Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7FrBNcLmeWJqBySJYDFEVMLJM8Y.cer
File:                     7FrBNcLmeWJqBySJYDFEVMLJM8Y.cer (raw, json)
Hash identifier:          WnfmVPeSbIKtq/O84IEPmbZFCVdRgQ2E48VOIo8gEL0=
Subject key identifier:   EC:5A:C1:35:C2:E6:79:62:6A:07:24:89:60:31:44:54:C2:C9:33:C6
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856B6369F97AC9DA0FD7AFD16D0CABEC45
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/33/3567b2-c430-41fe-a2ca-163dbd377e4f/1/7FrBNcLmeWJqBySJYDFEVMLJM8Y.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/33/3567b2-c430-41fe-a2ca-163dbd377e4f/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 03:32:35 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    AS: 35735
                          IP: 91.208.110.0/24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6b:63:69:f9:7a:c9:da:0f:d7:af:d1:6d:0c:ab:ec:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 03:32:35 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=ec5ac135c2e679626a07248960314454c2c933c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:54:5c:fd:ba:01:22:52:a4:14:8b:4b:fc:c3:
                    8e:12:5c:b0:2d:12:97:cb:61:3e:82:c2:0d:b2:c2:
                    15:31:da:e1:86:31:4b:37:ca:33:85:93:2f:ce:9f:
                    52:e8:62:ec:1e:49:7b:ac:df:24:c9:04:7c:a6:ce:
                    6e:1a:1a:0b:26:a2:51:df:ce:0c:05:bd:7b:7f:40:
                    2e:3a:17:e0:1a:46:51:2a:7b:8e:0c:dd:df:64:f7:
                    f0:a3:37:ba:31:f7:ce:ee:38:82:5a:6e:00:bf:34:
                    f8:0c:38:89:3b:29:b1:aa:f3:37:90:b6:63:cf:d0:
                    ba:1d:1b:d8:bd:e3:a0:fa:86:a4:eb:d3:76:b1:ed:
                    46:7f:44:fa:84:1d:99:d5:17:f3:7a:3e:76:02:ad:
                    2a:f1:a9:35:e8:a3:9f:52:cb:50:69:f0:2d:8e:7f:
                    5e:96:68:8c:94:43:1c:dd:af:4a:3d:a7:ac:f8:c4:
                    a9:8a:a5:71:24:96:bb:fb:01:64:32:21:44:ac:16:
                    0d:56:10:de:0e:0d:fc:49:ed:09:80:10:1e:1e:87:
                    01:a0:76:f9:0f:02:d4:93:76:d6:59:9d:0a:09:5f:
                    90:75:bd:a0:5e:2b:7b:9d:f6:ac:4e:76:dc:7f:d2:
                    84:0e:3b:69:85:4d:8b:3a:43:7e:98:fc:ed:4c:fb:
                    be:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:5A:C1:35:C2:E6:79:62:6A:07:24:89:60:31:44:54:C2:C9:33:C6
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3567b2-c430-41fe-a2ca-163dbd377e4f/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3567b2-c430-41fe-a2ca-163dbd377e4f/1/7FrBNcLmeWJqBySJYDFEVMLJM8Y.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.208.110.0/24

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  35735

    Signature Algorithm: sha256WithRSAEncryption
         76:c8:d3:62:15:87:3d:b9:76:e5:fa:bc:17:0d:7c:c6:9d:c9:
         fa:e1:4b:4f:0f:f5:0e:9b:58:4c:75:c3:ce:eb:27:a2:f6:f9:
         31:b3:bf:a0:41:32:44:06:32:f1:01:14:2e:2b:d7:68:cd:82:
         f0:0a:51:82:89:0f:95:ee:d6:3c:67:44:41:49:21:a7:99:cd:
         4c:6b:87:a1:29:c3:66:cc:bf:6a:8b:91:e7:23:4c:94:ac:5a:
         1c:d0:88:a3:4c:b8:de:5c:2d:bd:cc:a6:ca:81:ca:24:92:8c:
         27:00:94:5c:4c:0c:02:00:09:e2:f6:7c:c0:a8:60:b7:17:dc:
         68:9e:ef:22:b6:b9:f6:3d:ad:e1:83:38:84:33:1b:59:3e:76:
         91:03:50:46:04:91:6d:76:d6:12:d4:0c:db:87:85:a6:95:f3:
         a1:75:61:a2:50:21:a4:28:ff:4e:46:c9:d0:27:14:32:43:02:
         91:91:ab:0d:a9:af:96:56:37:f9:54:5f:1d:e3:a3:ea:3c:00:
         57:33:64:35:05:6d:ac:7f:e9:c0:36:7a:d9:b1:aa:df:3e:44:
         ec:40:f3:1f:6f:61:f1:6c:ff:83:2e:2a:5c:1e:13:1d:7f:22:
         39:c7:19:3e:61:01:2d:4f:aa:e6:a9:02:4c:99:1f:0d:e8:92:
         a3:95:5d:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:15 2023 by rpki-client on console-fra.rpki-client.org