Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/sHWfQe8GPOysdde3JgeW50FjFGw.cer
File:                     sHWfQe8GPOysdde3JgeW50FjFGw.cer (raw, json)
Hash identifier:          5M34SxJGbqiAl5OOIp7ZBzhpnh4cnqHhRhdGL6W1b7g=
Subject key identifier:   B0:75:9F:41:EF:06:3C:EC:AC:75:D7:B7:26:07:96:E7:41:63:14:6C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018881DEB96490F706AF02523DB1944CB883
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/2d/d94749-1798-4ed1-be4b-3a915325b846/1/sHWfQe8GPOysdde3JgeW50FjFGw.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/2d/d94749-1798-4ed1-be4b-3a915325b846/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sat 03 Jun 2023 15:27:17 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    AS: 211431

Validation:               Failed, certificate revoked on Fri 09 Jun 2023 16:04:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:81:de:b9:64:90:f7:06:af:02:52:3d:b1:94:4c:b8:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jun  3 15:27:17 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=b0759f41ef063cecac75d7b7260796e74163146c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:5a:ed:ea:10:72:bf:8b:9b:ab:dc:23:5d:9a:
                    69:a7:ba:43:d1:37:a2:8f:d5:7d:f8:3d:18:c0:c9:
                    92:5d:02:b8:fd:65:16:9e:b7:5f:0f:e2:c9:7a:ad:
                    f1:e6:49:db:f0:db:99:bd:f3:05:0d:ef:a3:d6:f0:
                    dc:13:84:bf:81:28:94:4f:6d:81:21:15:8e:d7:8e:
                    8f:e2:1a:18:7a:d2:b5:99:f6:17:08:27:51:9a:a3:
                    11:57:0c:db:26:e0:e2:92:64:ad:b0:76:73:c4:c2:
                    50:50:c7:bd:28:3c:f4:5a:9a:b7:23:bb:d0:c6:62:
                    34:dc:0d:e5:b7:34:74:57:53:03:f1:50:db:e7:7b:
                    a7:9b:65:87:0c:d5:5f:53:ec:7e:79:c4:aa:15:30:
                    20:db:9f:c8:e8:1e:62:3c:ac:eb:8c:cf:8e:1a:f7:
                    00:a0:f2:3a:5d:55:f3:38:68:4d:ec:75:18:06:f2:
                    70:34:b1:a1:f1:6e:1a:39:b4:0a:ee:f0:b0:bb:1a:
                    7a:64:ca:ca:c9:b8:4c:06:eb:c7:df:da:e0:38:fa:
                    6d:60:d6:f8:a8:b1:5d:fa:a7:f0:fc:be:c8:65:40:
                    34:3d:d2:68:62:57:0d:4f:37:d5:88:cc:cd:c6:35:
                    87:b4:d2:c3:e8:34:a5:59:8c:fe:6e:d0:d0:3e:1f:
                    60:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:75:9F:41:EF:06:3C:EC:AC:75:D7:B7:26:07:96:E7:41:63:14:6C
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/d94749-1798-4ed1-be4b-3a915325b846/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/d94749-1798-4ed1-be4b-3a915325b846/1/sHWfQe8GPOysdde3JgeW50FjFGw.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  211431

    Signature Algorithm: sha256WithRSAEncryption
         a9:bc:62:f6:2d:a5:76:40:15:82:83:11:2a:9c:74:d7:74:7e:
         97:37:f3:fe:43:04:ab:23:da:9c:e7:cb:2c:17:b8:f5:90:98:
         28:f2:80:d4:27:e3:02:c5:e6:b3:33:48:f4:d6:28:a6:80:f1:
         44:5a:13:76:f4:d1:d8:d0:1a:ff:8a:99:33:eb:a2:42:e0:3d:
         c3:2a:49:77:f7:d4:3a:eb:68:48:4c:28:a6:83:49:d1:59:96:
         e7:b3:c7:8c:ae:88:c2:04:5b:83:33:2d:7b:7f:67:20:e7:ff:
         59:15:e4:5d:bd:fb:38:62:a3:84:85:65:89:c0:0b:22:f3:65:
         31:f3:a4:19:f2:2d:02:22:82:d3:9e:be:11:f5:5f:e9:de:bf:
         ce:1f:2a:c2:28:4b:e3:f9:22:e6:f9:b3:37:b7:70:34:e2:e9:
         84:13:27:ab:f7:60:07:1a:38:2b:bd:48:58:12:37:29:7c:c0:
         92:e5:93:5d:aa:6e:4b:b0:40:4d:eb:fe:fb:d3:23:1b:5c:73:
         27:e5:95:24:b7:3d:51:d7:52:a0:c3:5e:ca:07:da:14:bb:bc:
         a6:be:de:f3:55:14:ac:2a:02:14:01:08:96:ad:68:47:5c:86:
         b8:f9:09:df:65:91:91:c7:12:8d:c4:b5:32:6a:13:1f:a0:d6:
         a1:77:ec:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----