-61jduomm2DnZw.cer
File:                     jh_LikNy8MoOL-61jduomm2DnZw.cer (raw, json)
Hash identifier:          EpTkxWeTjB3FzPgfMp8G7EfRqiSdwLIKEZ/wxbPZuSs=
Subject key identifier:   8E:1F:CB:8A:43:72:F0:CA:0E:2F:EE:B5:8D:DB:A8:9A:6D:83:9D:9C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01890867F6DEAF6839D8B8BDDAEF71101686
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/17/aa42df-b0dd-4446-be5b-191e57ead22b/1/jh_LikNy8MoOL-61jduomm2DnZw.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/17/aa42df-b0dd-4446-be5b-191e57ead22b/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 29 Jun 2023 18:26:18 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    AS: 58339

Validation:               Failed, certificate revoked on Mon 17 Jul 2023 12:18:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:08:67:f6:de:af:68:39:d8:b8:bd:da:ef:71:10:16:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jun 29 18:26:18 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=8e1fcb8a4372f0ca0e2feeb58ddba89a6d839d9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:fe:f0:e2:e7:38:63:ee:85:c0:43:20:10:f5:
                    e0:b8:0e:83:cb:fa:02:2d:32:be:49:7b:af:78:cb:
                    45:2e:a8:48:99:07:97:46:08:ff:be:9f:98:ad:fb:
                    e0:8b:12:66:49:0b:30:be:4a:c2:c8:2c:5a:77:9a:
                    f5:68:76:3d:d5:5e:42:06:e2:47:eb:fa:15:11:06:
                    ae:52:a7:ea:16:13:9d:56:d9:36:76:70:b5:9e:9d:
                    fa:b0:35:60:19:c1:fe:44:5a:a1:f0:08:07:ab:2c:
                    c5:93:06:85:a5:fc:01:6b:54:54:9c:f9:8a:16:d8:
                    8d:07:c0:18:e8:af:d8:97:4d:54:5e:fe:e0:29:da:
                    36:42:99:29:fe:d0:e8:bf:28:7c:34:a5:88:e6:a4:
                    00:13:df:7f:71:1c:d2:8b:e1:3c:2f:03:d6:30:b9:
                    17:72:27:1f:08:0e:8f:6a:4a:cc:a5:01:df:bd:04:
                    7d:f4:cc:26:90:0a:6e:0c:5b:1d:c2:fa:7e:e1:86:
                    2c:b3:06:19:4e:bc:65:5c:36:af:cd:c1:2d:96:23:
                    91:3d:fa:b3:cb:47:29:14:09:9a:86:d8:b9:ee:fa:
                    ff:8b:f9:06:60:64:2b:94:44:51:08:42:cc:58:46:
                    c0:15:c1:e6:7c:64:87:db:d2:d6:04:e4:f1:9f:d6:
                    fc:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:1F:CB:8A:43:72:F0:CA:0E:2F:EE:B5:8D:DB:A8:9A:6D:83:9D:9C
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/aa42df-b0dd-4446-be5b-191e57ead22b/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/aa42df-b0dd-4446-be5b-191e57ead22b/1/jh_LikNy8MoOL-61jduomm2DnZw.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  58339

    Signature Algorithm: sha256WithRSAEncryption
         70:e8:1a:d6:d7:da:06:a8:19:d3:e6:e7:8a:14:d4:a1:70:95:
         b8:7d:63:b5:14:8c:b0:6c:32:3b:19:de:ed:72:43:ef:44:7e:
         f3:28:38:a6:31:68:4d:aa:f5:6e:0e:93:09:8d:b9:c5:e5:74:
         54:63:99:f7:04:39:25:17:86:e7:25:08:f8:be:e2:bc:8e:d3:
         5a:e7:5e:68:c8:95:9f:63:20:94:8e:b7:af:13:63:2f:96:8c:
         af:05:31:f3:9b:51:35:30:8d:84:64:53:6b:ca:83:d5:ac:a6:
         3b:17:bd:49:c5:00:83:b8:d5:11:c7:17:4f:3f:93:6e:ef:2b:
         01:c4:b4:94:7e:6f:9e:f5:5a:34:4b:7a:0c:01:26:44:50:86:
         2f:c4:de:a9:03:f9:e9:ba:c1:b0:f2:87:fa:df:2d:ae:2a:c7:
         b2:80:58:c7:a8:7a:db:e0:e4:a8:13:2f:b6:4d:af:b5:ce:e7:
         f7:c4:65:1d:17:fb:7f:b6:a4:57:a0:bc:28:7b:84:35:af:d0:
         8f:86:46:fa:1a:e3:f0:d2:ca:fa:0a:a1:b9:16:a8:3b:ce:0e:
         46:34:c9:3a:7c:b0:e9:3e:6f:c3:1e:a0:b4:08:d1:89:cb:e3:
         c3:3d:48:9e:da:3b:ba:c9:1e:bc:b8:d4:8b:de:74:2a:7d:6d:
         c7:04:ad:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----