Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/k2vVHxBtMQFkf2yQpOPVyF7xGW0.cer
File:                     k2vVHxBtMQFkf2yQpOPVyF7xGW0.cer (raw, json)
Hash identifier:          hYpdjk9evznHggQtoE2PNYyGvhB2CIQtq2Xpj+lgzP8=
Subject key identifier:   93:6B:D5:1F:10:6D:31:01:64:7F:6C:90:A4:E3:D5:C8:5E:F1:19:6D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0187596FACD0AEA30100B7B56FDC1CA9E9EE
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/0a/936663-61a1-45b5-b02a-616cb40e3900/1/k2vVHxBtMQFkf2yQpOPVyF7xGW0.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/0a/936663-61a1-45b5-b02a-616cb40e3900/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 07 Apr 2023 01:58:23 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    AS: 39785

Validation:               Failed, certificate revoked on Fri 07 Apr 2023 08:03:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:59:6f:ac:d0:ae:a3:01:00:b7:b5:6f:dc:1c:a9:e9:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Apr  7 01:58:23 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=936bd51f106d3101647f6c90a4e3d5c85ef1196d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:42:3f:a9:e9:78:6c:53:86:12:72:4b:a6:be:
                    ed:fe:74:06:31:c6:aa:0a:88:16:57:69:05:9a:92:
                    5c:ed:43:bd:bb:02:d8:28:42:3f:66:23:b4:4a:8c:
                    9e:e6:26:f8:fa:a6:8f:26:59:e2:e0:ef:19:f0:85:
                    13:e5:01:9b:f8:e2:9d:65:26:76:4e:3a:35:58:8b:
                    da:f1:06:4d:44:0d:54:12:df:55:2c:3b:91:1a:d5:
                    be:b4:f9:dd:78:e5:5f:a3:b3:da:21:36:c3:24:0c:
                    7b:40:62:f3:7b:b1:6f:48:d1:cb:70:96:c9:4c:18:
                    d7:c3:2b:a3:6c:ee:2d:eb:01:03:cb:a3:2f:ba:f6:
                    79:8b:e9:41:12:18:3f:fa:24:b7:89:6e:3a:81:d5:
                    62:aa:9b:dc:93:f0:29:c7:40:0b:ec:b5:ac:c7:ab:
                    31:50:4b:bc:c0:4f:50:55:63:c9:0f:c8:dd:23:14:
                    5f:d6:ff:c6:e8:e3:27:fe:02:74:6c:2b:3a:ed:3d:
                    c4:f0:aa:71:57:ea:72:95:67:ce:71:b5:c7:f2:63:
                    c3:c2:24:52:69:8b:f7:c7:c5:03:51:63:12:95:98:
                    5d:7e:be:5f:da:73:b4:e1:72:f1:b4:03:b2:c3:94:
                    a2:f7:5a:89:85:45:b4:50:a3:91:74:61:2d:59:3a:
                    6e:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:6B:D5:1F:10:6D:31:01:64:7F:6C:90:A4:E3:D5:C8:5E:F1:19:6D
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/936663-61a1-45b5-b02a-616cb40e3900/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/936663-61a1-45b5-b02a-616cb40e3900/1/k2vVHxBtMQFkf2yQpOPVyF7xGW0.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  39785

    Signature Algorithm: sha256WithRSAEncryption
         9d:b8:17:dd:06:89:61:e8:e6:f1:d2:ba:39:88:4f:25:d4:5a:
         9b:e4:7a:b6:65:82:5c:8d:31:b7:5a:89:c1:6b:ba:09:23:c3:
         15:46:b6:fc:71:b9:73:2e:60:96:04:0e:74:cd:01:cb:88:88:
         a9:77:83:71:2b:8d:ce:9b:87:59:04:9a:80:4a:a3:26:55:fd:
         35:8b:0f:f1:27:6f:55:9a:c3:a5:88:2a:d2:a7:7b:40:96:8e:
         1f:e8:dc:35:fb:6a:70:a1:45:40:fb:50:a8:9a:9d:71:5f:74:
         10:b5:d7:a0:3e:0c:6c:35:d6:5e:2c:56:26:6b:72:b7:e9:28:
         0f:f2:df:a0:7e:c8:76:cc:30:99:25:d4:6d:10:31:34:6d:fc:
         9a:83:20:f6:da:e8:dc:b3:9c:d3:bb:64:5e:19:3f:ba:fe:3e:
         2c:9e:15:58:9a:dd:f0:8a:c3:1a:92:32:8c:35:5a:05:37:b3:
         9c:32:c4:8a:61:ad:57:ed:05:7f:c3:27:ae:27:e7:77:96:83:
         9b:c2:6f:c3:29:59:66:55:8b:f7:84:17:ed:c8:af:97:ff:4c:
         09:dd:4a:d1:8d:5d:d2:7e:86:02:63:09:1f:86:27:bc:af:a7:
         52:3f:e9:64:14:dd:68:41:d7:38:5a:e5:01:56:28:16:09:7f:
         ff:23:e4:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----