Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/uGhYIhkAamAKvU_INiadaIGqucM.cer
File:                     uGhYIhkAamAKvU_INiadaIGqucM.cer (raw, json)
Hash identifier:          GLNU5Be1FgK361Dscu6sjUMA+LegC4iHZkF8My2RDws=
Subject key identifier:   B8:68:58:22:19:00:6A:60:0A:BD:4F:C8:36:26:9D:68:81:AA:B9:C3
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01906910DD1EE447B699E9F7834D33E604CD
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/27/B868582219006A600ABD4FC836269D6881AAB9C3.mft
caRepository:             rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/27/
Notify URL:               https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before:   Sun 30 Jun 2024 12:13:51 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    AS: 216055

Validation:               Failed, certificate revoked on Sun 07 Jul 2024 18:40:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:69:10:dd:1e:e4:47:b6:99:e9:f7:83:4d:33:e6:04:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jun 30 12:13:51 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=b868582219006a600abd4fc836269d6881aab9c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:7e:37:74:5f:9a:18:f1:a5:45:0b:84:bb:b6:
                    52:be:7b:1c:5c:94:b5:32:57:25:fe:43:b2:b4:9a:
                    6c:10:f0:17:14:fb:89:b9:50:35:c7:99:7e:45:54:
                    0d:73:fa:3f:73:01:66:1e:99:74:69:ce:57:79:de:
                    43:32:4e:b5:24:18:66:ef:57:a9:bf:5c:d5:df:8b:
                    98:3f:c9:37:1d:09:ec:21:20:78:20:57:6e:da:71:
                    33:b9:92:f8:64:73:5c:4e:be:15:9a:aa:90:b7:c4:
                    53:97:f6:fc:c8:12:46:5a:56:a0:11:81:f2:4c:72:
                    24:ff:c4:17:74:f3:d1:ed:11:74:62:4f:fa:86:3d:
                    b7:f0:c7:20:22:94:f1:45:96:b8:7e:c2:47:63:33:
                    95:24:7e:d2:f6:64:ab:eb:e2:de:d6:15:53:b4:84:
                    fc:22:2b:c1:71:79:a6:d5:22:7e:9f:d7:a0:b2:fa:
                    b2:ae:9a:74:a8:82:19:0e:5e:28:6b:aa:b0:3f:39:
                    e2:28:32:7e:8c:cb:ee:36:26:e1:31:23:d9:1d:5f:
                    71:16:2d:15:43:e6:7e:ae:5b:4e:1e:1b:03:91:0a:
                    02:44:5c:f6:81:2b:89:83:02:7e:9f:94:90:5a:ed:
                    fd:15:a1:d6:07:d3:41:7d:04:9c:7d:ef:2e:30:33:
                    84:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:68:58:22:19:00:6A:60:0A:BD:4F:C8:36:26:9D:68:81:AA:B9:C3
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/27/
                RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/27/B868582219006A600ABD4FC836269D6881AAB9C3.mft
                RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  216055

    Signature Algorithm: sha256WithRSAEncryption
         50:bf:88:3d:45:68:0f:e7:5c:d8:f3:29:40:59:df:da:be:f0:
         d1:d9:e5:ee:ba:c0:b1:0a:38:f7:28:89:0e:af:53:18:57:be:
         ee:de:4e:95:57:33:a1:51:71:77:97:16:f5:5e:90:30:a8:55:
         45:c4:e4:0a:fe:9e:d9:5b:b6:84:fe:97:a0:ea:4c:8f:b3:ca:
         dc:2f:1c:a8:5e:9b:a0:a8:b7:77:30:c8:df:05:12:7d:9e:b5:
         f5:25:dd:5f:c5:c8:ea:36:b6:b4:1b:b3:03:95:15:cf:ce:36:
         df:68:0d:9e:a2:fc:9d:ca:15:2f:4d:cd:03:f6:8c:0f:82:67:
         d0:83:ae:66:4f:12:a3:7c:77:e0:21:16:43:04:f2:e0:c4:93:
         04:5e:8d:b8:4b:b4:86:63:e6:1a:50:4e:4b:38:0c:9d:a0:3b:
         86:bd:f3:5f:8f:b1:5e:37:4c:8f:ef:01:f0:1f:b7:89:fa:e6:
         b5:bb:30:fd:f7:ca:ab:bb:01:1e:05:40:95:55:02:55:ff:38:
         83:59:6b:a5:3a:b2:86:99:90:a4:84:52:b3:18:e2:07:d2:51:
         45:30:d9:86:55:9c:cb:51:7d:73:27:9a:62:5e:0e:93:37:93:
         c0:38:f2:8b:43:6c:9b:e8:fa:e0:77:5f:b8:6a:39:12:cf:4b:
         1c:e6:a0:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----