Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/tghfQCZkwtofBaR46yOCzaa_-l4.cer
File:                     tghfQCZkwtofBaR46yOCzaa_-l4.cer (raw, json)
Hash identifier:          ZbH4UV0P74xWT/Oun2sojMbXWqBt/XKe4Vq2oJca+ak=
Subject key identifier:   B6:08:5F:40:26:64:C2:DA:1F:05:A4:78:EB:23:82:CD:A6:BF:FA:5E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0188456F07AA049E405F0ED55A711C973A83
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.co/repo/August/2/B6085F402664C2DA1F05A478EB2382CDA6BFFA5E.mft
caRepository:             rsync://rpki.co/repo/August/2/
Notify URL:               https://rrdp.rpki.co/rrdp/notification.xml
Certificate not before:   Mon 22 May 2023 21:48:04 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    AS: 51930

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:45:6f:07:aa:04:9e:40:5f:0e:d5:5a:71:1c:97:3a:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: May 22 21:48:04 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=b6085f402664c2da1f05a478eb2382cda6bffa5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:8d:7d:31:28:aa:d4:e8:13:b0:0f:41:8c:43:
                    cb:63:16:a3:17:f0:63:49:b3:ab:c6:53:71:ed:2c:
                    fd:d4:76:61:43:20:0c:05:83:b8:58:4c:fd:40:d4:
                    75:7a:7b:bd:11:c8:04:cf:ab:8e:5d:f8:4d:af:92:
                    ad:d0:8e:49:24:89:64:ee:8d:0a:4a:26:07:55:95:
                    f8:ea:bf:c4:d4:3a:77:21:59:4c:86:2e:49:c0:de:
                    08:1f:f0:b7:21:40:51:db:b4:0d:ff:91:b3:79:1d:
                    86:b0:dc:6c:64:37:2e:ff:d9:0a:6f:71:86:c9:06:
                    4f:c3:56:a0:16:d2:06:08:fb:ce:dc:8c:23:cd:cf:
                    6d:b6:da:06:80:fd:ab:56:66:9f:95:b0:b5:5f:06:
                    38:7f:ca:64:55:39:83:b3:36:01:3f:3c:aa:4f:d6:
                    2b:52:b1:7e:40:89:41:23:d9:1c:b0:a7:fe:84:26:
                    0c:3d:84:33:28:ea:6d:9e:14:f1:84:42:8b:84:f0:
                    70:72:a2:6f:f5:f6:ee:ff:8f:30:f2:84:2b:40:98:
                    bc:02:d7:47:b3:b2:a1:90:e3:81:da:19:6c:40:4b:
                    cb:15:7c:7c:bf:d7:8c:4e:13:7f:42:dd:23:49:85:
                    f8:e8:14:b1:91:28:cd:7f:8f:5d:01:90:58:16:13:
                    db:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:08:5F:40:26:64:C2:DA:1F:05:A4:78:EB:23:82:CD:A6:BF:FA:5E
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.co/repo/August/2/
                RPKI Manifest - URI:rsync://rpki.co/repo/August/2/B6085F402664C2DA1F05A478EB2382CDA6BFFA5E.mft
                RPKI Notify - URI:https://rrdp.rpki.co/rrdp/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  51930

    Signature Algorithm: sha256WithRSAEncryption
