Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/l7jZwuBUbEWtgewbIqExlWDV7nE.cer
File:                     l7jZwuBUbEWtgewbIqExlWDV7nE.cer (raw, json)
Hash identifier:          SLghodDElGWuUTQcTOXTe84jfbErVNwn3h6L6K6AbdM=
Subject key identifier:   97:B8:D9:C2:E0:54:6C:45:AD:81:EC:1B:22:A1:31:95:60:D5:EE:71
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0190BBF524FC599A53C018608B9D99797850
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/b8/b1a7ab-21df-4308-9bd0-f346cfb56951/1/l7jZwuBUbEWtgewbIqExlWDV7nE.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/b8/b1a7ab-21df-4308-9bd0-f346cfb56951/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Tue 16 Jul 2024 14:32:03 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    AS: 199055
                          IP: 2a03:6440::/32

Validation:               Failed, certificate revoked on Fri 23 Aug 2024 06:12:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:bb:f5:24:fc:59:9a:53:c0:18:60:8b:9d:99:79:78:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jul 16 14:32:03 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=97b8d9c2e0546c45ad81ec1b22a1319560d5ee71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:aa:4a:f5:e3:ff:40:ca:d9:02:7a:93:58:93:
                    b2:ac:6c:a6:60:64:a8:b6:99:39:62:71:a5:97:d4:
                    d1:ed:fc:14:9d:e0:34:26:a8:ea:be:b5:c2:f9:45:
                    48:15:09:c0:d5:97:7a:b6:7b:28:f6:41:51:c3:4a:
                    79:bf:f9:d4:34:32:d9:83:69:8e:97:22:a9:d4:26:
                    49:27:0d:66:36:30:bd:53:aa:0e:81:83:f7:dd:40:
                    dc:a3:62:df:90:46:0b:82:e6:63:af:0d:04:18:37:
                    92:27:4e:4f:12:d0:5a:11:f1:84:fa:bd:85:0d:ad:
                    8b:0f:69:d2:d8:c3:d8:32:cb:1d:9c:9b:b1:9b:f3:
                    f0:84:66:b5:ac:78:37:e3:a6:bc:ef:9a:5e:ba:b0:
                    36:bc:8a:9e:05:a3:f7:6c:ec:20:75:93:33:b6:e6:
                    d9:f2:5c:32:a7:33:1e:a0:b3:b7:bb:88:c5:eb:c1:
                    d1:cd:f5:82:e2:d7:dd:39:dd:ed:46:36:a3:ca:dc:
                    5b:a9:93:38:b1:81:08:4b:f2:4c:63:28:36:54:96:
                    df:38:83:6d:f1:5c:35:99:72:d1:34:14:57:df:2d:
                    cc:c6:e0:d2:d2:9e:df:7f:bc:28:63:ee:f4:86:3a:
                    a5:23:4b:05:a3:0b:6b:76:96:a7:19:ae:d1:2e:64:
                    6e:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:B8:D9:C2:E0:54:6C:45:AD:81:EC:1B:22:A1:31:95:60:D5:EE:71
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/b1a7ab-21df-4308-9bd0-f346cfb56951/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/b1a7ab-21df-4308-9bd0-f346cfb56951/1/l7jZwuBUbEWtgewbIqExlWDV7nE.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a03:6440::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  199055

    Signature Algorithm: sha256WithRSAEncryption
         40:a6:4b:95:6f:4d:6e:14:53:48:5b:69:d4:30:9d:36:6e:c0:
         62:de:8d:67:0b:87:b3:01:05:a4:61:48:85:0d:15:8b:0f:d5:
         1d:45:3a:1d:dd:a8:c2:8e:22:15:2b:2b:40:e5:2a:dd:fb:2d:
         23:9f:af:9f:84:ce:5b:96:b6:36:e1:2f:8e:1d:29:e3:1b:f3:
         5c:42:b8:6d:5b:55:af:24:4a:f3:45:1e:66:06:90:3e:fd:b0:
         01:6f:b4:68:ec:99:81:14:68:f1:22:f1:0e:ad:52:31:8a:8d:
         8b:b2:6a:ca:0c:ec:b9:79:d9:34:0a:87:f0:94:87:81:1c:08:
         fb:0e:bb:2a:fc:a3:7c:41:5a:91:71:79:ac:f7:90:cf:f0:17:
         bc:8f:99:18:8b:7e:4a:f1:c7:77:22:75:07:06:bc:2f:16:52:
         24:cc:f0:e4:bf:9b:53:56:5f:e6:58:6b:0f:09:61:28:29:91:
         4f:39:99:c9:72:fa:ec:1b:a7:f6:41:34:30:b2:0b:03:17:0e:
         b3:4e:63:2a:4a:0e:3c:bd:c2:98:8a:9f:a1:64:98:ef:15:3c:
         31:97:0c:2c:6c:de:88:66:38:f6:6c:02:ae:1f:0f:bf:f7:9a:
         f6:ac:67:07:9b:43:e1:c5:96:33:28:80:c3:8b:32:81:b5:9a:
         0e:e5:37:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----