Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/xk1nb_ZcznBj31ETMb-PaM10Nm4.cer
File:                     xk1nb_ZcznBj31ETMb-PaM10Nm4.cer (raw, json)
Hash identifier:          NMqrtm9oVBZKvPF5RNLjdCWA90YqEyQmGBm7wpQfAnk=
Subject key identifier:   C6:4D:67:6F:F6:5C:CE:70:63:DF:51:13:31:BF:8F:68:CD:74:36:6E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01906910F6D48E57D5846E9D830CB3AE3597
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/14/C64D676FF65CCE7063DF511331BF8F68CD74366E.mft
caRepository:             rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/14/
Notify URL:               https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before:   Sun 30 Jun 2024 12:13:57 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    AS: 211998

Validation:               Failed, certificate revoked on Sun 07 Jul 2024 18:52:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:69:10:f6:d4:8e:57:d5:84:6e:9d:83:0c:b3:ae:35:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jun 30 12:13:57 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=c64d676ff65cce7063df511331bf8f68cd74366e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:48:a9:73:f3:9a:a2:81:3a:fc:9e:41:0a:87:
                    c7:6e:dc:a3:7f:ac:88:91:53:4c:6a:cf:63:c3:25:
                    04:3f:c6:e6:0d:87:5d:71:b3:8b:d8:28:71:40:d8:
                    3c:a2:7e:94:c2:84:20:db:bf:d3:64:3f:8b:ca:2c:
                    4d:1f:af:d5:18:3a:35:4a:e8:73:f5:08:0d:ff:cb:
                    89:1d:2f:11:11:19:08:50:81:f1:55:62:62:da:fb:
                    40:b7:61:88:aa:bd:cd:0f:54:b4:8c:24:41:c1:03:
                    96:19:26:5a:30:73:77:2b:21:a6:ab:d9:a7:55:5f:
                    56:d8:18:ae:bc:61:31:7e:d1:b6:23:12:0a:41:b1:
                    9f:b9:09:ad:4b:58:1a:d7:ba:73:c0:cc:6a:9c:82:
                    66:9f:13:d3:b4:5e:8e:93:f5:3f:51:03:f1:7e:d4:
                    c3:5a:c2:fd:43:90:6d:d1:cc:6c:d0:62:3f:12:ad:
                    5b:b4:ca:74:f1:14:5c:ac:c1:6f:14:2a:a1:2a:f5:
                    c0:44:6c:a4:af:e1:2e:94:f7:e2:28:c2:10:fa:4c:
                    4d:a5:d8:32:3e:10:fa:73:22:76:95:f8:32:23:87:
                    5c:7d:c5:a8:d8:e3:d5:21:88:a9:0d:d4:24:87:7a:
                    d6:6a:11:2b:9c:76:07:40:d7:be:79:47:70:23:64:
                    b6:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:4D:67:6F:F6:5C:CE:70:63:DF:51:13:31:BF:8F:68:CD:74:36:6E
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/14/
                RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/14/C64D676FF65CCE7063DF511331BF8F68CD74366E.mft
                RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  211998

