Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7Sxviz8roldSOZgvt2zvq-rQiJY.cer
File:                     7Sxviz8roldSOZgvt2zvq-rQiJY.cer (raw, json)
Hash identifier:          EQ/eHYPrXQcAWiKzrTT5ZvxIJBk3SHI9GDarFoYY5Bo=
Subject key identifier:   ED:2C:6F:8B:3F:2B:A2:57:52:39:98:2F:B7:6C:EF:AB:EA:D0:88:96
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856F41CC651CDBEE80C9280B8A6B4F438B
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/d0/b83592-74ce-486a-8f6e-1baf20b92f39/1/7Sxviz8roldSOZgvt2zvq-rQiJY.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/d0/b83592-74ce-486a-8f6e-1baf20b92f39/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 21:34:21 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 193.142.214.0/24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:41:cc:65:1c:db:ee:80:c9:28:0b:8a:6b:4f:43:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 21:34:21 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=ed2c6f8b3f2ba2575239982fb76cefabead08896
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:e0:f4:34:cd:a3:32:72:e8:04:15:68:03:25:
                    a4:12:43:47:56:f9:82:d8:d8:18:08:2f:27:82:bb:
                    8e:19:ca:c7:a7:13:cd:dd:9a:07:03:f3:f2:6e:5d:
                    bb:c9:ee:4a:f2:5c:19:fc:e0:b8:29:61:70:ba:64:
                    7a:fe:e9:8c:a6:2c:48:f6:e7:fa:9b:e1:d0:29:ed:
                    d0:d8:4d:c1:0b:cf:5f:92:e5:6f:45:94:b0:8d:2f:
                    18:bf:6b:be:c9:b6:3e:b8:71:98:df:5b:98:34:ff:
                    a5:53:4f:60:69:50:42:38:39:3f:62:42:b9:57:b6:
                    53:10:23:3f:d3:49:de:e0:27:30:63:13:dc:05:b6:
                    68:a1:5f:cb:a4:f6:73:cb:c8:39:c9:ca:15:dc:28:
                    7b:83:66:f6:0c:02:5c:da:15:88:26:89:88:39:cb:
                    d7:c6:06:61:6f:60:9f:50:9b:3d:52:ba:19:7b:55:
                    1d:c5:d7:b9:68:f4:6d:43:ba:61:6c:bf:d1:60:b4:
                    86:12:9f:6e:ee:ca:02:43:38:00:47:2a:bd:3e:4d:
                    8c:8f:33:e8:39:92:32:76:f9:9b:a0:74:13:dc:5a:
                    6e:e6:9a:a0:95:ab:10:c7:71:19:ee:f2:f0:c4:38:
                    b4:3f:b6:9d:72:84:1e:b2:0f:b0:46:05:a9:f8:f8:
                    a5:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:2C:6F:8B:3F:2B:A2:57:52:39:98:2F:B7:6C:EF:AB:EA:D0:88:96
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/b83592-74ce-486a-8f6e-1baf20b92f39/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/b83592-74ce-486a-8f6e-1baf20b92f39/1/7Sxviz8roldSOZgvt2zvq-rQiJY.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.142.214.0/24

    Signature Algorithm: sha256WithRSAEncryption
         02:c8:e7:a9:88:f6:93:d0:ac:96:2a:22:bc:de:ec:7e:6e:62:
         f3:98:af:3f:40:5b:62:16:db:00:92:8e:85:6e:bf:87:13:29:
         12:5e:cb:90:57:2d:51:33:98:59:a1:00:72:27:f2:8a:94:97:
         fe:a3:b4:27:4e:53:5b:13:b0:4a:ea:15:16:57:43:60:15:34:
         bc:05:6f:9b:60:e3:25:84:86:c5:80:b4:cd:33:6a:71:b5:5a:
         6e:34:db:58:91:57:40:7a:d6:ef:77:a2:1a:91:4f:d2:46:6d:
         1e:c8:8d:c2:db:d3:c0:d6:fa:62:86:8a:a7:29:3c:2b:e6:14:
         72:aa:80:d6:35:f2:af:01:9b:9a:67:2b:34:23:2c:ab:92:a1:
         30:d6:e4:8e:ac:72:3f:bc:4b:ca:a7:dd:67:7c:4b:f8:70:0c:
         59:72:4e:40:de:c1:4f:1d:d2:e0:c1:14:18:a7:bc:72:47:c6:
         e1:63:09:41:18:ea:af:10:d8:d3:e1:44:fd:c2:87:cc:94:eb:
         de:af:22:61:75:94:84:93:e9:97:cd:f7:1d:4f:1d:24:c9:be:
         35:e6:dc:db:87:25:97:27:4e:38:23:b3:12:7e:d3:39:06:17:
         85:34:e5:00:c8:5d:9e:da:5b:59:36:0c:1a:ea:47:66:e2:55:
         fc:27:8a:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:52 2023 by rpki-client on console-ams.rpki-client.org