Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/wY6NVAsYulLz6Pi72B479wory4U.cer
File:                     wY6NVAsYulLz6Pi72B479wory4U.cer (raw, json)
Hash identifier:          oVLDowXzJZ1PekIxpdvKV8ewPLYq8jk5pG/bghBdf1Y=
Subject key identifier:   C1:8E:8D:54:0B:18:BA:52:F3:E8:F8:BB:D8:1E:3B:F7:0A:2B:CB:85
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01911E986F64FB73E64F6563B04D2D8B6CEB
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rsync.paas.rpki.ripe.net/repository/7f5d2a1b-cacc-4e22-8af2-9f20a9329bcb/0/C18E8D540B18BA52F3E8F8BBD81E3BF70A2BCB85.mft
caRepository:             rsync://rsync.paas.rpki.ripe.net/repository/7f5d2a1b-cacc-4e22-8af2-9f20a9329bcb/0/
Notify URL:               https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before:   Sun 04 Aug 2024 18:13:12 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    AS: 214757

Validation:               Failed, certificate revoked on Thu 05 Sep 2024 18:25:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:1e:98:6f:64:fb:73:e6:4f:65:63:b0:4d:2d:8b:6c:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Aug  4 18:13:12 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=c18e8d540b18ba52f3e8f8bbd81e3bf70a2bcb85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:ae:0a:5e:86:c1:65:b3:35:6b:be:ba:99:6c:
                    0a:04:5d:65:a2:49:44:f1:85:86:c6:99:84:f6:f8:
                    01:bb:90:21:42:1f:ed:a3:74:ff:f4:e6:8a:b6:bc:
                    ff:29:36:5f:b4:a2:dd:c9:b3:21:a9:34:c1:60:e9:
                    4d:5b:fc:bb:7d:3a:87:8a:3b:1b:df:fb:3c:f5:fa:
                    cc:14:e0:cd:ca:3d:bd:c2:77:18:98:fe:f8:e3:cb:
                    ac:38:a1:1a:04:13:e8:ba:98:65:37:a2:31:2f:e0:
                    d9:1e:3d:f9:19:78:fe:2c:85:cd:f8:33:b0:a9:4f:
                    95:c5:d8:29:37:01:72:34:01:6e:b7:bc:8e:6e:5c:
                    5b:7e:91:1a:36:fe:cf:08:bd:e2:a8:7f:41:1f:21:
                    53:63:ea:9e:9e:7d:92:b0:6c:d1:2f:40:1f:f8:4f:
                    91:2c:7a:1a:4a:18:9c:53:6e:57:f2:13:0a:72:0b:
                    78:fa:46:56:c6:b4:5c:d1:6a:68:4c:5d:e1:f4:73:
                    9c:26:b3:fa:9e:85:b4:e2:50:10:59:35:b8:a8:dc:
                    61:d3:fd:3e:23:ad:15:a6:15:29:37:3a:0a:62:0f:
                    11:15:64:62:2a:c1:ce:d7:d6:e4:06:7f:d3:02:05:
                    27:31:8d:9b:20:1e:1a:46:b7:86:a0:b6:5c:6d:3e:
                    06:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:8E:8D:54:0B:18:BA:52:F3:E8:F8:BB:D8:1E:3B:F7:0A:2B:CB:85
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/7f5d2a1b-cacc-4e22-8af2-9f20a9329bcb/0/
                RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/7f5d2a1b-cacc-4e22-8af2-9f20a9329bcb/0/C18E8D540B18BA52F3E8F8BBD81E3BF70A2BCB85.mft
                RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  214757

    Signature Algorithm: sha256WithRSAEncryption
         38:dd:ff:56:82:73:a5:a0:61:07:11:95:e0:52:2e:0f:df:c7:
         8a:d5:71:c2:26:39:48:79:09:3c:95:44:12:25:59:35:00:63:
         a2:b6:23:bc:10:13:3e:e7:30:aa:7c:ec:b1:8d:51:0b:4d:ba:
         5f:76:26:27:e7:04:55:ba:b5:c8:08:16:bf:1e:7c:66:71:c9:
         f5:08:72:4d:8e:ff:f5:60:42:35:76:35:ba:18:78:07:88:24:
         b5:3b:7d:47:df:94:b8:cb:40:c7:22:91:47:e7:0c:7a:00:45:
         ba:b2:a3:d1:de:5b:d2:93:33:23:92:2f:16:50:f2:2f:7c:3e:
         f1:dd:6c:9a:e2:f4:30:5d:b0:fb:ec:d5:f8:73:84:25:e9:3f:
         40:ad:b2:c9:42:c7:cb:f7:06:ef:c9:88:a1:f7:6b:83:86:92:
         58:1d:e5:7c:d5:30:9f:8b:bb:62:5a:d7:d3:e2:cb:f5:1b:53:
         b3:45:26:82:b9:a9:69:19:5c:bc:12:6d:f3:bf:76:3a:37:3c:
         e1:0a:33:ec:eb:f1:1e:8c:de:0f:c3:d8:46:d0:d2:90:6c:56:
         67:3d:b2:f4:ea:47:f5:ab:5d:1f:d9:68:59:e0:4c:83:b6:e2:
         ae:40:71:e5:fb:52:82:b1:a4:64:91:15:f5:bb:3c:d5:47:33:
         29:c5:6b:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----