Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/wGOG8UWOpiU7G1yj-x8TXFjLMxg.cer
File:                     wGOG8UWOpiU7G1yj-x8TXFjLMxg.cer (raw, json)
Hash identifier:          u7JakQX4kh9yLDf+5REXVDHM5DVQAUZvkh/do5OAbqQ=
Subject key identifier:   C0:63:86:F1:45:8E:A6:25:3B:1B:5C:A3:FB:1F:13:5C:58:CB:33:18
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018E132924974C0D8E6D19D4D3C111F1ACEA
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/3e/75e648-7de2-4e6d-b901-760b408cb0eb/1/wGOG8UWOpiU7G1yj-x8TXFjLMxg.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/3e/75e648-7de2-4e6d-b901-760b408cb0eb/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 06 Mar 2024 09:47:27 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    AS: 207487
                          IP: 2001:678:c18::/48
                          IP: 2a14:14c0::/29

Validation:               Failed, certificate revoked on Fri 03 May 2024 00:08:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8e:13:29:24:97:4c:0d:8e:6d:19:d4:d3:c1:11:f1:ac:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Mar  6 09:47:27 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=c06386f1458ea6253b1b5ca3fb1f135c58cb3318
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:17:02:1d:94:c9:d5:6b:fd:85:0a:bd:c7:ea:
                    3e:2e:51:8e:5b:84:f1:7e:4f:29:67:e4:ed:af:6d:
                    fe:4c:f6:1a:0d:2e:94:7d:da:7a:4d:f7:fd:8e:a9:
                    14:a8:71:08:7c:97:c4:08:43:e6:65:27:ec:2c:1a:
                    b8:3f:f6:b3:2c:fc:51:fe:66:c4:71:b4:a1:ff:38:
                    18:cd:7e:16:6a:3e:07:55:ef:18:8e:3d:e1:0b:cc:
                    cb:61:8d:05:99:00:8e:ca:73:ee:df:85:89:9f:aa:
                    7e:92:c1:8b:b7:52:14:93:c5:01:57:61:6e:89:ed:
                    a8:1a:ef:b7:cb:a6:29:d4:84:ce:d5:99:83:9e:14:
                    f5:8a:7f:29:67:61:07:da:34:62:95:12:36:64:f9:
                    e8:3f:06:c8:ec:85:80:d1:15:3a:76:3c:90:2c:26:
                    d0:4c:08:b0:93:90:c6:55:28:66:02:d3:25:58:a2:
                    73:3c:12:29:84:08:03:e6:6f:18:7c:09:db:06:70:
                    d5:47:93:b6:13:e4:f6:8e:f6:33:9e:be:cc:2b:43:
                    27:81:b3:31:33:f9:94:ab:9c:9d:3f:98:42:fe:87:
                    d4:fe:2d:8e:69:8b:a8:ba:e6:80:63:49:bc:63:98:
                    8a:53:c8:ba:1c:b1:70:be:a4:3a:3d:8c:bf:68:1a:
                    6a:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:63:86:F1:45:8E:A6:25:3B:1B:5C:A3:FB:1F:13:5C:58:CB:33:18
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/75e648-7de2-4e6d-b901-760b408cb0eb/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/75e648-7de2-4e6d-b901-760b408cb0eb/1/wGOG8UWOpiU7G1yj-x8TXFjLMxg.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:678:c18::/48
                  2a14:14c0::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  207487

    Signature Algorithm: sha256WithRSAEncryption
         1b:49:10:7c:d1:59:d2:73:a9:39:78:a6:42:c6:9b:db:64:b3:
         ff:19:c7:46:27:db:0a:f5:4d:8e:f9:fd:35:f6:12:e4:88:b8:
         92:56:75:34:b6:a4:cf:36:5b:62:12:f1:f5:11:5d:95:18:6b:
         2b:70:a4:69:9d:51:7f:96:c8:7b:ef:ae:6f:d7:e9:cf:70:59:
         d6:8e:29:55:f0:74:62:df:92:f8:dc:44:02:66:be:a0:ab:fc:
         64:9f:84:41:b7:10:0b:c7:eb:66:e1:4d:2b:bc:53:11:2e:90:
         b1:4d:e7:14:a8:81:21:15:43:13:08:9b:8d:99:55:6c:88:01:
         5d:4e:c9:d0:66:99:d0:94:ac:83:5c:02:6d:32:ee:b1:64:a5:
         be:5a:ae:23:b4:f0:a4:26:4a:a5:a0:0f:2f:7e:4a:db:72:01:
         f3:25:17:e5:38:f7:58:f1:8f:a8:2d:89:98:2e:fe:92:99:1c:
         5f:bc:a1:70:94:97:32:08:80:bf:06:17:91:e9:9e:6d:9b:a9:
         51:8f:f5:6b:6a:68:92:1e:96:87:ad:1f:5a:32:8e:2f:55:02:
         48:19:21:30:ec:be:6a:74:0b:d0:b7:73:b7:2a:dd:e6:ef:94:
         57:de:9e:2b:3b:94:cb:28:0c:7e:ca:3a:81:10:22:51:22:a8:
         0b:b2:2d:1f
-----BEGIN CERTIFICATE-----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