Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/lOWdJF0VDcOMSJYmPcvcu9Z0cKc.cer
File:                     lOWdJF0VDcOMSJYmPcvcu9Z0cKc.cer (raw, json)
Hash identifier:          vS/wIxbcZtnhpBSYeqxsucrwqR8Fm5BSlTBSd3qX5ss=
Subject key identifier:   94:E5:9D:24:5D:15:0D:C3:8C:48:96:26:3D:CB:DC:BB:D6:74:70:A7
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0192BE64BD3BB7C6165E6ACC02D5FA0E6276
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/50/287cd2-f1d8-44a9-bed2-ee95b6cc3474/1/lOWdJF0VDcOMSJYmPcvcu9Z0cKc.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/50/287cd2-f1d8-44a9-bed2-ee95b6cc3474/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 24 Oct 2024 11:58:46 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    AS: 211271

Validation:               Failed, certificate revoked on Thu 31 Oct 2024 07:42:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:be:64:bd:3b:b7:c6:16:5e:6a:cc:02:d5:fa:0e:62:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Oct 24 11:58:46 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=94e59d245d150dc38c4896263dcbdcbbd67470a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:da:55:66:91:0f:ab:40:15:f8:1e:d9:05:e8:
                    1d:83:71:66:90:d6:60:4b:17:2f:52:e8:74:3b:a0:
                    cc:dd:3f:9a:9b:f4:a2:21:8d:d2:30:c1:0d:80:85:
                    f6:81:a0:80:3e:3d:8e:74:00:7f:72:f3:09:27:d1:
                    eb:cc:e5:62:31:47:1b:26:a0:99:d7:72:55:3a:00:
                    97:d9:0e:ce:29:6e:65:88:c5:87:5e:95:87:2c:a5:
                    03:d1:3c:d3:71:0e:68:0b:32:9a:6a:76:33:1f:93:
                    69:ce:f4:e4:aa:4e:58:71:0b:56:d3:16:bc:93:6d:
                    f8:65:6d:92:72:0d:59:77:9c:85:fb:e6:8c:ae:cc:
                    37:e2:e9:fa:5a:52:de:91:99:13:b0:63:68:59:fa:
                    c3:d0:5b:0b:f6:a6:13:94:f5:42:88:b9:b0:e8:b1:
                    5c:c3:f7:38:17:91:bc:c4:8f:56:29:c5:a9:90:80:
                    32:d4:24:bd:c1:58:3b:4f:a7:7a:ee:ef:b3:3b:65:
                    6f:30:23:5f:92:53:4d:10:45:90:2a:9a:0b:89:f3:
                    9f:c2:52:a4:cc:0a:7c:55:fa:f4:5d:51:73:17:de:
                    fc:c2:6d:90:2a:a8:3f:81:bd:ea:78:c9:5f:4f:4c:
                    71:97:70:41:45:3b:28:66:b2:6a:3c:79:6b:8c:01:
                    a4:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:E5:9D:24:5D:15:0D:C3:8C:48:96:26:3D:CB:DC:BB:D6:74:70:A7
