Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63ilH5Xlor3KAHkr_0kyPReDpZU.cer
File:                     63ilH5Xlor3KAHkr_0kyPReDpZU.cer (raw, json)
Hash identifier:          gMVz589i0TNof5xA1sQBfhrXjUitTHMMaTacCZdttY0=
Subject key identifier:   EB:78:A5:1F:95:E5:A2:BD:CA:00:79:2B:FF:49:32:3D:17:83:A5:95
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018571D67819976C4F01A92FC5F66FC35ED2
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/c8/74637a-cf75-4f08-8fc7-03a4500e1040/1/63ilH5Xlor3KAHkr_0kyPReDpZU.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/c8/74637a-cf75-4f08-8fc7-03a4500e1040/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 02 Jan 2023 09:35:59 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 212.24.112.0/24

Validation:               Failed, certificate revoked on Fri 20 Oct 2023 13:37:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:71:d6:78:19:97:6c:4f:01:a9:2f:c5:f6:6f:c3:5e:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 09:35:59 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=eb78a51f95e5a2bdca00792bff49323d1783a595
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:c1:e5:ea:b2:71:5f:25:65:76:14:e4:ae:b7:
                    f5:e9:eb:6f:18:c9:88:29:06:12:db:9d:59:a7:e6:
                    10:96:1d:ad:65:b2:93:bd:56:b4:73:16:f3:2d:ac:
                    d8:8d:83:06:68:b8:b5:20:b0:a2:aa:f3:cf:5a:cf:
                    8a:25:32:98:b8:51:8e:d6:a2:bd:81:99:3d:1e:c4:
                    57:86:69:17:37:57:f5:ad:f9:5e:f1:75:e4:9e:46:
                    5b:ad:08:4c:e5:f2:d2:aa:79:e0:ab:17:e8:4d:fb:
                    ab:c1:70:3a:31:b7:00:fd:5b:f2:b0:86:b2:9c:4a:
                    76:74:95:13:2f:70:0d:7c:4f:3e:26:08:e2:85:5b:
                    23:1b:fe:9b:4d:6d:13:05:bb:51:22:bb:ab:81:54:
                    24:44:85:81:cb:2e:0d:79:49:c8:61:60:22:8a:59:
                    9e:8f:9d:19:9f:7e:9d:9b:01:87:77:38:31:57:d3:
                    61:cc:c4:ac:f2:a4:f1:b1:ed:18:12:0b:82:3f:63:
                    25:82:39:5b:98:8b:db:1c:42:66:f3:da:5b:fc:fe:
                    13:bd:0b:e6:55:14:40:4d:77:07:e1:1d:d0:f1:b3:
                    3c:a8:5a:bf:96:01:d2:11:15:8d:b4:dc:f5:44:db:
                    96:8e:00:2e:ac:92:cb:91:53:5e:cf:1f:65:e9:4d:
                    96:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:78:A5:1F:95:E5:A2:BD:CA:00:79:2B:FF:49:32:3D:17:83:A5:95
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/74637a-cf75-4f08-8fc7-03a4500e1040/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/74637a-cf75-4f08-8fc7-03a4500e1040/1/63ilH5Xlor3KAHkr_0kyPReDpZU.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.24.112.0/24

    Signature Algorithm: sha256WithRSAEncryption
         92:b0:da:96:1a:4d:22:0d:29:70:4d:85:65:7f:0d:83:38:4a:
         62:b9:da:d2:97:c9:81:52:a1:ea:a3:22:35:b3:98:ca:54:20:
         4f:fe:94:29:23:fb:7f:81:bb:74:ef:7f:d4:6b:76:31:e8:86:
         61:d7:12:a1:90:0e:58:3f:3a:f0:3f:48:26:4d:98:5f:48:16:
         15:fa:0b:b6:76:a7:92:24:11:f2:38:7d:54:05:42:3b:10:c6:
         98:23:6b:4e:ae:d4:36:21:65:fa:66:03:a5:98:0a:f4:67:7b:
         b5:b7:68:53:26:87:fd:6f:dc:53:89:87:be:b5:1d:b2:21:dd:
         3e:da:4d:fd:2d:b0:b7:e9:86:b5:13:5e:78:78:ac:e4:6d:fb:
         ac:f8:b6:62:23:bb:61:95:38:6d:67:f3:0a:f6:19:5b:20:db:
         df:ee:6b:24:c4:34:02:22:c1:db:a1:73:5e:3f:45:05:c7:6b:
         5b:95:6b:aa:06:dd:37:d8:75:db:8d:26:c2:01:e9:1f:e0:f8:
         61:25:65:4f:1f:00:76:cc:fe:fb:19:e0:df:cf:e0:30:5b:44:
         36:8b:ac:73:60:73:ad:79:2f:aa:31:98:1b:2c:42:28:fa:2a:
         8c:d1:92:70:87:e1:2f:15:0e:a4:c1:1c:57:13:9c:7e:ad:e8:
         62:e5:d4:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----