Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/p6viNq_k7-4wR77Sr3iBPYIFo04.cer
File:                     p6viNq_k7-4wR77Sr3iBPYIFo04.cer (raw, json)
Hash identifier:          OXm0rb1lu3oQoc3pgt5YeVcAnNT9E8+6BBXLpVnsHZs=
Subject key identifier:   A7:AB:E2:36:AF:E4:EF:EE:30:47:BE:D2:AF:78:81:3D:82:05:A3:4E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018CCA2A38A400EF70A7C9E3F77CE75C4548
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/6d/eb0472-b667-4fd5-983b-2dce3bc21c1a/1/p6viNq_k7-4wR77Sr3iBPYIFo04.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/6d/eb0472-b667-4fd5-983b-2dce3bc21c1a/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Tue 02 Jan 2024 12:33:33 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    AS: 58286

Validation:               Failed, certificate revoked on Tue 23 Jan 2024 14:17:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:ca:2a:38:a4:00:ef:70:a7:c9:e3:f7:7c:e7:5c:45:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 12:33:33 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=a7abe236afe4efee3047bed2af78813d8205a34e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:d4:fd:00:c9:35:1d:8b:b0:ed:70:24:35:0e:
                    7b:8d:e7:1e:3b:cd:f2:d6:df:35:4b:95:a9:4f:7a:
                    da:5a:de:72:3a:3d:fa:61:05:f6:bd:3d:8e:fb:dd:
                    2d:a9:41:d1:a7:95:96:13:13:48:00:de:2f:38:e0:
                    dc:b8:45:18:74:ab:07:07:9d:21:fd:e4:35:48:05:
                    11:61:50:b2:e9:e4:71:2d:0e:7d:94:91:75:09:2a:
                    bb:88:a6:00:73:f6:07:c8:81:0d:58:9a:a0:95:01:
                    9b:bc:d8:eb:5f:84:2c:59:17:96:4b:52:c1:26:de:
                    c3:02:8f:f7:53:e3:bf:1e:c8:c5:65:e6:d6:a5:48:
                    b1:10:62:88:fc:32:3a:8c:7c:1d:ad:de:7e:81:e1:
                    6b:1a:7c:25:82:37:6b:f2:90:58:57:b2:9f:b4:d2:
                    31:79:f4:c4:cd:a9:94:f6:7f:86:22:3b:70:b2:8a:
                    00:03:1e:16:19:35:4b:04:07:d8:f9:1c:6b:c2:69:
                    12:cb:3b:f7:17:c8:8d:48:32:7d:1b:37:7b:fe:a0:
                    e4:55:14:6c:5d:6f:18:ed:b2:2d:2d:8e:e8:62:89:
                    d6:91:1e:11:b4:8d:34:65:63:c9:2f:95:49:09:70:
                    99:9d:0b:32:a2:68:29:3d:9c:8e:5e:c4:a5:98:b5:
                    56:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:AB:E2:36:AF:E4:EF:EE:30:47:BE:D2:AF:78:81:3D:82:05:A3:4E
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/eb0472-b667-4fd5-983b-2dce3bc21c1a/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/eb0472-b667-4fd5-983b-2dce3bc21c1a/1/p6viNq_k7-4wR77Sr3iBPYIFo04.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  58286

    Signature Algorithm: sha256WithRSAEncryption
         59:41:41:2f:d6:16:a8:65:53:e5:81:01:69:4b:75:53:d6:51:
         d7:ce:c7:6d:10:d4:9b:1d:97:ac:2c:b6:20:60:18:7f:05:34:
         9d:d3:7d:73:b9:90:5b:e4:ae:7c:0e:fd:a8:00:56:d5:46:20:
         48:4e:71:d7:92:1f:3b:b7:a5:ee:e2:4a:7a:0a:a3:eb:f3:f5:
         0b:f4:56:cb:5c:b6:6e:f1:66:f2:46:4b:fa:59:cb:b8:4a:a0:
         16:6c:b4:bd:cb:9b:ea:70:1d:00:7e:82:ba:64:78:46:36:3d:
         5c:e4:c5:94:ef:b2:a2:8c:e0:5e:f9:89:ef:52:d9:9a:48:e4:
         0b:46:e5:6f:aa:47:88:9f:62:c1:d9:6f:7b:7d:9f:21:80:e0:
         87:f9:cf:95:2b:0b:e6:35:7c:94:31:ac:47:1c:bd:9d:db:32:
         de:84:e6:45:b4:dc:43:c3:f0:2f:93:f7:48:00:a3:e1:9b:6e:
         89:7d:e1:03:27:fe:f8:d3:9d:bd:8f:69:ae:16:9b:7f:bb:71:
         96:ab:93:cf:98:fe:d3:cd:10:5b:fa:98:45:ab:15:79:f7:e7:
         ae:a8:6f:d9:ae:84:62:d5:a7:60:64:0a:54:7b:4c:9b:fd:1f:
         68:3f:43:9a:67:3f:be:c0:0b:92:fe:07:6c:2d:86:f1:50:92:
         a8:2d:a6:47
-----BEGIN CERTIFICATE-----
MIIFczCCBFugAwIBAgISAYzKKjikAO9wp8nj93znXEVIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAyMTIzMzMzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhN2FiZTIzNmFmZTRlZmVlMzA0N2JlZDJhZjc4ODEzZDgyMDVhMzRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8NT9AMk1HYuw7XAkNQ57jeceO83y
1t81S5WpT3raWt5yOj36YQX2vT2O+90tqUHRp5WWExNIAN4vOODcuEUYdKsHB50h
/eQ1SAURYVCy6eRxLQ59lJF1CSq7iKYAc/YHyIENWJqglQGbvNjrX4QsWReWS1LB
Jt7DAo/3U+O/HsjFZebWpUixEGKI/DI6jHwdrd5+geFrGnwlgjdr8pBYV7KftNIx
efTEzamU9n+GIjtwsooAAx4WGTVLBAfY+RxrwmkSyzv3F8iNSDJ9Gzd7/qDkVRRs
XW8Y7bItLY7oYonWkR4RtI00ZWPJL5VJCXCZnQsyomgpPZyOXsSlmLVWVQIDAQAB
o4ICfzCCAnswHQYDVR0OBBYEFKer4jav5O/uMEe+0q94gT2CBaNOMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzZkL2ViMDQ3
Mi1iNjY3LTRmZDUtOTgzYi0yZGNlM2JjMjFjMWEvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNmQvZWIwNDcy
LWI2NjctNGZkNS05ODNiLTJkY2UzYmMyMWMxYS8xL3A2dmlOcV9rNy00d1I3N1Ny
M2lCUFlJRm8wNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwDjrjANBgkqhkiG9w0BAQsFAAOCAQEAWUFBL9YWqGVT
5YEBaUt1U9ZR187HbRDUmx2XrCy2IGAYfwU0ndN9c7mQW+SufA79qABW1UYgSE5x
15IfO7el7uJKegqj6/P1C/RWy1y2bvFm8kZL+lnLuEqgFmy0vcub6nAdAH6CumR4
RjY9XOTFlO+yoozgXvmJ71LZmkjkC0blb6pHiJ9iwdlve32fIYDgh/nPlSsL5jV8
lDGsRxy9ndsy3oTmRbTcQ8PwL5P3SACj4ZtuiX3hAyf++NOdvY9prhabf7txlquT
z5j+080QW/qYRasVeffnrqhv2a6EYtWnYGQKVHtMm/0faD9Dmmc/vsALkv4HbC2G
8VCSqC2mRw==
-----END CERTIFICATE-----