Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7hpiB_6dsND36dFhq6Tl3eJUmi4.cer
File:                     7hpiB_6dsND36dFhq6Tl3eJUmi4.cer (raw, json)
Hash identifier:          LPIXMyLWZZ8vwrRKYA8ilLRqeeEXQbj86fJhT6rGSqQ=
Subject key identifier:   EE:1A:62:07:FE:9D:B0:D0:F7:E9:D1:61:AB:A4:E5:DD:E2:54:9A:2E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018572448E9F933D9D68DE74A9BE9E63383A
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/69/718007-9703-4fab-94d7-d53838bcb505/1/7hpiB_6dsND36dFhq6Tl3eJUmi4.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/69/718007-9703-4fab-94d7-d53838bcb505/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 02 Jan 2023 11:36:13 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 188.95.69.0/24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:72:44:8e:9f:93:3d:9d:68:de:74:a9:be:9e:63:38:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 11:36:13 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=ee1a6207fe9db0d0f7e9d161aba4e5dde2549a2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:e4:6f:cb:a8:76:ef:f6:28:06:b5:44:69:e5:
                    12:8f:dc:0a:21:5a:fe:6a:1c:69:77:27:62:95:6f:
                    b1:94:a7:8e:a7:24:04:26:6d:f7:af:b6:7e:70:eb:
                    11:e2:b7:ca:33:88:1b:08:84:7e:2c:46:bf:8f:0d:
                    5c:e8:ee:a5:7d:5a:d5:ee:a2:e2:80:dc:ee:17:12:
                    14:c6:5a:a4:94:85:43:eb:bf:0a:0a:11:89:4f:a2:
                    59:cc:66:52:11:f2:65:85:00:72:5c:e5:51:fe:aa:
                    15:bd:91:f8:c4:03:91:d1:7c:f9:8f:fd:f2:f1:39:
                    ad:92:01:f5:98:52:53:09:c3:fd:32:73:14:61:2c:
                    b1:15:cb:0c:84:95:6e:d6:d1:36:cc:9d:c0:24:5e:
                    88:bb:52:28:0f:b8:37:02:02:22:ed:09:34:34:03:
                    55:d1:b4:40:e9:89:09:52:b5:86:36:ad:0e:8b:a1:
                    4e:ea:70:88:e4:2f:5d:8c:80:b5:7b:43:b5:b3:c8:
                    e5:e3:ad:98:81:7d:38:b1:f4:69:b9:8b:66:1c:e0:
                    da:bb:56:18:64:c7:a5:fc:c3:1f:f4:13:23:79:18:
                    e1:8e:de:bc:cc:05:27:71:94:dc:37:89:bd:20:66:
                    ec:11:93:0c:10:d9:0e:35:9d:3f:7d:c7:a7:d4:93:
                    1e:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:1A:62:07:FE:9D:B0:D0:F7:E9:D1:61:AB:A4:E5:DD:E2:54:9A:2E
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/718007-9703-4fab-94d7-d53838bcb505/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/718007-9703-4fab-94d7-d53838bcb505/1/7hpiB_6dsND36dFhq6Tl3eJUmi4.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  188.95.69.0/24

    Signature Algorithm: sha256WithRSAEncryption
         12:28:2c:36:5a:93:19:dd:cf:e7:56:10:30:e5:2e:3f:e7:53:
         01:b2:85:5f:02:71:e4:14:c0:63:27:cf:63:05:99:ee:2a:1e:
         40:84:83:c2:bf:bc:59:e7:27:7f:fb:e3:be:d6:30:bc:cd:96:
         f3:c1:78:ff:81:5a:6d:75:0c:23:6c:9a:63:28:a1:8f:16:b6:
         0a:09:b6:17:a9:66:8c:d3:44:f7:e5:33:b9:77:5b:bf:a5:85:
         dd:65:09:41:66:ff:d4:4f:45:23:38:13:f3:ab:bc:5d:dd:4a:
         51:c5:06:96:6a:41:fd:63:85:eb:b4:b6:7b:fe:81:c0:9b:e3:
         b5:54:5a:73:e2:5b:1e:05:c6:79:3b:b8:b4:b3:53:65:60:07:
         af:98:cd:53:31:18:2b:48:54:87:7b:13:78:fa:33:ed:3c:fe:
         5d:0d:bc:42:ba:b7:30:a7:2f:41:61:b8:63:98:dc:62:4e:47:
         19:38:3f:18:bc:d7:9a:64:c3:c8:dc:e9:eb:48:15:34:ed:f0:
         38:01:70:d5:ce:aa:1e:b0:a7:89:2e:f6:dc:51:15:65:11:49:
         50:cc:95:f3:61:72:67:f9:de:e9:c7:25:58:04:ff:db:f6:02:
         75:db:4f:22:bf:d4:1c:fd:d1:39:2e:64:ee:61:48:21:25:f1:
         72:40:5c:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 27 10:39:41 2023 by rpki-client on console-ams.rpki-client.org