Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3wCFwOYX4HlZSgG6b7Zm_HhOAPw.cer
File:                     3wCFwOYX4HlZSgG6b7Zm_HhOAPw.cer (raw, json)
Hash identifier:          gNYHtknQEvQ+CCxbX1SwM2Zu+BVhCrOv+ZOJwB0tJF4=
Subject key identifier:   DF:00:85:C0:E6:17:E0:79:59:4A:01:BA:6F:B6:66:FC:78:4E:00:FC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856FB0A17D3BC9CC6F8601CAF51A377014
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/b4/4119f6-4aaa-4a3c-985b-a95a815ab371/1/3wCFwOYX4HlZSgG6b7Zm_HhOAPw.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/b4/4119f6-4aaa-4a3c-985b-a95a815ab371/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 23:35:24 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 146.19.217.0/24

Validation:               Failed, certificate revoked on Tue 21 Nov 2023 10:28:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:b0:a1:7d:3b:c9:cc:6f:86:01:ca:f5:1a:37:70:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 23:35:24 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=df0085c0e617e079594a01ba6fb666fc784e00fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:9b:4e:ff:70:2c:21:31:20:ee:d3:52:f3:f0:
                    02:46:cc:79:c3:c4:9a:a2:b4:03:f0:83:e6:1e:0b:
                    07:39:d9:0c:aa:e9:f6:c6:25:48:e1:db:e6:02:a1:
                    aa:16:35:1d:4a:07:33:19:4b:db:ba:a5:4c:8e:c9:
                    b1:0e:75:d0:53:d3:75:30:24:8b:6e:c4:77:37:94:
                    52:a5:68:11:52:8a:8b:f7:bf:a2:3b:09:09:39:da:
                    33:55:d8:f3:c7:a1:b9:5b:47:79:39:09:04:76:9e:
                    2e:6c:c3:06:a4:f2:b3:fd:bc:be:94:5f:28:b7:59:
                    ee:5e:1a:93:ec:fc:3d:fb:05:c4:41:b7:4b:3c:e8:
                    06:57:57:a5:97:83:a4:c4:9b:38:62:60:3d:df:37:
                    db:ee:df:d7:5b:c6:f4:a2:fa:a6:e8:b7:2d:05:20:
                    0b:d3:dd:d2:0e:6a:01:ed:e7:58:88:3f:ff:08:c0:
                    24:91:b8:03:d8:2e:77:7c:59:02:9e:e7:32:e4:b5:
                    0e:4d:aa:a3:ad:3a:d7:0c:52:66:3b:3b:6c:7c:95:
                    d7:5f:b3:9e:f9:48:73:bc:c3:fe:42:3d:cf:50:30:
                    80:c7:02:4a:a2:45:db:a2:a8:61:16:4b:2d:80:46:
                    5b:97:f2:2f:e7:68:2b:6e:e5:44:ce:0c:62:dc:90:
                    7a:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:00:85:C0:E6:17:E0:79:59:4A:01:BA:6F:B6:66:FC:78:4E:00:FC
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/4119f6-4aaa-4a3c-985b-a95a815ab371/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/4119f6-4aaa-4a3c-985b-a95a815ab371/1/3wCFwOYX4HlZSgG6b7Zm_HhOAPw.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.19.217.0/24

    Signature Algorithm: sha256WithRSAEncryption
         04:86:6a:14:4a:74:c8:83:1c:19:25:80:c1:f0:65:c4:be:81:
         8a:b0:69:f4:a4:d6:d8:e8:f3:ea:40:f9:0e:37:14:a9:9b:76:
         9a:fa:aa:01:43:62:1f:be:41:bd:23:b9:09:52:bb:3e:b1:6a:
         55:e5:a9:d3:80:64:1d:30:3b:ad:d7:12:c6:94:1e:4f:f7:49:
         16:94:11:ca:72:67:fd:5b:cc:30:98:a4:e0:54:e3:c4:50:c8:
         b8:86:ed:fe:7d:66:3d:a5:94:21:23:48:43:9d:31:2b:0e:96:
         87:45:89:f9:d4:2e:ad:68:2a:07:fc:01:21:c3:28:5a:6e:2a:
         72:6d:ad:42:43:cb:e7:d9:a5:c9:e7:9a:26:bc:69:9f:a7:e1:
         dd:c7:e5:67:b3:22:45:56:f6:55:f3:ec:b3:88:32:c3:36:4d:
         76:f2:fb:22:5c:38:d4:fd:7d:a3:8f:f4:50:06:7e:dc:b0:5a:
         97:ec:f3:4a:10:3f:80:c3:d4:ea:25:a5:dd:c9:aa:02:78:66:
         6c:fd:c5:2b:6f:86:42:c3:45:36:c0:75:99:b8:63:b0:db:e7:
         f2:fb:62:0c:b9:21:16:84:58:dc:b3:35:63:5a:5a:00:69:50:
         62:3a:93:2c:93:67:7d:0c:32:df:d2:5c:2a:80:5f:f3:20:e4:
         6e:cd:0f:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----