Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7N0H7vdvGlxOxNlEKT4JbpZ8o9A.cer
File:                     7N0H7vdvGlxOxNlEKT4JbpZ8o9A.cer (raw, json)
Hash identifier:          6h0CPQoPZFoAGO4+Gzoct9yiU39iA7ueMASosZJBoV0=
Subject key identifier:   EC:DD:07:EE:F7:6F:1A:5C:4E:C4:D9:44:29:3E:09:6E:96:7C:A3:D0
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018A942B43BD4605A72DB08B2AEEAFD8932C
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://0.sb/repo/sb/10/ECDD07EEF76F1A5C4EC4D944293E096E967CA3D0.mft
caRepository:             rsync://0.sb/repo/sb/10/
Notify URL:               https://0.sb/rrdp/notification.xml
Certificate not before:   Thu 14 Sep 2023 14:49:37 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 193.163.19.0/24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:94:2b:43:bd:46:05:a7:2d:b0:8b:2a:ee:af:d8:93:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Sep 14 14:49:37 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=ecdd07eef76f1a5c4ec4d944293e096e967ca3d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:bf:9a:bd:cc:b0:cb:4b:e3:48:18:d1:3d:52:
                    8d:92:8b:50:3f:82:b0:4c:73:bb:79:85:5a:31:6f:
                    2f:91:df:a0:12:d5:c6:aa:be:0a:23:1f:1e:89:6d:
                    f0:cf:3d:d9:74:49:25:52:11:3a:aa:41:49:16:62:
                    87:ec:8b:a0:ae:5a:52:a3:6b:67:c2:ca:e1:ee:17:
                    ff:b6:8c:c2:65:2f:dd:17:db:72:fa:b3:25:0a:b4:
                    15:ce:ec:4b:0e:1d:a1:0b:71:c5:22:15:0b:d1:bd:
                    54:1a:4e:d3:ea:46:d7:72:50:6d:28:89:6a:36:04:
                    16:09:03:da:55:85:35:d8:db:b5:e1:4e:d4:df:b5:
                    74:5f:d7:fb:2b:f6:55:4b:fb:76:d6:7b:60:78:46:
                    28:a1:e2:4f:01:5b:1c:5d:4b:26:2a:88:f5:ca:35:
                    27:44:b5:26:51:40:15:47:b0:42:3a:a3:81:d2:33:
                    00:ec:61:33:d3:83:b9:68:75:68:fc:5e:0d:cc:ae:
                    52:d9:dd:16:fe:10:18:1e:ac:c4:51:f8:75:21:0d:
                    35:6f:9f:fd:79:51:d5:91:cc:c5:31:26:39:4b:1b:
                    97:1f:44:87:94:73:84:6d:94:af:00:1c:b3:08:f2:
                    a1:af:72:29:d5:fc:05:5c:cf:7c:dd:4a:26:fb:41:
                    c1:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:DD:07:EE:F7:6F:1A:5C:4E:C4:D9:44:29:3E:09:6E:96:7C:A3:D0
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://0.sb/repo/sb/10/
                RPKI Manifest - URI:rsync://0.sb/repo/sb/10/ECDD07EEF76F1A5C4EC4D944293E096E967CA3D0.mft
                RPKI Notify - URI:https://0.sb/rrdp/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.163.19.0/24

    Signature Algorithm: sha256WithRSAEncryption
         90:94:07:6e:8d:e2:ba:3c:08:ae:92:3f:b1:83:0d:65:1e:de:
         cd:04:7a:d2:43:b8:a6:67:fc:2f:cc:2a:af:98:f7:0a:48:6a:
         23:d1:52:8c:91:ed:a1:49:fb:e4:96:e5:87:21:50:80:c5:bb:
         ed:ce:dc:5d:d6:c0:03:31:7d:0c:5a:0b:13:b4:f4:5c:75:08:
         94:00:77:85:e6:8a:23:84:15:69:19:c9:4e:39:b4:b3:78:64:
         a3:16:f4:9b:ca:6e:6f:ec:bb:7a:44:a2:6b:d9:de:e1:8c:a7:
         ac:90:94:05:58:a0:d2:c9:b0:b3:e9:9e:95:1e:09:42:45:3a:
         71:b2:41:bd:bc:d5:4c:d1:e5:78:8b:65:e3:27:22:d0:18:51:
         ce:76:ae:66:3c:9d:2b:05:d8:44:38:33:82:41:45:0f:30:e5:
         dc:79:e3:43:af:10:de:9c:e5:16:3b:65:13:16:5d:d5:1e:92:
         bd:14:e8:33:98:59:1d:6d:3c:c9:34:3e:23:87:ee:57:08:3f:
         14:a2:8e:f4:72:4a:be:34:67:a3:b9:eb:b0:36:81:c7:67:5e:
         13:5c:bd:f1:64:cc:07:8a:17:02:8e:7a:98:c1:f2:44:09:52:
         28:87:d6:26:14:2c:34:4c:b7:ee:c6:57:47:22:b5:fe:65:ca:
         e0:a7:6e:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 14 13:07:36 2023 by rpki-client on console-fra.rpki-client.org