Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/n9tLQpMCCkD8-UjoFoHI7bKvBvc.cer
File:                     n9tLQpMCCkD8-UjoFoHI7bKvBvc.cer (raw, json)
Hash identifier:          ZW7q6CqZ+vMMl5ycpdltHiDG9B+cJQGgEMl1KJtpCRw=
Subject key identifier:   9F:DB:4B:42:93:02:0A:40:FC:F9:48:E8:16:81:C8:ED:B2:AF:06:F7
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01921F7DBB42C4F760278163B0AD4D59B070
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/45/f64357-2461-43e3-b762-0d1b7216b326/1/n9tLQpMCCkD8-UjoFoHI7bKvBvc.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/45/f64357-2461-43e3-b762-0d1b7216b326/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 23 Sep 2024 15:26:26 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    AS: 214223

Validation:               Failed, certificate revoked on Sat 05 Oct 2024 23:30:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:1f:7d:bb:42:c4:f7:60:27:81:63:b0:ad:4d:59:b0:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Sep 23 15:26:26 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=9fdb4b4293020a40fcf948e81681c8edb2af06f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:d8:ff:07:8e:12:fa:21:33:b8:5f:6a:ed:16:
                    bf:05:ae:bc:fc:61:b9:d4:5f:fe:82:cc:58:7b:57:
                    d7:be:f4:12:05:e3:23:15:4f:86:3d:92:0b:40:20:
                    aa:66:af:db:5a:0b:58:b7:44:27:06:02:62:e8:0f:
                    b0:a6:7f:f7:c6:eb:29:4f:c6:dc:df:4a:09:2c:a7:
                    00:62:b2:4d:04:38:c0:a0:27:7f:e0:9f:91:de:91:
                    64:85:33:6f:15:b3:53:a3:99:c8:fa:1b:42:8c:83:
                    69:b4:d6:be:12:3a:e4:1b:0c:0c:2e:fc:7d:94:26:
                    c5:9b:13:59:88:0c:e2:d7:1c:8a:b5:2c:19:19:db:
                    cc:dd:2f:49:7e:96:5c:83:34:e5:52:90:dd:c6:7a:
                    db:f6:8d:ad:4a:1f:fe:f4:b7:37:c0:47:78:28:79:
                    11:77:54:7c:96:e1:1d:12:51:ef:c9:37:da:fe:8f:
                    77:ac:79:96:b5:8d:61:05:b2:85:51:e1:da:18:e8:
                    fe:73:45:5f:10:16:7a:0f:42:2e:03:3f:96:00:2e:
                    bd:25:bd:12:f7:ac:b6:1a:95:f5:49:20:6f:5c:db:
                    c2:02:e5:61:b6:8a:d4:21:60:fe:44:34:d7:7e:15:
                    1a:b9:1e:0d:7d:a0:f4:7a:cd:fc:20:d8:45:07:45:
                    da:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:DB:4B:42:93:02:0A:40:FC:F9:48:E8:16:81:C8:ED:B2:AF:06:F7
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/f64357-2461-43e3-b762-0d1b7216b326/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/f64357-2461-43e3-b762-0d1b7216b326/1/n9tLQpMCCkD8-UjoFoHI7bKvBvc.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  214223

    Signature Algorithm: sha256WithRSAEncryption
         43:6f:ba:88:ee:30:f4:f2:46:0e:a6:46:f9:c2:d8:7e:52:0e:
         78:95:fb:58:c7:52:22:43:1d:97:c5:c2:ca:f8:0c:5f:70:f3:
         b7:65:5e:8f:9e:54:3c:fb:68:88:34:b5:8d:21:1d:d8:86:28:
         4b:41:14:3a:35:9e:b6:d4:87:e2:d9:db:ec:ef:30:1b:e4:cf:
         70:c9:49:00:06:ad:37:a1:b2:bb:36:a0:fc:f2:93:00:46:c6:
         38:e3:42:61:78:36:da:2f:5c:a1:70:64:f9:a0:e9:60:7b:23:
         82:43:8c:3c:6d:5e:97:8a:99:4f:3f:e2:e7:86:94:88:67:4b:
         f7:2a:f7:62:c3:98:19:14:59:da:cc:da:70:18:c1:92:5d:29:
         0f:85:7b:14:99:a2:b5:d8:27:ac:14:42:0a:76:84:9d:b3:7f:
         fe:f4:9a:7b:f9:41:89:04:d4:ff:66:d8:f6:e3:fe:ec:48:b9:
         db:04:97:f2:54:8d:9f:7c:0e:7f:9b:24:09:88:08:4f:7b:82:
         ab:16:f9:49:e8:e4:1b:b3:56:29:4c:18:84:f8:ad:21:3e:74:
         c3:74:40:df:b2:8f:c7:57:5e:e8:b4:bc:0a:11:4b:dc:e1:e7:
         0b:29:7c:ee:1e:0e:1f:e4:4a:bc:63:d0:b0:a2:0d:0c:7f:0d:
         ba:81:29:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----