Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2XQKAvvhI2Imw2azPCnzbatw3lw.cer
File:                     2XQKAvvhI2Imw2azPCnzbatw3lw.cer (raw, json)
Hash identifier:          zR+ZONq5yV8xnF8BP2dpjTBx6qBlHEsG2I6JwoeA0xc=
Subject key identifier:   D9:74:0A:02:FB:E1:23:62:26:C3:66:B3:3C:29:F3:6D:AB:70:DE:5C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018CC493901F5B9C91707BB35D701A809BAB
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/2f/669d13-3753-43cc-ad46-e02b70afd335/1/2XQKAvvhI2Imw2azPCnzbatw3lw.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/2f/669d13-3753-43cc-ad46-e02b70afd335/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 10:30:54 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    IP: 62.68.77.0/24

Validation:               Failed, certificate revoked on Wed 14 Feb 2024 10:15:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c4:93:90:1f:5b:9c:91:70:7b:b3:5d:70:1a:80:9b:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 10:30:54 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=d9740a02fbe1236226c366b33c29f36dab70de5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:9c:65:17:49:b7:86:fa:66:6b:a9:2b:cd:4c:
                    53:d6:1f:16:4b:23:f5:bd:b5:2d:dd:22:4f:0c:e6:
                    c1:7a:2c:6a:1e:f7:f2:a4:f6:62:72:f9:18:e9:4e:
                    02:b6:38:e5:47:a7:60:9b:55:27:64:a2:9e:fa:db:
                    d2:77:03:2c:fc:35:1c:24:be:d5:8e:d3:b2:03:e8:
                    f6:ea:1c:88:c7:c0:94:2f:9b:06:7f:82:e3:21:a9:
                    f1:96:36:3e:31:58:a6:a0:d8:09:95:ca:5b:a2:d4:
                    2c:37:8c:80:e4:aa:d4:fa:7d:e7:7a:7b:54:c3:bb:
                    d2:eb:a2:f7:fa:e4:ba:08:48:95:1d:e9:1e:87:8c:
                    bb:8d:85:4c:7e:42:3a:03:4f:2a:56:d8:ad:c6:86:
                    85:6b:d7:56:29:cd:bd:f8:35:38:2c:c1:99:06:3b:
                    86:5d:db:7e:5a:6f:eb:62:01:a3:4c:87:f5:d7:70:
                    ed:19:2b:28:41:b7:60:17:53:c7:ec:a1:64:fa:f8:
                    21:d0:35:33:c0:83:25:b4:36:b5:5c:c3:1f:dc:6f:
                    d1:ae:ea:10:c2:1a:34:2c:94:d3:ea:e5:6d:81:e2:
                    3d:5b:03:0b:58:dc:49:c1:2b:14:4a:ea:5e:ff:1e:
                    1a:f4:b4:36:3d:76:35:d9:a1:8b:5c:39:e8:30:0d:
                    73:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:74:0A:02:FB:E1:23:62:26:C3:66:B3:3C:29:F3:6D:AB:70:DE:5C
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/669d13-3753-43cc-ad46-e02b70afd335/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/669d13-3753-43cc-ad46-e02b70afd335/1/2XQKAvvhI2Imw2azPCnzbatw3lw.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.68.77.0/24

    Signature Algorithm: sha256WithRSAEncryption
         46:99:fc:c7:57:2c:46:17:9c:2a:8c:42:b7:d2:3d:39:b9:43:
         d4:88:66:44:e4:09:b6:0c:00:e7:a8:f9:01:89:76:9c:69:ea:
         4d:59:f6:e6:4b:fd:78:6d:8d:38:19:d9:88:17:ed:43:eb:4c:
         69:35:e7:b7:93:fd:56:ac:a6:12:73:b7:d3:83:26:f6:1b:40:
         0a:e3:67:f2:3b:4f:7d:ce:d5:12:bc:b6:b8:45:56:98:26:d4:
         6d:96:0c:86:3f:07:83:1d:b3:46:6b:8e:9e:fb:80:4a:46:48:
         b6:fe:ab:9d:cc:9f:b6:a8:af:a1:d3:4a:be:60:5e:ad:78:da:
         95:c8:12:28:24:c3:d7:5d:a6:88:64:d3:e7:ea:d4:69:83:8a:
         68:b5:57:47:d5:9a:a8:62:5e:8b:20:a6:72:52:3d:a1:d5:23:
         c9:63:23:6c:c9:07:ed:14:d8:2d:63:03:42:a5:28:69:e6:92:
         cb:e1:f3:09:4a:4d:55:47:3c:90:cb:fe:e5:d4:6a:5b:10:7a:
         ce:23:8a:28:41:79:f5:34:0a:bd:93:3b:17:df:23:9b:0c:12:
         df:b9:75:fd:e5:3d:a2:90:86:dd:bd:3d:53:5f:88:e5:d6:c6:
         50:f7:41:2c:57:5f:11:d2:bc:3d:0e:3a:ff:0a:4e:2c:18:38:
         2d:1f:54:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----