Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/p5xG4M2VCTMxdVt32I1WkefEKo0.cer
File:                     p5xG4M2VCTMxdVt32I1WkefEKo0.cer (raw, json)
Hash identifier:          8dGtnk0/1AEPU57FzcjvgiXoaS2b+u50u8GSh2TUenI=
Subject key identifier:   A7:9C:46:E0:CD:95:09:33:31:75:5B:77:D8:8D:56:91:E7:C4:2A:8D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0188D963200588F6B3712F8B6BD03D2FA1E0
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/10/8b64de-13ab-4bd8-9ecb-4f421b9c7b00/1/p5xG4M2VCTMxdVt32I1WkefEKo0.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/10/8b64de-13ab-4bd8-9ecb-4f421b9c7b00/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Tue 20 Jun 2023 15:18:52 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    AS: 198057

Validation:               Failed, certificate revoked on Thu 22 Jun 2023 03:44:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:d9:63:20:05:88:f6:b3:71:2f:8b:6b:d0:3d:2f:a1:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jun 20 15:18:52 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=a79c46e0cd95093331755b77d88d5691e7c42a8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:b5:f8:30:f0:11:15:f2:e3:f7:56:d7:4c:c6:
                    98:6b:95:6e:b7:ef:1f:40:07:05:ac:c6:e5:1b:f9:
                    20:e1:a2:af:ad:cb:e0:3e:d3:10:74:1e:84:6e:92:
                    d5:b7:70:5d:ea:bd:0f:de:8f:10:21:d9:e7:c3:a2:
                    ab:4a:b2:bf:b3:e3:ef:c4:c1:a0:50:cc:54:88:4c:
                    d6:68:a8:c4:a2:1d:9d:79:37:ee:45:17:67:f8:3b:
                    25:71:d1:f7:24:55:a6:1c:e8:45:ca:b3:d6:a3:42:
                    56:9a:95:0a:55:77:a2:99:7f:43:54:b9:34:44:ea:
                    a0:80:9c:7e:c4:09:73:b3:16:bb:fd:bf:9e:82:0a:
                    23:ea:98:ba:5d:21:da:a8:ca:f6:5d:46:0b:0e:91:
                    d8:86:3f:c9:5b:d2:5f:25:25:80:e9:ff:4d:0d:db:
                    db:c3:c6:99:ca:f9:5a:11:18:10:af:e4:c2:48:3f:
                    fd:47:af:ef:ad:88:60:a1:7d:7d:20:f9:b2:32:ea:
                    88:ea:4c:c7:b7:c3:c8:4a:16:7c:ee:50:6e:00:f0:
                    83:ad:f3:df:43:fd:6c:e4:3c:b6:17:b8:10:39:79:
                    6f:00:7d:f8:c1:d7:ad:f9:65:64:ba:91:07:dd:d2:
                    e1:a2:42:ea:da:25:c4:10:6a:ef:ab:1e:d1:d8:1c:
                    4e:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:9C:46:E0:CD:95:09:33:31:75:5B:77:D8:8D:56:91:E7:C4:2A:8D
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/8b64de-13ab-4bd8-9ecb-4f421b9c7b00/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/8b64de-13ab-4bd8-9ecb-4f421b9c7b00/1/p5xG4M2VCTMxdVt32I1WkefEKo0.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  198057

    Signature Algorithm: sha256WithRSAEncryption
         39:8f:75:69:43:e3:a5:12:c4:4c:4a:b6:97:e8:72:8f:4a:d7:
         48:e1:d3:9f:04:9e:86:6a:cd:03:e1:b5:78:c1:5c:e8:5d:b2:
         49:f5:9c:36:b7:1d:71:51:e8:66:e8:ce:70:7c:f8:4d:1b:9e:
         98:49:7b:71:04:e7:51:3f:04:9e:10:34:c5:d1:e6:9b:95:dd:
         1b:ec:fd:02:58:c7:b8:8f:98:c8:91:d6:5b:13:87:ab:98:04:
         79:81:88:0d:a0:a0:44:fa:cb:7d:f8:f2:86:bc:25:1b:79:ba:
         0f:51:45:db:83:ee:a7:64:fe:78:a6:d8:28:84:15:27:b8:7f:
         61:b2:90:b7:31:34:19:fe:af:98:ab:fd:d2:9e:dc:7e:41:fd:
         a8:65:72:32:49:46:e0:c7:19:49:02:5f:b0:27:8b:54:70:da:
         10:6e:ea:4e:3f:91:87:0a:b4:4b:d6:57:8f:83:37:35:03:d0:
         7f:d5:30:d4:bd:cc:39:e7:cd:ac:52:35:e1:d5:98:52:30:fe:
         57:76:af:1e:86:b8:64:76:c9:78:d5:c7:aa:8e:ad:20:1d:db:
         ca:e5:03:2e:4f:fa:46:a1:73:62:d7:df:a9:aa:4d:46:ca:5c:
         e2:6b:85:42:40:71:3e:fd:6d:05:c4:0d:cd:ba:5a:58:78:cb:
         e6:3f:16:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----