Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/qEIzrUmIgqkW8iOVa1heW7QJwsU.cer
File:                     qEIzrUmIgqkW8iOVa1heW7QJwsU.cer (raw, json)
Hash identifier:          wM6C0ZOd8JARno0RuHAoRwpC+fRkvwfIzdvW+BKK4oI=
Subject key identifier:   A8:42:33:AD:49:88:82:A9:16:F2:23:95:6B:58:5E:5B:B4:09:C2:C5
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018D596A6A581689BD140B461CBDE10AFA14
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/7f/c29057-7eb2-4ec0-b227-02cddbd2e190/1/qEIzrUmIgqkW8iOVa1heW7QJwsU.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/7f/c29057-7eb2-4ec0-b227-02cddbd2e190/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Tue 30 Jan 2024 08:09:22 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    AS: 207229

Validation:               Failed, certificate revoked on Tue 30 Jan 2024 11:09:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8d:59:6a:6a:58:16:89:bd:14:0b:46:1c:bd:e1:0a:fa:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan 30 08:09:22 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=a84233ad498882a916f223956b585e5bb409c2c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:ec:32:2f:bc:5b:b0:ee:1e:41:1a:00:62:15:
                    d5:99:06:91:fa:52:63:60:d4:1c:40:43:85:ae:cc:
                    3f:30:e1:29:8f:06:29:6b:25:5d:2a:90:7a:3f:b8:
                    3d:39:d7:c9:c6:6b:e1:bf:af:95:41:e0:ea:a7:3b:
                    5e:4e:5a:76:a2:55:59:98:c7:12:db:7e:de:40:91:
                    79:f5:93:02:b1:27:b9:23:f9:c7:2a:cf:c3:bb:89:
                    85:e0:16:40:89:0e:fb:bc:2a:22:68:be:af:e4:e7:
                    af:9c:e4:e7:a8:66:62:fd:df:14:d5:96:73:9b:36:
                    aa:ff:0a:83:5f:f2:66:df:ff:21:92:b7:ec:de:60:
                    5d:b2:ec:59:78:2a:2b:19:ac:bc:b3:04:33:b8:69:
                    7e:ce:fd:f2:e2:b2:14:f8:43:e8:da:aa:2f:d7:33:
                    e9:3d:b9:38:69:46:01:f9:11:7c:95:cd:91:3c:4e:
                    2e:3f:68:53:7f:40:d3:8a:15:6d:3a:0d:da:d7:58:
                    64:d6:73:d9:23:5a:b0:b4:53:8b:0f:5b:dd:de:bc:
                    45:ec:59:af:9f:3b:57:da:e8:8d:2c:35:80:fe:13:
                    24:35:91:ef:bd:09:ba:18:f7:a9:6d:97:1e:af:8d:
                    b0:05:2e:b2:57:8d:2a:cc:f0:d5:38:86:6d:ba:55:
                    b6:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:42:33:AD:49:88:82:A9:16:F2:23:95:6B:58:5E:5B:B4:09:C2:C5
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/c29057-7eb2-4ec0-b227-02cddbd2e190/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/c29057-7eb2-4ec0-b227-02cddbd2e190/1/qEIzrUmIgqkW8iOVa1heW7QJwsU.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  207229

    Signature Algorithm: sha256WithRSAEncryption
         b0:6c:71:1e:d8:bf:fc:63:5d:62:12:bd:81:9e:f8:d7:e8:e1:
         af:c6:23:78:21:b4:79:6d:d4:74:42:e8:1c:c0:b9:8a:14:da:
         78:77:7a:26:52:7c:36:ab:38:3b:30:72:55:5a:90:6f:f0:45:
         99:2d:35:bd:f7:62:e9:5e:f3:9e:9e:7e:54:87:a8:57:b4:61:
         d8:1e:37:9f:10:49:b9:13:24:5b:f5:de:fb:3c:25:15:f3:8d:
         4d:f4:80:5f:f4:a3:67:97:62:2d:e3:48:aa:c6:d2:0d:e6:57:
         4b:6f:26:3d:62:6a:5d:1e:79:70:8a:e9:f5:e3:79:22:e7:ca:
         70:16:5f:1c:1b:c3:93:20:7f:0a:55:c7:3e:79:cc:3d:68:af:
         a9:95:87:4a:ef:92:68:06:ce:74:5b:eb:bb:2a:de:37:e4:81:
         1e:a8:be:38:ad:ff:94:a5:0b:2f:66:aa:84:1e:e2:6b:69:67:
         45:75:97:a2:49:ad:dc:c7:99:4c:77:a1:fb:c7:fd:d8:cd:c3:
         69:85:16:e8:d9:17:c4:99:49:cf:b4:9b:43:e3:33:78:de:6b:
         e2:5e:3a:47:83:49:4b:74:ab:53:c9:61:41:cc:89:be:14:e5:
         c3:27:30:43:59:6a:b3:78:fe:f0:02:3f:b0:ae:9e:a2:d3:02:
         0b:fa:5b:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----