Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/p_lGDnVS-uWcJ3T_4shvTljYUTc.cer
File:                     p_lGDnVS-uWcJ3T_4shvTljYUTc.cer (raw, json)
Hash identifier:          vi8ivtCFokY9XVtEd97bVvfNI9Uw28q6xgHNYWzKvZw=
Subject key identifier:   A7:F9:46:0E:75:52:FA:E5:9C:27:74:FF:E2:C8:6F:4E:58:D8:51:37
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0185DF8CAF8937ED3156857C9C9B8D743E9A
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/12/d092bd-a5ac-46c4-aa3c-2c120a7c3485/1/p_lGDnVS-uWcJ3T_4shvTljYUTc.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/12/d092bd-a5ac-46c4-aa3c-2c120a7c3485/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 23 Jan 2023 16:53:37 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    AS: 211380

Validation:               Failed, certificate revoked on Wed 03 May 2023 00:43:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:df:8c:af:89:37:ed:31:56:85:7c:9c:9b:8d:74:3e:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan 23 16:53:37 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=a7f9460e7552fae59c2774ffe2c86f4e58d85137
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:49:bf:16:1b:85:56:90:ad:51:bb:84:f4:dd:
                    e3:9c:d9:a3:ef:12:97:90:36:91:f8:f1:c8:d2:35:
                    ab:88:e8:f1:26:5f:e4:34:ec:b0:a6:cc:bf:b4:d4:
                    66:57:81:44:eb:b6:29:b5:75:df:28:8d:22:53:bf:
                    f0:c7:09:63:6d:5e:0b:36:1b:02:4f:78:05:e6:37:
                    26:f5:6a:ab:2e:6b:e8:4c:9f:8e:45:9a:31:33:cb:
                    ea:e6:eb:60:a2:ca:0c:8c:40:05:30:3e:0b:13:64:
                    88:22:ef:17:e6:63:6a:58:ac:62:bb:63:7b:be:bc:
                    1d:07:bc:a2:14:54:98:8d:f0:31:5c:61:64:45:1b:
                    c9:17:40:a2:5d:ce:3e:e0:19:ac:f5:98:5c:c9:e8:
                    10:90:1d:49:7f:0e:2f:70:75:4b:bb:b1:fa:f0:fd:
                    3c:52:82:0b:d9:24:c1:b3:86:51:8b:c4:eb:95:c4:
                    3a:37:0e:be:5b:ff:2c:fb:17:08:0a:50:f1:c7:cd:
                    61:fc:eb:d4:fc:ee:a8:9f:02:c1:55:e9:0c:ee:cd:
                    48:d8:38:36:c4:84:c7:00:60:da:ae:ad:e9:97:87:
                    32:da:88:14:bb:55:69:38:0d:e2:aa:82:ce:58:ae:
                    21:8a:bd:9e:21:0a:d4:6d:17:9b:65:86:f9:6b:35:
                    fa:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:F9:46:0E:75:52:FA:E5:9C:27:74:FF:E2:C8:6F:4E:58:D8:51:37
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/d092bd-a5ac-46c4-aa3c-2c120a7c3485/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/d092bd-a5ac-46c4-aa3c-2c120a7c3485/1/p_lGDnVS-uWcJ3T_4shvTljYUTc.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  211380

    Signature Algorithm: sha256WithRSAEncryption
         98:5a:91:58:f0:1f:1f:33:1b:d5:eb:ca:55:ea:a3:2b:f7:a4:
         e2:f0:24:d7:15:e7:2b:2a:fa:d6:b6:8d:17:78:85:c7:01:8d:
         7a:38:cb:e5:40:0a:7e:bf:9f:49:3b:e5:01:9d:1c:f7:df:dc:
         c4:d7:1d:6d:17:c6:d5:48:10:fd:65:e0:96:dd:5e:df:5a:21:
         ad:a5:c6:e0:81:90:46:0a:b0:06:28:14:ef:f7:94:13:b3:8a:
         12:df:49:f8:7e:48:7c:7c:e7:e5:ff:4e:51:a9:ce:0f:5a:1c:
         48:e8:11:87:ac:d9:07:d6:3f:95:23:4e:9b:a9:81:91:ce:5a:
         fc:d3:60:38:61:11:f4:d9:18:91:ff:f4:5a:5d:5e:2f:f0:40:
         34:8e:ef:fe:eb:23:53:8f:57:1f:06:6e:5f:49:f9:76:76:e2:
         f8:fa:2b:ab:a6:2d:8d:e8:0d:be:ba:15:fc:c9:75:85:79:cd:
         ee:31:22:23:4a:88:5c:2e:33:5b:5d:7d:21:b4:af:d7:00:73:
         f7:ac:9a:b5:f3:94:57:43:62:d9:d4:00:36:05:0a:11:6a:59:
         99:06:97:56:8b:3c:e4:fd:97:2e:a1:72:ea:fb:30:df:3b:d3:
         d4:83:f1:37:e3:ca:77:7e:29:4a:0a:42:36:43:60:83:d6:bd:
         e6:40:79:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----