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/287cd2-f1d8-44a9-bed2-ee95b6cc3474/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/287cd2-f1d8-44a9-bed2-ee95b6cc3474/1/lOWdJF0VDcOMSJYmPcvcu9Z0cKc.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  211271

    Signature Algorithm: sha256WithRSAEncryption
         98:b8:72:79:2c:3b:d4:b5:21:0c:60:38:8a:30:30:3a:41:ee:
         1c:ef:ef:23:d6:8a:17:9b:be:40:20:36:b7:f2:96:4d:b8:3c:
         ec:a2:6b:ac:2e:04:5e:87:fe:d2:a4:b8:50:e9:38:5d:6b:2e:
         65:91:f9:ad:de:54:5b:49:df:74:ff:31:23:9e:26:c8:57:75:
         5d:f0:42:15:a0:73:3a:47:25:7e:25:54:a0:75:b6:5f:91:98:
         76:a6:08:ea:eb:c9:3a:7a:d0:93:fc:e6:ff:66:47:04:59:40:
         5b:a1:d3:82:d8:93:84:e2:09:8b:48:57:dc:28:18:d9:ea:16:
         b3:04:bb:f6:8d:3b:d1:8b:96:0a:9e:b3:a8:ac:2d:b5:15:70:
         d5:06:4d:24:34:0e:98:3c:01:e5:75:8a:27:d8:2d:c7:5c:cb:
         2b:4c:01:7c:c2:54:1e:12:da:ee:f5:79:5a:33:24:13:c7:cb:
         5e:f7:b4:fa:7e:13:de:d5:65:3b:d1:76:24:2a:f4:3f:58:df:
         85:b9:e6:30:c6:78:8f:ee:6d:2c:f3:e8:ed:69:ff:9c:1d:b5:
         da:82:71:4f:8d:fb:30:85:33:53:a1:e8:62:f6:39:4d:ee:a1:
         b0:5a:a0:68:f6:93:b8:81:3e:83:af:90:8d:a8:f1:ec:ed:bd:
         c3:51:53:cf
-----BEGIN CERTIFICATE-----
MIIFczCCBFugAwIBAgISAZK+ZL07t8YWXmrMAtX6DmJ2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQxMDI0MTE1ODQ2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NGU1OWQyNDVkMTUwZGMzOGM0ODk2MjYzZGNiZGNiYmQ2NzQ3MGE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsdpVZpEPq0AV+B7ZBegdg3FmkNZg
SxcvUuh0O6DM3T+am/SiIY3SMMENgIX2gaCAPj2OdAB/cvMJJ9HrzOViMUcbJqCZ
13JVOgCX2Q7OKW5liMWHXpWHLKUD0TzTcQ5oCzKaanYzH5NpzvTkqk5YcQtW0xa8
k234ZW2Scg1Zd5yF++aMrsw34un6WlLekZkTsGNoWfrD0FsL9qYTlPVCiLmw6LFc
w/c4F5G8xI9WKcWpkIAy1CS9wVg7T6d67u+zO2VvMCNfklNNEEWQKpoLifOfwlKk
zAp8Vfr0XVFzF978wm2QKqg/gb3qeMlfT0xxl3BBRTsoZrJqPHlrjAGkWwIDAQAB
o4ICfzCCAnswHQYDVR0OBBYEFJTlnSRdFQ3DjEiWJj3L3LvWdHCnMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzUwLzI4N2Nk
Mi1mMWQ4LTQ0YTktYmVkMi1lZTk1YjZjYzM0NzQvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTAvMjg3Y2Qy
LWYxZDgtNDRhOS1iZWQyLWVlOTViNmNjMzQ3NC8xL2xPV2RKRjBWRGNPTVNKWW1Q
Y3ZjdTlaMGNLYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwM5RzANBgkqhkiG9w0BAQsFAAOCAQEAmLhyeSw71LUh
DGA4ijAwOkHuHO/vI9aKF5u+QCA2t/KWTbg87KJrrC4EXof+0qS4UOk4XWsuZZH5
rd5UW0nfdP8xI54myFd1XfBCFaBzOkclfiVUoHW2X5GYdqYI6uvJOnrQk/zm/2ZH
BFlAW6HTgtiThOIJi0hX3CgY2eoWswS79o070YuWCp6zqKwttRVw1QZNJDQOmDwB
5XWKJ9gtx1zLK0wBfMJUHhLa7vV5WjMkE8fLXve0+n4T3tVlO9F2JCr0P1jfhbnm
MMZ4j+5tLPPo7Wn/nB212oJxT437MIUzU6HoYvY5Te6hsFqgaPaTuIE+g6+Qjajx
7O29w1FTzw==
-----END CERTIFICATE-----