Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0BdL5CbKRRE0N1Teo31qNgo0qbg.cer
File:                     0BdL5CbKRRE0N1Teo31qNgo0qbg.cer (raw, json)
Hash identifier:          apR33MrOTJ2fg/ltJ4Y/2qMqWZxP2VB7/XbmHqOZtqA=
Subject key identifier:   D0:17:4B:E4:26:CA:45:11:34:37:54:DE:A3:7D:6A:36:0A:34:A9:B8
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018CC7934D1874CA09FD750E1AB05CE80A1E
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/b6/ebe137-0cf3-4962-8a1b-e80c729ed19f/1/0BdL5CbKRRE0N1Teo31qNgo0qbg.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/b6/ebe137-0cf3-4962-8a1b-e80c729ed19f/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Tue 02 Jan 2024 00:29:28 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    IP: 91.217.251.0/24

Validation:               Failed, certificate revoked on Fri 27 Sep 2024 09:35:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c7:93:4d:18:74:ca:09:fd:75:0e:1a:b0:5c:e8:0a:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 00:29:28 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=d0174be426ca4511343754dea37d6a360a34a9b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:c8:b0:37:a4:d2:2c:2c:c4:1b:90:ac:9e:ea:
                    5e:18:39:f4:d5:d2:32:bb:32:af:7f:a3:bc:d5:26:
                    f3:22:23:0c:aa:56:93:4a:45:f3:10:9b:cd:ad:07:
                    15:61:4d:0e:f2:d6:07:2d:8e:80:e6:ac:c7:33:df:
                    da:32:6e:2d:9c:a9:0a:ec:44:12:4c:47:4d:f6:41:
                    40:59:28:95:22:e7:03:32:4c:4a:8e:dd:e0:43:0e:
                    f0:41:44:43:f8:82:a1:fa:37:12:20:5f:95:5d:dd:
                    19:41:20:5c:97:2c:ed:95:9f:7c:03:93:7d:4e:24:
                    21:97:81:8d:2b:e0:53:a3:6c:16:db:ca:10:f4:5b:
                    44:b7:ef:d3:c1:86:46:ee:ac:3c:e5:05:99:c1:4a:
                    5a:26:d6:98:23:52:18:4f:ee:a6:08:ad:d6:ac:d7:
                    fd:6e:f6:04:cf:f5:47:39:1d:71:3f:39:29:dd:6b:
                    36:13:42:ee:f0:77:b0:4b:42:e5:6e:c6:a6:77:f9:
                    9e:cf:b4:af:df:3c:6a:32:a4:a3:31:a8:e9:ad:c1:
                    ba:d4:bd:94:6f:03:79:57:a8:2d:75:f0:c7:92:99:
                    49:6e:b1:d4:d5:f8:ac:d8:d8:fb:d9:a8:61:b0:cb:
                    7f:5a:0a:a7:1c:4b:b4:e1:26:8b:18:ec:f1:5b:4b:
                    2b:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:17:4B:E4:26:CA:45:11:34:37:54:DE:A3:7D:6A:36:0A:34:A9:B8
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/ebe137-0cf3-4962-8a1b-e80c729ed19f/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/ebe137-0cf3-4962-8a1b-e80c729ed19f/1/0BdL5CbKRRE0N1Teo31qNgo0qbg.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.217.251.0/24

    Signature Algorithm: sha256WithRSAEncryption
         56:a7:63:3a:e6:ce:b6:48:a7:44:03:ba:b5:26:31:8f:49:8a:
         d0:fd:1f:70:4a:f0:37:07:fd:a4:d7:14:69:d5:01:f8:fb:f5:
         de:fd:ce:f3:29:62:02:ff:7b:64:97:53:96:e0:87:4d:87:f3:
         ec:b4:9c:0a:53:39:60:83:dc:9a:bd:6b:08:1f:5a:bd:b7:25:
         f4:17:6b:bd:13:02:df:6f:2c:1d:08:e9:33:c3:6c:ce:b5:51:
         33:3d:8a:52:c0:ba:ed:40:8e:fa:67:60:79:5b:36:92:33:0b:
         e4:a0:bc:af:81:6f:a6:12:c3:ac:e5:2d:94:95:bb:e7:61:a8:
         ab:40:bb:c1:5b:30:80:e5:bc:80:d0:90:c0:61:e7:a5:cc:82:
         5a:d8:d6:3d:07:32:84:99:56:22:6e:3c:66:68:17:ef:5c:4a:
         0a:d9:56:4a:6d:48:0e:a3:62:1a:41:18:01:0e:e5:ba:fc:56:
         86:9c:dc:2f:d7:3e:9f:32:1a:eb:8b:88:39:35:45:f8:58:6e:
         6f:e5:3a:43:78:8f:bd:1d:b7:a0:ab:1d:60:89:a0:e0:1d:aa:
         6d:df:39:ff:0d:8d:ad:74:6e:25:6a:07:58:bf:b8:99:7f:74:
         2b:a0:bc:1e:9e:19:8f:80:50:47:3b:ed:a4:3b:53:15:c2:5a:
         85:40:76:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----