Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/WGj-AOOUBlesf-Y06JgsgbDwBoY.cer
File:                     WGj-AOOUBlesf-Y06JgsgbDwBoY.cer (raw, json)
Hash identifier:          8YNXFRyhoQVGUA3tYHfNws/8tSbK2Ohvmgep8dOZAgw=
Subject key identifier:   58:68:FE:00:E3:94:06:57:AC:7F:E6:34:E8:98:2C:81:B0:F0:06:86
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856DF7B0807DD02738D0E7009505273A7F
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/04/5764e9-3a73-4799-b119-909530d487f8/1/WGj-AOOUBlesf-Y06JgsgbDwBoY.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/04/5764e9-3a73-4799-b119-909530d487f8/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 15:33:47 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 176.97.207.0/24

Validation:               Failed, certificate revoked on Tue 21 Nov 2023 06:58:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6d:f7:b0:80:7d:d0:27:38:d0:e7:00:95:05:27:3a:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 15:33:47 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=5868fe00e3940657ac7fe634e8982c81b0f00686
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:4b:fc:d0:ca:22:9a:5a:0a:17:71:39:7e:03:
                    a3:3f:8e:3d:d3:3b:1d:c3:10:c5:cb:20:73:b4:bf:
                    f9:44:15:4c:8d:09:65:4e:4b:08:2f:84:82:62:19:
                    31:b3:d2:07:98:ff:20:f7:19:7d:19:b6:ce:72:70:
                    1a:a4:73:72:63:f4:3e:f2:25:1e:e0:c4:86:f0:d8:
                    5a:d2:65:62:8d:29:48:5a:bb:0c:25:04:c8:86:0f:
                    23:66:4a:01:8f:47:d2:b2:53:af:e2:fc:2c:7c:89:
                    73:ef:0a:4e:67:a4:dd:9a:f6:f4:9c:e1:e8:5d:05:
                    d8:91:94:d5:5f:a9:a2:2e:f9:d5:4c:ab:54:1e:62:
                    fc:d4:55:69:01:66:ca:13:09:31:70:b3:76:6c:17:
                    ba:a3:74:b3:22:4a:61:09:c3:87:23:64:c7:6f:95:
                    3b:30:0b:30:65:a8:50:ba:7d:eb:17:9a:45:86:99:
                    f2:45:fa:13:c0:a4:6d:08:a4:8f:b5:28:50:56:38:
                    64:74:9a:8f:43:5c:8c:b5:b7:42:4d:a2:b0:f3:74:
                    53:3b:47:50:35:0a:07:bf:52:3a:75:c8:38:28:81:
                    5a:9b:34:26:84:ba:4d:b3:5d:17:02:67:ce:22:c2:
                    b6:0f:6e:0c:e8:ad:90:69:54:d8:09:59:f6:c3:2f:
                    4c:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:68:FE:00:E3:94:06:57:AC:7F:E6:34:E8:98:2C:81:B0:F0:06:86
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/5764e9-3a73-4799-b119-909530d487f8/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/5764e9-3a73-4799-b119-909530d487f8/1/WGj-AOOUBlesf-Y06JgsgbDwBoY.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  176.97.207.0/24

    Signature Algorithm: sha256WithRSAEncryption
         76:d9:38:b1:52:d5:ca:50:c7:fe:94:3d:89:c7:91:0f:72:36:
         e8:5c:b2:4d:5e:22:44:5c:61:f7:1f:6b:cd:09:ed:23:29:34:
         da:cf:1e:45:7b:64:2c:b3:d9:18:67:69:cc:f6:1e:db:bc:de:
         40:41:f4:92:93:5d:60:1f:95:88:b5:1e:3e:a9:55:a5:91:bd:
         f5:a0:ff:f8:e8:6e:42:ce:c0:b8:76:88:6b:f0:6b:a4:83:a7:
         c9:f6:34:69:31:24:2f:6a:93:e0:84:41:07:b2:52:f0:69:7c:
         93:d1:36:49:4a:7c:b9:09:c4:3c:59:74:7f:ec:36:38:63:2e:
         bc:f8:d6:34:f3:64:1a:c1:4e:d6:dc:68:e3:4b:ce:23:b0:b2:
         f9:62:7b:7b:1a:0c:f3:f1:30:da:e0:da:17:4d:9a:da:97:7d:
         b8:89:bc:55:ee:ef:36:54:88:09:95:4e:6b:44:45:77:4c:c9:
         00:38:af:7f:f2:88:6e:12:86:ea:bc:3d:4e:bf:d9:61:06:c1:
         88:78:fc:3f:54:66:72:e7:2a:15:c9:ae:d3:c1:a1:35:b9:c0:
         bc:4a:b7:da:ca:5a:db:e5:c9:cd:f6:f5:15:c2:67:4c:75:13:
         c4:a5:fb:a8:53:96:a7:91:ba:06:9e:be:a8:f9:bc:6f:12:74:
         2a:cf:3d:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----