Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Ax2J8uVL5ApnYI275qAGS9PCqtk.cer
File:                     Ax2J8uVL5ApnYI275qAGS9PCqtk.cer (raw, json)
Hash identifier:          gVubrEpQWonUaQwEViovJXrkm/8hAeMTEmhaRDQw6zk=
Subject key identifier:   03:1D:89:F2:E5:4B:E4:0A:67:60:8D:BB:E6:A0:06:4B:D3:C2:AA:D9
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018A28797E3B47530A2B257C1646BC65FC80
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/2a/70956b-e1cf-40b6-a43e-3664d2a6eaf9/1/Ax2J8uVL5ApnYI275qAGS9PCqtk.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/2a/70956b-e1cf-40b6-a43e-3664d2a6eaf9/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 24 Aug 2023 16:56:05 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    AS: 216411

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:28:79:7e:3b:47:53:0a:2b:25:7c:16:46:bc:65:fc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Aug 24 16:56:05 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=031d89f2e54be40a67608dbbe6a0064bd3c2aad9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:6e:f6:88:91:71:57:db:80:7d:ea:e0:e1:4c:
                    4b:c9:2d:9a:9c:13:c8:10:de:97:83:c4:2d:38:18:
                    a8:a3:74:07:b7:39:41:6e:09:bd:e1:5e:50:13:c6:
                    94:75:69:5d:66:7c:76:27:cb:dc:93:c6:42:f2:88:
                    2a:7d:0e:f0:c8:86:90:67:d5:cf:94:9b:7d:66:f5:
                    07:65:42:1a:ba:03:ce:76:33:c8:36:0f:3d:f2:64:
                    01:b7:7f:4f:e3:85:ff:b1:51:dc:d9:d7:82:58:54:
                    ef:43:12:a9:f7:45:2f:b7:56:91:31:a4:81:24:68:
                    69:3a:77:b8:a4:1a:35:64:0f:07:2a:de:c4:ce:ae:
                    98:30:50:d6:c3:d0:a0:27:ef:34:55:90:c4:a9:e8:
                    75:2e:ab:76:fc:d1:9c:ff:8c:c2:89:a8:33:8f:03:
                    da:9f:c9:4c:5d:db:7a:13:88:23:e5:df:d1:59:58:
                    82:d6:3d:fd:bb:48:d6:64:0d:0a:a9:e2:e9:14:3f:
                    d5:a0:6e:bb:44:da:07:16:39:03:26:b9:31:fc:ba:
                    21:61:16:0c:5f:ec:8e:57:96:44:30:32:12:d6:ec:
                    75:4a:b5:07:64:c3:c0:48:71:1d:3e:87:3e:9f:12:
                    fc:1d:54:34:f3:ff:98:f4:5d:9c:e0:ba:f0:90:d5:
                    82:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:1D:89:F2:E5:4B:E4:0A:67:60:8D:BB:E6:A0:06:4B:D3:C2:AA:D9
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/70956b-e1cf-40b6-a43e-3664d2a6eaf9/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/70956b-e1cf-40b6-a43e-3664d2a6eaf9/1/Ax2J8uVL5ApnYI275qAGS9PCqtk.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  216411

    Signature Algorithm: sha256WithRSAEncryption
         4b:8b:88:00:d4:7a:1c:11:7c:a1:58:0c:06:c3:05:32:61:5a:
         44:ea:86:4e:6e:e3:4b:9f:0b:e0:83:2b:0d:73:5d:f4:74:4b:
         6a:24:23:d5:82:08:e1:f9:65:35:15:9f:49:01:0a:d9:4c:2a:
         c2:f7:15:5e:5c:bb:a9:39:a3:06:1f:40:bb:76:4c:f7:1a:5e:
         16:e3:6f:8d:67:72:81:37:55:3f:94:79:f2:74:90:cf:3c:52:
         9e:9c:f7:8d:b6:6a:e7:68:5e:f8:a7:90:9f:48:af:f0:d8:3c:
         f5:6b:77:39:3e:a6:d8:53:5b:f8:d6:de:b4:8b:3b:76:8a:fb:
         3a:73:5e:d7:2b:f3:3e:17:3d:0a:b7:a1:e7:03:c0:19:b1:66:
         f9:a5:a5:71:8b:e0:86:a6:56:40:a2:50:41:95:40:00:03:c2:
         4f:28:f6:c6:3f:05:b8:93:c0:b4:cf:40:0b:d7:26:b7:54:58:
         7a:ef:ec:1c:ee:e7:83:66:bb:75:07:d3:80:3a:71:35:11:1a:
         01:86:37:0e:e1:7a:18:3a:ec:92:af:72:9f:45:42:34:91:70:
         3a:bb:d8:49:e5:a9:f3:f7:3c:c7:2a:2d:43:ac:fc:ac:4a:14:
         1e:57:d3:c0:91:fd:62:ef:c0:bb:1e:2b:22:02:a3:31:29:ce:
         ab:9a:7b:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----