Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45tdrzltDXgO0izgbzmzG5wPQxI.cer
File:                     45tdrzltDXgO0izgbzmzG5wPQxI.cer (raw, json)
Hash identifier:          0YKCQlPaGZc/OVG60WZdyys7TO2v18FsSI37sZTV+1U=
Subject key identifier:   E3:9B:5D:AF:39:6D:0D:78:0E:D2:2C:E0:6F:39:B3:1B:9C:0F:43:12
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018CC794D63AAE2BE6235E681A22B83ECDAF
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/3c/ae88a1-9526-4d77-afa4-f21e16035cc6/1/45tdrzltDXgO0izgbzmzG5wPQxI.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/3c/ae88a1-9526-4d77-afa4-f21e16035cc6/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Tue 02 Jan 2024 00:31:09 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    IP: 195.246.112.0/23

Validation:               Failed, certificate revoked on Tue 16 Jan 2024 08:48:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c7:94:d6:3a:ae:2b:e6:23:5e:68:1a:22:b8:3e:cd:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 00:31:09 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=e39b5daf396d0d780ed22ce06f39b31b9c0f4312
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:d6:7d:51:17:f2:0a:25:17:42:74:2c:9d:d8:
                    62:b0:fa:cb:b5:a7:7a:43:76:f0:b4:7f:96:ed:34:
                    60:0b:4c:60:06:61:10:ce:d3:6c:0e:ad:c9:10:f0:
                    f5:79:0c:1f:b3:51:1c:75:17:57:62:e6:40:c4:a0:
                    b1:d7:23:7c:57:e9:0b:35:c3:23:83:0b:d4:6f:9d:
                    02:29:86:d8:8d:99:9e:fe:37:0d:f6:0c:8a:2d:d2:
                    42:8d:c1:f0:53:14:4b:50:70:8e:e6:d8:71:35:89:
                    93:da:db:d6:af:7b:bd:5e:31:4f:bf:42:44:48:a2:
                    de:7d:35:c0:69:51:ce:11:de:4e:9c:ab:0a:26:1f:
                    14:2a:97:21:c8:47:ea:94:5f:98:99:15:6d:3e:22:
                    3d:9c:6e:d3:6a:68:b8:32:5e:35:93:22:27:8f:0a:
                    3f:de:ac:2d:e6:bb:ca:6c:9d:c1:79:7e:d8:e5:8a:
                    37:f3:59:cc:e8:4c:44:5c:7b:e0:8e:75:88:d9:ae:
                    11:e0:f6:6a:0c:bb:74:95:b0:b9:dd:72:d3:13:40:
                    4f:c8:f8:13:3c:ba:a0:b1:d0:e1:17:42:14:a9:80:
                    8a:a4:5d:00:45:69:59:98:1c:a6:08:b0:0e:c0:db:
                    f1:b8:e9:25:3f:d5:c3:eb:5a:0e:ba:b9:24:e2:14:
                    0f:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:9B:5D:AF:39:6D:0D:78:0E:D2:2C:E0:6F:39:B3:1B:9C:0F:43:12
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/ae88a1-9526-4d77-afa4-f21e16035cc6/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/ae88a1-9526-4d77-afa4-f21e16035cc6/1/45tdrzltDXgO0izgbzmzG5wPQxI.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.246.112.0/23

    Signature Algorithm: sha256WithRSAEncryption
         46:32:b1:49:11:15:68:f2:d9:50:0e:de:aa:3e:60:36:6a:7d:
         eb:ce:ed:a2:8f:fe:89:ac:2a:c5:93:94:9f:2d:55:ff:bc:17:
         d4:94:23:bc:f1:e8:a8:92:5a:20:aa:af:ee:23:e3:27:06:05:
         d3:fa:af:c2:57:68:8c:20:a8:5f:f6:61:2b:8b:91:e9:18:46:
         c7:e1:7e:96:e2:31:5b:e1:ff:97:c4:5f:df:3d:02:2a:2f:51:
         e5:22:13:28:d9:78:72:25:12:bb:57:61:c6:44:8f:2b:1e:46:
         34:83:26:3a:9f:5a:2c:0e:93:f4:a2:94:99:ce:34:17:c7:58:
         be:bd:3d:bb:97:ff:7a:fa:78:e1:70:11:b8:87:1f:99:09:1e:
         14:ba:8f:c5:c5:a8:7a:b4:7d:c5:90:a9:14:dd:42:1e:e2:a2:
         0c:bf:8c:05:3d:6c:d9:c8:15:08:c3:1c:2a:f5:ef:ae:2d:8d:
         85:5f:09:f5:b6:39:dd:a5:5a:ea:0f:76:e7:8e:6e:37:fc:43:
         ef:79:cd:83:59:71:92:3c:6a:37:84:df:8d:55:df:62:cc:8d:
         ca:af:46:cd:7c:39:27:1c:97:21:0c:c0:58:df:1d:57:b9:38:
         4f:14:88:cf:3a:41:7d:02:65:f6:18:1d:3b:ac:f3:d9:16:e0:
         bb:e8:e1:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----