Certificate

$ rpki-client -vvf krill.accuristechnologies.ca/repo/Accuris-Technologies/0/10DDF1F0FE81020AC7CABDAA8E041B06D09CBC2D.cer
File:                     10DDF1F0FE81020AC7CABDAA8E041B06D09CBC2D.cer (raw, json)
Hash identifier:          zmk9kl/wbwKDEDMPzDe7g1sxT5+0yxKYxDjZS9xaPfo=
Subject key identifier:   10:DD:F1:F0:FE:81:02:0A:C7:CA:BD:AA:8E:04:1B:06:D0:9C:BC:2D
Authority key identifier: 8B:83:C5:DA:03:B3:CC:02:9D:95:21:5A:01:32:05:97:81:4B:38:F0
Certificate issuer:       /CN=7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9
Certificate serial:       1A64462DF9C41F6AFF5A95276DBB2F7EE9534DD7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9.cer
Manifest:                 rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/6/10DDF1F0FE81020AC7CABDAA8E041B06D09CBC2D.mft
caRepository:             rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/6/
Notify URL:               https://rpki-01.pdxnet.uk/rrdp/notification.xml
Certificate not before:   Tue 26 Dec 2023 11:34:08 +0000
Certificate not after:    Tue 24 Dec 2024 11:39:08 +0000
Subordinate resources:    IP: 172.99.233.0/24

Validation:               Failed, certificate revoked on Tue 16 Apr 2024 20:00:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:64:46:2d:f9:c4:1f:6a:ff:5a:95:27:6d:bb:2f:7e:e9:53:4d:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9
        Validity
            Not Before: Dec 26 11:34:08 2023 GMT
            Not After : Dec 24 11:39:08 2024 GMT
        Subject: CN=10DDF1F0FE81020AC7CABDAA8E041B06D09CBC2D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:e9:44:f5:3d:ea:f9:d1:24:0d:8f:d1:5d:99:
                    04:9e:7e:66:8a:40:5b:19:5b:8c:3b:cb:24:de:8c:
                    d6:d5:8f:cf:2d:3a:5f:26:26:f7:fe:02:0e:0f:e1:
                    5e:b9:70:5c:cc:4f:fc:ba:b1:08:f7:7c:3a:c0:38:
                    c3:4b:1a:4b:eb:22:87:6b:93:b3:bd:a8:ee:d1:8d:
                    d9:4b:8f:47:06:2b:a9:89:dd:3c:33:ce:20:eb:44:
                    d8:cc:9f:eb:4b:f9:31:14:3c:87:0e:87:45:1e:71:
                    86:66:f5:18:89:65:2b:7a:04:67:b3:7b:59:07:37:
                    2c:9d:f8:22:98:19:a5:0a:2b:f6:82:e1:15:f0:30:
                    38:8a:bf:02:89:02:b3:d4:b5:da:ed:54:2f:f6:a8:
                    15:2f:c2:f5:79:0c:41:03:37:97:f6:96:76:41:9d:
                    43:65:78:e4:f3:26:cf:d4:c8:7b:67:80:08:da:cf:
                    05:b5:aa:06:43:3f:ea:45:aa:70:28:24:38:81:f4:
                    5d:db:80:8e:c2:3f:b4:9b:61:20:eb:0a:e2:dc:64:
                    2d:da:05:e7:88:c3:79:34:2e:68:93:51:f1:68:7c:
                    ce:8f:2e:b4:ed:94:49:c6:1a:72:e7:af:1e:0f:f4:
                    4c:47:95:28:14:c8:44:30:a4:3c:f7:a5:e1:aa:13:
                    a5:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                10:DD:F1:F0:FE:81:02:0A:C7:CA:BD:AA:8E:04:1B:06:D0:9C:BC:2D
            X509v3 Authority Key Identifier:
                keyid:8B:83:C5:DA:03:B3:CC:02:9D:95:21:5A:01:32:05:97:81:4B:38:F0

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/8B83C5DA03B3CC029D95215A01320597814B38F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/6/
                RPKI Manifest - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/6/10DDF1F0FE81020AC7CABDAA8E041B06D09CBC2D.mft
                RPKI Notify - URI:https://rpki-01.pdxnet.uk/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.99.233.0/24

    Signature Algorithm: sha256WithRSAEncryption
         52:9d:f9:07:3b:35:be:37:2c:db:5a:f1:ab:89:10:32:e6:ae:
         4a:5a:18:5b:97:38:1e:2e:c3:46:8b:96:c0:2b:59:32:86:f1:
         92:a1:bb:b4:c8:2f:67:15:47:c4:5e:ad:52:63:5a:4f:6a:74:
         a6:27:aa:d0:99:7d:40:a6:18:33:cb:2a:24:c0:a4:25:d2:b5:
         6c:2d:24:6a:34:25:c6:cf:40:13:11:c0:62:3a:0f:b6:f3:31:
         ea:71:8a:db:9d:81:e7:32:5f:7b:17:d1:10:01:ba:c8:fd:68:
         4c:cc:38:f3:23:bf:c5:48:fc:ad:4d:7a:69:9c:a0:41:d4:b4:
         9f:a4:d8:4f:4c:f9:8a:bd:ff:69:3d:53:90:05:ab:49:87:60:
         4d:f1:57:31:28:ce:e9:3f:a2:cf:51:f6:d5:31:07:ec:45:36:
         4c:06:8b:6d:08:77:0c:c6:74:08:ef:29:59:4e:99:e9:64:65:
         04:7b:51:14:38:db:c1:91:e6:19:ec:c4:cb:a0:40:45:a9:3a:
         73:0f:2d:6c:b1:ce:af:7c:2c:e9:63:b1:3c:31:c5:09:f8:57:
         eb:ca:56:8f:e6:94:68:a0:f7:3c:2d:f0:19:57:9f:f3:d2:58:
         44:05:42:54:55:be:2b:70:69:4e:0f:b4:98:94:d3:ef:39:ed:
         7a:a9:10:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----