Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/wiYjo1NhfTSA47HBf3AZfvkdA0Q.cer
File:                     wiYjo1NhfTSA47HBf3AZfvkdA0Q.cer (raw, json)
Hash identifier:          GrbaDuSm5pelh9SE1src0DBZO7kYl1sc5f0+fewKd8I=
Subject key identifier:   C2:26:23:A3:53:61:7D:34:80:E3:B1:C1:7F:70:19:7E:F9:1D:03:44
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018845719E7D3E3B259D0FD8A53AB70EAABB
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.co/repo/AS199762/0/C22623A353617D3480E3B1C17F70197EF91D0344.mft
caRepository:             rsync://rpki.co/repo/AS199762/0/
Notify URL:               https://rrdp.rpki.co/rrdp/notification.xml
Certificate not before:   Mon 22 May 2023 21:50:54 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    AS: 199376
                          AS: 199762

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:45:71:9e:7d:3e:3b:25:9d:0f:d8:a5:3a:b7:0e:aa:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: May 22 21:50:54 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=c22623a353617d3480e3b1c17f70197ef91d0344
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:71:ff:7b:d0:a7:b6:59:d0:bc:a9:f5:d4:24:
                    b2:8a:19:b0:9f:9e:3e:76:a0:d8:27:f8:8b:08:31:
                    12:21:a4:57:d6:04:6a:70:6f:05:a3:90:cf:6f:b1:
                    8a:31:39:90:18:8b:5c:43:9a:4b:e4:1f:1a:e3:59:
                    6f:86:8d:f4:68:d8:3a:e2:52:2e:f0:f9:13:d0:5b:
                    43:b9:34:31:a4:95:33:d4:37:4f:11:7b:24:86:12:
                    bd:f8:74:db:b6:47:a5:4d:35:67:42:d1:52:09:02:
                    67:cf:5d:ce:2b:84:f3:fd:27:ac:26:be:34:ec:c1:
                    b8:5a:68:c0:da:8e:14:79:d3:00:17:ab:a0:fb:d1:
                    42:6a:74:cd:63:fb:ab:18:71:8d:6c:fb:47:26:0a:
                    ec:82:5f:9d:1b:e7:b5:96:ec:ef:c9:38:0e:15:7c:
                    82:63:20:b2:75:5e:5a:05:3e:8e:a6:6f:73:9f:64:
                    86:b3:d2:ff:1e:b0:64:54:27:d9:33:cb:0b:9d:e1:
                    ab:1f:bd:15:0d:ec:87:e1:4e:b0:1a:11:57:aa:86:
                    35:82:45:9b:29:58:fd:c0:1a:08:08:1c:48:76:89:
                    86:8c:96:b8:37:67:c3:a5:81:0d:a7:c7:96:26:6f:
                    f2:9d:93:ab:ea:bc:ba:d7:e3:87:ea:83:68:d5:37:
                    8b:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:26:23:A3:53:61:7D:34:80:E3:B1:C1:7F:70:19:7E:F9:1D:03:44
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.co/repo/AS199762/0/
                RPKI Manifest - URI:rsync://rpki.co/repo/AS199762/0/C22623A353617D3480E3B1C17F70197EF91D0344.mft
                RPKI Notify - URI:https://rrdp.rpki.co/rrdp/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  199376
                  199762

    Signature Algorithm: sha256WithRSAEncryption
         81:d1:47:26:7f:10:2d:50:62:d1:40:d0:d0:b9:13:e3:aa:0f:
         c2:95:3f:0e:ea:07:14:2c:c7:38:7d:cf:80:5d:14:86:49:35:
         b6:0b:48:d4:e4:b6:50:d0:b5:9e:2a:f7:47:2e:08:57:b8:3e:
         fd:d9:79:57:6d:26:ed:20:68:f6:40:43:cf:08:aa:88:06:32:
         a2:e8:ff:6c:9d:eb:9e:99:df:b4:0e:c9:48:43:bf:84:da:c3:
         d4:8c:d7:1d:10:7f:b0:ed:fe:33:a9:89:2e:76:f8:b0:f7:22:
         b1:f7:05:fe:8d:5f:ef:c0:2c:47:36:b7:cb:a8:ec:37:e0:02:
         02:71:7b:f8:c8:9e:58:a9:7e:82:8c:a0:4c:13:69:18:10:1c:
         26:fe:06:ed:66:69:4b:21:c9:bb:51:e2:c5:d8:d1:ed:4a:10:
         4a:92:72:e2:e9:00:df:50:76:8b:e8:d3:5a:fa:10:0c:75:e7:
         fd:8d:8a:d3:08:80:5d:36:61:cb:d7:bf:18:eb:e7:02:4e:27:
         8d:4c:b7:01:03:ee:e9:cf:2e:de:89:b1:be:75:89:82:e3:64:
         dc:08:b0:8c:ea:f3:59:23:c6:2a:ac:34:45:66:ce:a0:55:b0:
         51:79:bd:be:8a:08:a1:75:2d:f2:29:e9:15:2e:49:cd:ae:78:
         e9:83:0d:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 29 10:55:27 2023 by rpki-client on console-fra.rpki-client.org