Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2n3cnYCN-aEI7Az8GTTHQwSOmRk.cer
File:                     2n3cnYCN-aEI7Az8GTTHQwSOmRk.cer (raw, json)
Hash identifier:          wJ5udSgh2iCGVRCLir6uwMSJA5Pk0h+Ws4ZFMKmxVWg=
Subject key identifier:   DA:7D:DC:9D:80:8D:F9:A1:08:EC:0C:FC:19:34:C7:43:04:8E:99:19
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0187D783B932BA41080B8242AB7147DACE00
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/223/DA7DDC9D808DF9A108EC0CFC1934C743048E9919.mft
caRepository:             rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/223
Notify URL:               https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before:   Mon 01 May 2023 13:32:26 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 91.242.248.0/24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:d7:83:b9:32:ba:41:08:0b:82:42:ab:71:47:da:ce:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: May  1 13:32:26 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=da7ddc9d808df9a108ec0cfc1934c743048e9919
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:33:f3:61:49:20:f3:2d:37:a9:d6:a5:69:a7:
                    80:be:d3:d7:62:03:dd:3a:ee:d6:28:2f:f2:8f:13:
                    47:58:3e:a8:1f:70:21:05:31:6c:1d:65:d4:ce:8c:
                    de:11:9b:2c:ad:91:83:29:36:fd:30:2f:40:6e:1f:
                    f4:95:93:61:fe:b9:81:36:0e:5a:6d:e6:ad:b2:05:
                    a9:64:4b:bc:39:7e:9f:52:3f:b7:cd:9e:34:e1:e3:
                    d5:83:42:4a:63:e9:86:6c:f3:e8:11:8f:15:1e:8d:
                    88:37:ae:93:e5:35:79:8b:2a:bf:e9:17:27:bd:13:
                    01:3c:f5:8f:48:fc:3a:51:20:48:c1:00:c0:4b:25:
                    ab:c6:f5:b4:85:55:44:50:3e:cd:15:be:61:de:03:
                    d8:88:a2:1d:3d:d8:bb:73:36:e6:9e:f1:a1:5a:ed:
                    5f:25:65:5a:db:79:cc:94:8d:8f:ce:4b:6f:35:ac:
                    12:0e:3c:b1:1f:d5:dd:ca:25:5e:ac:b7:9b:5b:c1:
                    c8:c9:21:a8:27:8e:b0:49:e4:5d:ea:7c:81:28:0a:
                    6c:9c:63:94:d9:f4:3e:a4:fb:31:0b:ab:d2:74:cf:
                    ae:fb:95:d9:99:6b:c9:32:33:5c:05:32:b1:ef:a7:
                    64:aa:72:78:d4:0a:05:3a:f4:a3:08:c0:21:7c:8b:
                    e6:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:7D:DC:9D:80:8D:F9:A1:08:EC:0C:FC:19:34:C7:43:04:8E:99:19
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/223
                RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/223/DA7DDC9D808DF9A108EC0CFC1934C743048E9919.mft
                RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.242.248.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9c:c8:d5:7a:16:74:8e:34:5a:d6:99:43:3f:9f:11:45:ba:82:
         34:20:31:15:49:50:16:7a:73:42:b7:61:c2:14:0b:2b:c8:44:
         f1:34:48:e2:19:f7:79:2d:c6:45:d1:21:f0:41:6e:d3:0c:46:
         30:12:40:51:a5:42:4e:96:28:f7:58:d8:6c:0b:3f:d2:eb:c5:
         ad:98:62:58:06:49:30:93:42:bc:6f:08:cb:05:03:d4:29:a0:
         94:57:56:db:b5:70:84:35:dd:25:66:c4:d7:eb:4f:24:43:28:
         27:0a:f5:ed:65:89:aa:cc:86:52:b6:1f:bb:55:08:b5:b4:ee:
         93:8e:8e:95:b4:1c:aa:5d:4f:8f:84:b1:56:c0:1c:5b:98:1a:
         d9:5e:81:d2:47:c0:69:72:06:72:1f:d0:68:a8:6c:52:ed:b6:
         18:71:f6:00:2c:98:b9:31:7c:c0:17:12:92:5d:77:eb:5a:91:
         1c:55:0c:7e:15:71:96:fd:22:8e:ad:14:6f:41:85:70:d5:37:
         22:55:dc:81:c1:9d:e9:f6:f5:f3:f7:c5:7a:a8:73:6b:28:b3:
         5e:89:7b:04:c8:89:61:b2:94:42:16:33:92:d2:b3:b5:34:4d:
         13:9c:6e:f6:43:33:f1:60:19:0b:e3:a4:59:49:f1:39:40:1f:
         08:f6:91:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----