Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/lM6cTBZfHInLfhKyk5ln2_M8dMQ.cer
File:                     lM6cTBZfHInLfhKyk5ln2_M8dMQ.cer (raw, json)
Hash identifier:          u8oRfPoO4eB1HHEaHdeSN3x7I+yxvvz+sqhdnLeX/kE=
Subject key identifier:   94:CE:9C:4C:16:5F:1C:89:CB:7E:12:B2:93:99:67:DB:F3:3C:74:C4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01884DFD0485FBDB273BD827C6186688F1FC
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/18/217a7c-4cfd-4174-8dca-77405adaa11f/1/lM6cTBZfHInLfhKyk5ln2_M8dMQ.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/18/217a7c-4cfd-4174-8dca-77405adaa11f/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 24 May 2023 13:40:07 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    AS: 61130
                          IP: 2a0b:6740::/29

Validation:               Failed, certificate revoked on Fri 22 Sep 2023 07:42:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:4d:fd:04:85:fb:db:27:3b:d8:27:c6:18:66:88:f1:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: May 24 13:40:07 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=94ce9c4c165f1c89cb7e12b2939967dbf33c74c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:d1:6f:e6:07:fc:67:14:7c:1e:04:02:11:ce:
                    f1:b1:80:c2:fe:a0:df:51:69:58:a7:e8:fd:c2:97:
                    45:4d:11:ad:2d:c6:df:13:19:39:6c:9b:f2:e3:66:
                    51:f0:82:1c:c6:0f:32:3e:09:e1:19:e2:1e:42:df:
                    ad:11:94:8c:47:41:b5:c4:44:40:3d:99:20:a4:bb:
                    06:f1:d8:e2:eb:ef:17:d8:6b:9a:50:37:b2:62:cd:
                    24:6f:ad:da:dd:8f:cb:4c:cf:7e:69:1a:8a:70:6b:
                    29:24:39:81:41:9b:d1:3f:7f:ed:75:bb:71:a9:e9:
                    63:2b:3c:e1:a8:2c:64:a8:01:7a:ec:f6:1d:b8:dc:
                    05:99:e0:1a:82:d8:5b:0c:b2:08:a2:dc:14:d6:42:
                    f4:4d:64:63:53:ec:f7:d6:61:40:8b:f6:6e:1b:ca:
                    68:da:20:b2:f8:bf:d6:42:7d:b9:b5:ba:a0:99:62:
                    da:ac:aa:ad:dd:90:ef:28:a9:cd:d4:dd:f4:25:26:
                    be:31:87:f1:b4:16:54:52:71:b7:c3:f6:3c:96:80:
                    24:ba:e8:d6:aa:cd:c1:2e:fc:19:6f:ff:be:df:d8:
                    12:4e:3e:e0:aa:ac:07:3d:26:c9:99:c9:b9:e4:53:
                    bd:74:d5:9e:fd:40:19:86:7d:18:b5:23:b5:72:4b:
                    ea:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:CE:9C:4C:16:5F:1C:89:CB:7E:12:B2:93:99:67:DB:F3:3C:74:C4
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/217a7c-4cfd-4174-8dca-77405adaa11f/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/217a7c-4cfd-4174-8dca-77405adaa11f/1/lM6cTBZfHInLfhKyk5ln2_M8dMQ.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0b:6740::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61130

    Signature Algorithm: sha256WithRSAEncryption
         97:bf:cd:cf:53:66:95:f8:b9:bd:2f:1a:65:01:09:bf:6b:65:
         0a:e3:15:78:73:7d:fd:df:07:ae:2e:29:f8:c4:ca:47:4c:ad:
         63:e1:90:0f:c1:09:ec:09:d7:a2:05:18:0c:48:76:3d:68:96:
         a0:31:3a:41:a7:90:cf:91:11:92:60:0b:5d:be:2e:bc:b8:88:
         97:75:2e:6f:7a:ba:48:23:f6:e1:42:1e:11:f3:1b:e7:5e:35:
         2b:7b:b8:8c:fe:32:b3:2d:73:13:28:13:a9:68:2c:67:5d:43:
         a1:e8:0f:36:25:dc:55:e9:96:75:8f:d9:14:83:65:c7:8e:67:
         fc:6f:d9:e3:54:42:c3:49:4a:92:41:fc:7e:7d:59:57:da:b2:
         87:59:4b:b4:4a:7d:2e:67:f2:bc:36:62:16:73:96:e6:7a:52:
         5c:6d:1d:8b:61:eb:95:59:a0:48:3c:b2:74:ab:ef:8f:37:3c:
         1e:25:47:71:28:43:ad:4b:0a:8e:71:7e:50:ee:2b:a5:68:99:
         f5:1e:ad:ff:9d:30:42:54:62:0d:eb:10:ac:5f:f0:41:75:f4:
         c8:98:47:36:b5:12:bc:d5:9a:28:d5:02:9f:d7:fb:0f:5b:ab:
         57:a3:e5:48:c3:d4:f3:a8:2e:14:4a:0e:fa:4a:04:d7:45:d9:
         16:17:b0:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----