    Signature Algorithm: sha256WithRSAEncryption
         63:d6:f5:c5:1d:d5:4c:92:de:7d:14:4b:67:0c:c0:d3:d6:7a:
         6a:bc:d3:39:74:59:95:00:a9:e1:a6:a1:e8:e1:9e:f6:9d:e8:
         a6:8b:28:a9:dc:d9:e6:64:09:8c:51:4a:70:fe:c6:75:3e:d1:
         7c:a7:d4:bb:12:3c:12:29:43:6b:86:2c:87:bd:d7:bd:ee:2b:
         7f:11:87:01:e7:17:d7:01:0f:82:4e:df:46:25:95:47:65:10:
         cd:89:83:e7:da:5a:47:15:91:a8:28:28:e3:c2:45:c0:ba:e7:
         15:eb:04:fe:77:8d:22:87:bf:01:3f:78:94:87:3c:f5:89:d2:
         96:96:f5:18:55:b6:00:11:6f:32:7f:0f:91:8a:64:c6:05:66:
         ed:7a:72:0e:79:4d:f7:94:cc:f0:df:f1:6d:db:3a:50:86:aa:
         c1:b7:ed:66:e4:19:83:59:bd:f7:7d:58:20:ef:f5:bb:48:0d:
         5e:59:bb:ab:c8:36:23:d5:43:b6:b7:08:40:1f:96:47:16:3d:
         cd:36:7e:47:e8:73:fc:cf:ed:0c:58:37:91:54:5a:68:a7:44:
         12:8b:c3:30:e9:93:1a:d9:bb:4b:cf:00:21:91:7f:2d:7e:f2:
         83:36:1e:f5:e2:e6:b6:82:f5:af:d6:b3:e6:19:50:1b:12:94:
         6f:79:99:80
-----BEGIN CERTIFICATE-----
MIIFkjCCBHqgAwIBAgISAZBpEPbUjlfVhG6dgwyzrjWXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwNjMwMTIxMzU3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNjRkNjc2ZmY2NWNjZTcwNjNkZjUxMTMzMWJmOGY2OGNkNzQzNjZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqkipc/OaooE6/J5BCofHbtyjf6yI
kVNMas9jwyUEP8bmDYddcbOL2ChxQNg8on6UwoQg27/TZD+LyixNH6/VGDo1Suhz
9QgN/8uJHS8RERkIUIHxVWJi2vtAt2GIqr3ND1S0jCRBwQOWGSZaMHN3KyGmq9mn
VV9W2BiuvGExftG2IxIKQbGfuQmtS1ga17pzwMxqnIJmnxPTtF6Ok/U/UQPxftTD
WsL9Q5Bt0cxs0GI/Eq1btMp08RRcrMFvFCqhKvXARGykr+EulPfiKMIQ+kxNpdgy
PhD6cyJ2lfgyI4dcfcWo2OPVIYipDdQkh3rWahErnHYHQNe+eUdwI2S2dQIDAQAB
o4ICnjCCApowHQYDVR0OBBYEFMZNZ2/2XM5wY99REzG/j2jNdDZuMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggFCBggrBgEFBQcBCwSCATQwggEwMGAGCCsGAQUFBzAFhlRy
c3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2RkZTgz
N2ZiLTYzOTAtNDFiNS04MmEwLWYwZDAyYzAzYTJjNi8xNC8wgY0GCCsGAQUFBzAK
hoGAcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9k
ZGU4MzdmYi02MzkwLTQxYjUtODJhMC1mMGQwMmMwM2EyYzYvMTQvQzY0RDY3NkZG
NjVDQ0U3MDYzREY1MTEzMzFCRjhGNjhDRDc0MzY2RS5tZnQwPAYIKwYBBQUHMA2G
MGh0dHBzOi8vcnJkcC5wYWFzLnJwa2kucmlwZS5uZXQvbm90aWZpY2F0aW9uLnht
bDBZBgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jcmwwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMD
PB4wDQYJKoZIhvcNAQELBQADggEBAGPW9cUd1UyS3n0US2cMwNPWemq80zl0WZUA
qeGmoejhnvad6KaLKKnc2eZkCYxRSnD+xnU+0Xyn1LsSPBIpQ2uGLIe9173uK38R
hwHnF9cBD4JO30YllUdlEM2Jg+faWkcVkagoKOPCRcC65xXrBP53jSKHvwE/eJSH
PPWJ0paW9RhVtgARbzJ/D5GKZMYFZu16cg55TfeUzPDf8W3bOlCGqsG37WbkGYNZ
vfd9WCDv9btIDV5Zu6vINiPVQ7a3CEAflkcWPc02fkfoc/zP7QxYN5FUWminRBKL
wzDpkxrZu0vPACGRfy1+8oM2HvXi5raC9a/Ws+YZUBsSlG95mYA=
-----END CERTIFICATE-----