         9c:67:19:48:47:ed:fa:00:a1:95:2d:6f:11:1c:b3:33:d6:ca:
         10:ce:0f:5d:26:e1:20:cb:3d:cf:69:d0:dd:3f:88:0f:75:0c:
         5a:7e:ad:77:34:d8:59:90:db:56:9f:43:44:52:a1:ef:98:80:
         fc:3a:f2:df:c2:e8:4d:f0:74:f9:b5:73:ae:36:db:db:d6:68:
         b9:05:39:55:f1:59:c8:a4:b5:ad:2a:2c:86:08:a7:da:e0:41:
         44:34:75:1c:a2:d5:db:bb:ea:27:a1:66:cc:dc:37:0c:27:76:
         50:6e:76:94:26:c8:8e:f8:5f:b5:ff:e5:1f:52:22:90:da:ed:
         44:d1:5f:eb:d8:01:62:4f:11:98:e8:7b:91:80:6f:ae:23:c5:
         9c:01:bf:f0:c8:63:38:69:fb:df:02:c2:39:ca:ca:88:95:ab:
         32:c7:40:a7:82:34:65:a6:b4:0e:8b:af:fe:64:8e:91:da:4b:
         e7:c8:1a:10:b9:69:4d:b1:fc:db:d9:27:51:d6:c7:ce:72:2b:
         ab:49:26:f6:42:61:f2:97:05:29:5d:ae:44:6e:34:b8:9e:1e:
         03:bb:07:0c:eb:d4:ac:89:e7:d9:9a:e3:81:5a:82:45:e5:0b:
         83:cb:6c:0e:db:e7:f7:d9:25:ed:6f:50:45:d0:eb:4d:15:5e:
         cc:7b:c9:f7
-----BEGIN CERTIFICATE-----
MIIFGzCCBAOgAwIBAgISAYhFbweqBJ5AXw7VWnEclzqDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjMwNTIyMjE0ODA0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNjA4NWY0MDI2NjRjMmRhMWYwNWE0NzhlYjIzODJjZGE2YmZmYTVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArY19MSiq1OgTsA9BjEPLYxajF/Bj
SbOrxlNx7Sz91HZhQyAMBYO4WEz9QNR1enu9EcgEz6uOXfhNr5Kt0I5JJIlk7o0K
SiYHVZX46r/E1Dp3IVlMhi5JwN4IH/C3IUBR27QN/5GzeR2GsNxsZDcu/9kKb3GG
yQZPw1agFtIGCPvO3Iwjzc9tttoGgP2rVmaflbC1XwY4f8pkVTmDszYBPzyqT9Yr
UrF+QIlBI9kcsKf+hCYMPYQzKOptnhTxhEKLhPBwcqJv9fbu/48w8oQrQJi8AtdH
s7KhkOOB2hlsQEvLFXx8v9eMThN/Qt0jSYX46BSxkSjNf49dAZBYFhPbCQIDAQAB
o4ICJzCCAiMwHQYDVR0OBBYEFLYIX0AmZMLaHwWkeOsjgs2mv/peMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwgcwGCCsGAQUFBwELBIG/MIG8MCoGCCsGAQUFBzAFhh5yc3lu
YzovL3Jwa2kuY28vcmVwby9BdWd1c3QvMi8wVgYIKwYBBQUHMAqGSnJzeW5jOi8v
cnBraS5jby9yZXBvL0F1Z3VzdC8yL0I2MDg1RjQwMjY2NEMyREExRjA1QTQ3OEVC
MjM4MkNEQTZCRkZBNUUubWZ0MDYGCCsGAQUFBzANhipodHRwczovL3JyZHAucnBr
aS5jby9ycmRwL25vdGlmaWNhdGlvbi54bWwwWQYDVR0fBFIwUDBOoEygSoZIcnN5
bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC9LcFNvM1ZWSzV3
RUhJSm5IQzJRSFZWM2Q1bWsuY3JsMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
GgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDAMraMA0GCSqGSIb3DQEBCwUAA4IBAQCc
ZxlIR+36AKGVLW8RHLMz1soQzg9dJuEgyz3PadDdP4gPdQxafq13NNhZkNtWn0NE
UqHvmID8OvLfwuhN8HT5tXOuNtvb1mi5BTlV8VnIpLWtKiyGCKfa4EFENHUcotXb
u+onoWbM3DcMJ3ZQbnaUJsiO+F+1/+UfUiKQ2u1E0V/r2AFiTxGY6HuRgG+uI8Wc
Ab/wyGM4afvfAsI5ysqIlasyx0CngjRlprQOi6/+ZI6R2kvnyBoQuWlNsfzb2SdR
1sfOciurSSb2QmHylwUpXa5EbjS4nh4DuwcM69SsiefZmuOBWoJF5QuDy2wO2+f3
2SXtb1BF0OtNFV7Me8n3
-----END CERTIFICATE-----
Generated at Sun Oct 15 04:10:49 2023 by rpki-client on console-fra.rpki-client.org