Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/l7h2vHZS2vq2VG26qy2doR-sCHU.cer
File:                     l7h2vHZS2vq2VG26qy2doR-sCHU.cer (raw, json)
Hash identifier:          WSyHXZ77JABRu96DgEDduUsW1YoIeJe7rtXK6yogHuY=
Subject key identifier:   97:B8:76:BC:76:52:DA:FA:B6:54:6D:BA:AB:2D:9D:A1:1F:AC:08:75
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856EFBED8238F74B3F5EF7F119C3BA32B9
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/bf/7b155d-e71c-40b3-98ee-b3b4b1f77176/1/l7h2vHZS2vq2VG26qy2doR-sCHU.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/bf/7b155d-e71c-40b3-98ee-b3b4b1f77176/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 20:18:02 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    AS: 212294

Validation:               Failed, certificate revoked on Thu 13 Apr 2023 12:05:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6e:fb:ed:82:38:f7:4b:3f:5e:f7:f1:19:c3:ba:32:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 20:18:02 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=97b876bc7652dafab6546dbaab2d9da11fac0875
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:60:19:83:ab:52:1d:0a:1e:92:cd:2d:5a:57:
                    c4:1a:e8:8a:f3:db:26:e0:25:0e:77:b6:49:8c:ba:
                    8e:de:5c:b5:2a:d3:ed:21:b9:34:69:70:d1:8f:46:
                    bb:48:f9:23:da:d7:cb:3d:83:d7:51:30:af:c4:b5:
                    2b:41:d6:73:c8:78:ca:55:43:35:4b:07:0c:54:45:
                    f7:fe:f5:96:71:3b:6c:42:4d:ed:b3:e8:63:89:8e:
                    eb:3e:62:ed:f9:0b:4a:79:85:9e:86:87:ac:11:90:
                    00:3d:c4:27:e1:7b:35:6a:3b:c1:b4:92:05:15:23:
                    36:30:a4:b7:89:56:9f:d7:41:85:93:2f:ae:5b:69:
                    73:ad:25:db:fc:64:1d:10:06:e6:e9:ae:ac:ee:94:
                    ba:0d:1c:02:5c:01:75:27:7f:66:ff:52:44:8d:cb:
                    0d:96:6d:bc:4c:a6:76:5a:b9:55:7b:18:15:b6:51:
                    53:1f:3d:c2:8d:35:3b:8f:76:ec:6f:1c:c0:90:fa:
                    28:29:63:79:af:49:1b:a8:85:bb:d6:3e:52:8c:e8:
                    32:fc:a9:b5:30:36:64:5c:67:b9:94:2e:79:9f:e2:
                    7c:66:47:9e:d3:7a:ac:b2:f9:06:b6:97:84:48:92:
                    5f:1a:4a:3d:c9:17:07:44:e0:96:61:36:c6:75:9a:
                    47:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:B8:76:BC:76:52:DA:FA:B6:54:6D:BA:AB:2D:9D:A1:1F:AC:08:75
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/7b155d-e71c-40b3-98ee-b3b4b1f77176/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/7b155d-e71c-40b3-98ee-b3b4b1f77176/1/l7h2vHZS2vq2VG26qy2doR-sCHU.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  212294

    Signature Algorithm: sha256WithRSAEncryption
         93:60:e1:7a:e6:f9:d7:2c:4c:45:18:86:64:8d:25:93:75:67:
         be:39:11:84:99:6e:aa:c4:7e:40:91:61:47:a2:69:41:cd:62:
         53:59:eb:d3:c8:09:40:dd:c1:35:d4:0e:f9:a1:6b:88:17:84:
         51:08:3c:ac:bd:af:04:d3:3a:46:f6:2a:7c:27:4a:7b:35:14:
         3f:97:7f:80:c0:8e:be:e2:22:13:74:34:55:67:b7:63:1e:95:
         55:77:ed:25:91:f3:3c:68:52:0e:a2:0e:dd:5e:d4:82:a2:d6:
         09:92:68:c5:3f:33:d7:84:87:05:76:2c:6a:83:84:c3:4d:72:
         2c:02:6b:ce:26:3a:3e:9e:0b:20:de:88:cf:7c:5f:a4:82:00:
         f9:ec:62:76:f4:d0:db:50:0e:f7:3f:4f:e1:bc:18:f7:a7:c0:
         3e:fc:2b:c6:77:ed:4d:26:85:55:07:a6:38:4e:cd:51:8b:9a:
         f1:64:b6:b6:b5:ae:54:0b:0e:99:6c:6a:3a:9e:0c:ad:d6:8b:
         c9:f7:80:d8:65:05:c1:0e:2b:7b:d8:d7:fd:17:f8:ab:8f:fd:
         5a:24:4b:16:35:1b:96:39:6a:aa:55:b5:d6:68:70:40:5f:f8:
         54:46:89:2d:4f:c2:96:0e:0f:2d:2b:6e:95:3f:4c:71:95:0e:
         e7:5c:31:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----