Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/JoIDhcz8LAti-7vxvAYkSIKGG_k.cer
File:                     JoIDhcz8LAti-7vxvAYkSIKGG_k.cer (raw, json)
Hash identifier:          ltACPH0USIGs1WTgp6xSxd8+IULArWmB0vs3XIjH/V0=
Subject key identifier:   26:82:03:85:CC:FC:2C:0B:62:FB:BB:F1:BC:06:24:48:82:86:1B:F9
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0185861951C7B2F12CE0AB826093145D5E55
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rsync.rp.ki/repo/clonoth/0/26820385CCFC2C0B62FBBBF1BC06244882861BF9.mft
caRepository:             rsync://rsync.rp.ki/repo/clonoth/0
Notify URL:               https://rrdp.rp.ki/notification.xml
Certificate not before:   Fri 06 Jan 2023 08:01:24 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    AS: 57196

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:86:19:51:c7:b2:f1:2c:e0:ab:82:60:93:14:5d:5e:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  6 08:01:24 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=26820385ccfc2c0b62fbbbf1bc06244882861bf9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:67:20:b2:35:a9:77:00:f7:68:65:f4:75:9f:
                    c4:e3:9f:bf:50:6d:ac:b1:dd:aa:ff:eb:65:cc:25:
                    ac:47:d2:6b:17:be:38:43:2e:30:3c:26:7e:e0:86:
                    fc:1d:6c:5a:84:35:7c:89:fe:5d:de:6e:0d:e6:20:
                    6e:b3:ba:b5:d2:3f:08:5f:a0:77:ed:cd:e3:6f:12:
                    a0:cd:95:d4:2b:ae:31:87:60:6b:b3:d2:49:8e:04:
                    f4:52:cb:14:37:c7:27:e8:6b:26:ef:34:8b:34:88:
                    9b:37:09:da:93:f3:99:bf:c4:9b:51:9b:95:eb:7f:
                    c4:9f:1e:c6:66:82:9a:a3:c8:5a:5c:b3:40:8a:a3:
                    ad:c6:b0:0f:ea:d2:6b:a1:db:15:39:8a:26:bc:fc:
                    78:4c:90:3a:68:30:f6:80:61:1f:31:94:1e:42:ba:
                    97:31:07:75:ac:5d:b8:43:79:3f:15:af:18:7c:56:
                    9e:80:12:c0:37:5b:52:17:38:7b:ae:66:8b:f7:6e:
                    df:2b:26:ab:0a:51:9c:79:61:06:d9:75:0b:a3:a3:
                    86:00:16:6b:51:57:68:06:75:be:25:e4:4d:b1:e0:
                    80:a6:18:8c:2f:6f:64:08:32:42:e6:60:05:cf:ac:
                    e2:b0:d7:34:de:3c:e2:97:7d:77:e4:c2:84:de:c4:
                    af:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:82:03:85:CC:FC:2C:0B:62:FB:BB:F1:BC:06:24:48:82:86:1B:F9
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rsync.rp.ki/repo/clonoth/0
                RPKI Manifest - URI:rsync://rsync.rp.ki/repo/clonoth/0/26820385CCFC2C0B62FBBBF1BC06244882861BF9.mft
                RPKI Notify - URI:https://rrdp.rp.ki/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  57196

    Signature Algorithm: sha256WithRSAEncryption
         5d:45:51:2e:70:5d:19:cd:ae:0b:03:6b:11:75:f4:df:99:30:
         68:df:04:2b:79:72:fd:3a:1d:fe:3b:c6:91:eb:9f:f6:95:fa:
         d6:39:8e:c5:5e:3a:c0:e1:a8:ba:2c:70:0c:62:ca:8b:29:27:
         4f:69:8e:f3:87:ce:34:80:90:cd:c5:af:81:56:ed:70:4b:e2:
         f1:02:b0:5e:2e:0a:91:32:65:4d:f4:36:29:29:41:8b:4c:d6:
         db:be:19:5a:ac:ce:9a:c2:69:ac:82:88:3c:dd:ab:19:73:fd:
         47:b8:3a:aa:1c:67:19:9b:1e:bd:8a:61:d2:ba:a6:c9:2c:d2:
         9e:48:8f:9a:df:bb:65:bd:75:98:6f:60:04:6a:8b:b0:df:65:
         94:6d:d2:b8:01:c6:3f:5f:67:37:dc:1a:82:c7:eb:83:0b:1f:
         c3:71:b5:61:89:50:15:01:f4:73:36:8c:e6:b5:29:6e:29:fe:
         bf:d6:f4:58:dc:33:e0:bd:91:94:bf:05:e7:84:91:a9:25:00:
         86:24:a9:ca:37:e5:33:4b:f1:32:83:a2:f0:e3:00:78:e5:e6:
         a9:0f:6e:bf:e0:88:bd:e4:4d:3c:16:8c:30:d9:0a:ec:21:4d:
         7f:c3:53:9b:aa:a4:39:87:0f:e3:c0:61:b0:6f:49:63:11:04:
         22:99:f2:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:41 2023 by rpki-client on console.sobornost.net