Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17SV5MDrVC1r3I-uPZJrUdVElHM.cer
File:                     17SV5MDrVC1r3I-uPZJrUdVElHM.cer (raw, json)
Hash identifier:          Tx7pigRPjuEgGT8cnrkbxKuI5dkBFeP+mRko4O69I9Q=
Subject key identifier:   D7:B4:95:E4:C0:EB:54:2D:6B:DC:8F:AE:3D:92:6B:51:D5:44:94:73
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856F42092FDF4A98E23501B49D5033FDAC
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/68/fe6e8f-7449-478f-a7e1-a4961294f51e/1/17SV5MDrVC1r3I-uPZJrUdVElHM.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/68/fe6e8f-7449-478f-a7e1-a4961294f51e/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 21:34:36 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 62.106.87.0/24

Validation:               Failed, certificate revoked on Tue 24 Oct 2023 13:37:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:42:09:2f:df:4a:98:e2:35:01:b4:9d:50:33:fd:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 21:34:36 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=d7b495e4c0eb542d6bdc8fae3d926b51d5449473
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:78:51:03:98:d0:7f:b0:ae:f9:5d:27:74:5a:
                    1c:59:90:21:cb:64:3c:4a:ec:fd:83:c3:58:98:93:
                    14:03:da:cd:12:d3:c2:1d:c3:91:35:4d:bb:3c:91:
                    f1:a0:ad:f7:f9:68:9d:fb:d5:91:69:d7:28:40:96:
                    15:5d:29:68:6c:95:6b:a2:b0:b7:7c:59:a3:cf:6c:
                    89:c0:1a:79:b4:e1:0e:c5:c7:d0:bc:11:58:13:8a:
                    5a:5a:7b:d0:15:b0:39:45:f9:8c:36:60:f7:64:55:
                    07:ba:6b:07:ba:0c:5b:51:20:96:f6:87:b6:09:e7:
                    c4:76:10:a9:d5:02:92:a1:cd:b9:f4:88:9b:f5:25:
                    c6:85:f7:41:34:27:e5:cb:cb:90:76:ae:52:9a:26:
                    bd:f4:f5:40:30:31:54:38:1f:af:c5:09:c6:57:65:
                    da:22:b4:4e:3d:63:ad:22:02:8e:5c:39:65:f3:7a:
                    b8:9c:e6:c5:0d:f3:c6:ed:09:91:a5:17:4e:46:cd:
                    40:07:17:b3:b7:89:13:69:11:c5:fb:d8:0a:d4:53:
                    aa:c5:dc:e5:4f:20:4f:0b:1d:cd:4e:43:a5:78:a2:
                    c1:28:7a:dd:c4:7f:fc:37:a0:91:4b:53:e7:99:36:
                    fc:27:93:25:53:58:b7:00:19:b9:f9:44:dd:50:ba:
                    36:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:B4:95:E4:C0:EB:54:2D:6B:DC:8F:AE:3D:92:6B:51:D5:44:94:73
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/fe6e8f-7449-478f-a7e1-a4961294f51e/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/fe6e8f-7449-478f-a7e1-a4961294f51e/1/17SV5MDrVC1r3I-uPZJrUdVElHM.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.106.87.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2b:01:0d:ec:4b:a1:21:93:b0:ee:3f:92:4c:f0:93:35:ef:f2:
         fc:68:1b:b3:47:fd:70:c2:7c:4e:6b:f1:e0:dc:21:d5:54:8f:
         c6:6b:de:2f:99:25:ad:01:97:35:be:fd:32:3c:42:98:be:7f:
         e0:b8:ea:09:7a:ff:09:1b:c7:10:b9:38:b7:45:c4:bd:ec:70:
         aa:9b:b0:72:71:c6:80:c0:ab:26:e9:86:86:17:86:fa:72:19:
         a4:85:e4:7d:24:ca:4d:29:28:a1:27:32:9c:b8:af:b2:f4:75:
         2b:1f:b0:d4:f6:ce:02:23:53:1f:ca:2f:73:86:6f:72:47:fc:
         f9:65:52:6d:fd:75:20:9e:9b:70:7e:b2:de:fe:8a:95:b1:93:
         a0:09:d4:0d:06:8c:1a:0f:6d:43:b5:f1:d1:8b:68:c9:19:a0:
         af:2c:50:c4:37:3f:f3:6f:36:62:53:6c:e2:5f:4c:32:79:e9:
         42:a8:a5:86:ba:6b:e8:86:7b:e9:d1:e8:be:08:12:05:64:7b:
         cc:cd:9b:32:10:31:a7:72:4a:93:54:ed:46:28:6b:c5:92:2f:
         ad:5e:c1:96:5e:45:36:d5:5f:a8:1c:36:44:d9:dd:35:85:ef:
         fe:a8:31:2c:5a:da:13:41:9e:28:23:86:97:a2:ab:41:e9:2c:
         f9:94:e4:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----