Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6rZxTXGRgev8zV3N5s1ildd43tk.cer
File:                     6rZxTXGRgev8zV3N5s1ildd43tk.cer (raw, json)
Hash identifier:          wfNjioVoHIZ5uhORJSWEPEjbWIQymDdjZSrC0pxuEdw=
Subject key identifier:   EA:B6:71:4D:71:91:81:EB:FC:CD:5D:CD:E6:CD:62:95:D7:78:DE:D9
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018B949958911AD050BD0792DA4304500772
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/b6/717273-6b83-47c2-a343-c5824e422e21/1/6rZxTXGRgev8zV3N5s1ildd43tk.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/b6/717273-6b83-47c2-a343-c5824e422e21/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 03 Nov 2023 09:52:39 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 2a11:4c40::/29

Validation:               Failed, certificate revoked on Fri 03 Nov 2023 10:07:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:94:99:58:91:1a:d0:50:bd:07:92:da:43:04:50:07:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Nov  3 09:52:39 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=eab6714d719181ebfccd5dcde6cd6295d778ded9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:aa:16:1d:a7:4e:b5:70:e0:fb:cf:c7:69:9c:
                    93:76:4e:ef:ca:34:f2:b3:12:4d:ca:84:b3:e0:e5:
                    2a:37:bd:e1:10:ff:ec:f6:e9:99:50:f7:38:fe:59:
                    0e:75:02:9c:52:93:90:02:39:47:1d:01:dd:8f:2b:
                    2a:f7:f0:d4:a7:24:81:79:0e:ad:b0:1b:95:37:17:
                    ee:48:75:e7:15:99:0d:55:46:0e:20:04:6c:3e:d9:
                    0b:80:c3:83:28:21:8f:7a:ab:b5:ab:1b:b1:5e:0a:
                    b7:18:ba:73:90:ef:bb:a6:6f:6f:1b:95:91:29:f7:
                    1c:3a:cc:b8:82:ce:9e:d4:fc:83:a0:ed:de:73:1a:
                    3f:3a:2f:0a:49:4b:c0:5b:d4:ba:1a:93:69:8a:c1:
                    f5:3a:6a:50:25:ed:e7:78:2e:b7:25:7b:3d:98:e8:
                    6a:56:42:89:05:b9:41:34:81:50:6c:31:af:a5:13:
                    28:a9:00:34:06:34:91:7c:d5:4a:18:cf:0c:0c:96:
                    be:7c:21:5e:e6:06:64:18:65:23:6e:2e:c0:94:a4:
                    20:e6:45:30:4e:27:0e:ab:a4:65:06:14:9d:0a:b5:
                    ad:0e:47:6a:31:bd:2f:34:86:72:08:07:8f:66:ff:
                    21:18:75:f8:91:85:bb:66:8d:15:9b:80:54:75:ac:
                    02:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:B6:71:4D:71:91:81:EB:FC:CD:5D:CD:E6:CD:62:95:D7:78:DE:D9
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/717273-6b83-47c2-a343-c5824e422e21/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/717273-6b83-47c2-a343-c5824e422e21/1/6rZxTXGRgev8zV3N5s1ildd43tk.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a11:4c40::/29

    Signature Algorithm: sha256WithRSAEncryption
         3a:99:d4:a6:a6:fb:0b:66:52:f3:72:58:04:71:66:da:a1:f2:
         af:e6:e2:d5:f8:cc:74:95:5e:97:7d:b1:ac:98:cf:85:09:93:
         c6:46:f4:f8:2b:c8:47:f0:4c:97:66:0c:88:16:68:f5:7a:35:
         2a:09:b4:01:a1:13:0f:b1:12:c0:96:25:65:db:90:7e:45:76:
         4f:08:a3:47:ce:9b:58:48:77:83:b8:4f:1a:36:64:53:d4:9e:
         35:e7:f1:45:36:2e:a4:43:84:99:ae:27:e1:94:af:da:27:52:
         3b:5e:5d:25:d6:f2:ed:1c:db:2f:b6:2d:7e:32:9f:03:fd:8f:
         bc:94:99:9b:a4:a4:d2:20:89:88:39:3f:c4:5c:24:d3:73:c5:
         ee:7b:f0:96:fb:00:fe:c8:16:32:8e:39:38:4c:63:7c:ca:c9:
         6c:9c:19:50:36:5f:35:68:d6:e4:02:6e:68:a6:d0:7d:5b:b8:
         17:b2:2d:f0:7f:a8:4e:c5:90:47:17:6b:a0:1c:9a:72:55:15:
         90:f4:9e:d8:8e:09:df:78:ee:8d:90:35:fb:a3:93:9d:20:ea:
         d6:5a:be:81:4b:19:8e:9e:4e:5d:53:59:d7:8f:12:a4:a4:fa:
         e6:67:f6:09:df:72:78:23:62:2a:a4:c0:b4:2b:5b:d9:45:c4:
         ff:15:07:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----