Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8CsWuxSv28yjPr0QZtT0f1bCNNg.cer
File:                     8CsWuxSv28yjPr0QZtT0f1bCNNg.cer (raw, json)
Hash identifier:          AZ1xtrDRUGCCvNi5MOVa8exRFtv7rFZHWMx6g73sIyY=
Subject key identifier:   F0:2B:16:BB:14:AF:DB:CC:A3:3E:BD:10:66:D4:F4:7F:56:C2:34:D8
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0187222C62848461F5D897CC7AD12ECD9EA0
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/200/F02B16BB14AFDBCCA33EBD1066D4F47F56C234D8.mft
caRepository:             rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/200
Notify URL:               https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before:   Mon 27 Mar 2023 08:25:46 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 62.3.25.0/24
                          IP: 2a12:c600::/29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:22:2c:62:84:84:61:f5:d8:97:cc:7a:d1:2e:cd:9e:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Mar 27 08:25:46 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=f02b16bb14afdbcca33ebd1066d4f47f56c234d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:2f:e6:98:44:24:f3:84:7c:ea:13:45:fe:b5:
                    2d:e5:50:24:e2:7a:c4:74:8d:82:88:8f:fe:ed:0d:
                    69:76:ac:e1:e2:2b:54:46:5c:27:82:e6:76:39:2e:
                    d5:f2:21:5a:93:01:ea:16:16:97:58:c6:58:14:c3:
                    23:d4:4c:4a:4d:b9:c4:2b:50:0b:52:b6:0b:e3:83:
                    0a:86:1d:c0:2f:f9:ab:a1:8c:a5:73:90:ae:57:58:
                    00:eb:71:21:7d:09:97:07:83:b4:30:c6:12:f3:51:
                    8b:05:c2:29:4f:f3:e3:2a:55:25:ed:3e:3b:c7:ff:
                    a5:8c:51:4a:76:1b:fb:6b:91:73:a1:0e:94:e1:85:
                    79:b3:b5:13:97:ed:64:12:5c:bd:5c:8a:44:7a:30:
                    e4:03:c2:48:2c:c8:2c:49:3f:c4:e2:87:a5:5f:d0:
                    86:3b:4b:3c:7d:5c:93:7e:dd:cb:76:33:54:7b:90:
                    eb:10:bd:2f:58:2c:98:32:74:67:3a:5c:4a:93:7c:
                    18:18:b3:ce:72:e5:c2:b8:d1:7b:34:26:05:d4:b9:
                    4d:be:cd:5c:b7:25:e4:ae:7e:73:26:85:38:5b:97:
                    8d:64:61:91:06:f5:7d:28:0e:4e:c5:48:01:c7:82:
                    53:9f:b8:00:c9:86:3c:97:10:76:64:cb:e5:5c:8c:
                    3c:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:2B:16:BB:14:AF:DB:CC:A3:3E:BD:10:66:D4:F4:7F:56:C2:34:D8
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/200
                RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/200/F02B16BB14AFDBCCA33EBD1066D4F47F56C234D8.mft
                RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.3.25.0/24
                IPv6:
                  2a12:c600::/29

    Signature Algorithm: sha256WithRSAEncryption
         8a:a4:34:b3:55:6c:b9:aa:eb:c4:6f:bd:5a:39:de:4e:49:04:
         7d:da:1c:82:fb:8c:1f:8e:6f:4e:d4:f8:6d:57:e9:99:3d:1b:
         74:9b:0d:e1:09:28:de:1a:1a:33:ef:d2:0c:fd:ca:ff:70:df:
         46:8c:b6:21:f1:c7:85:30:63:f7:0c:7b:2d:60:4a:60:e1:ed:
         e3:60:81:2c:77:16:67:6a:6f:a9:4c:09:71:5a:59:eb:2d:95:
         0d:e3:ee:f9:9e:1f:1d:a8:78:f6:3a:b3:ed:e9:fb:d9:58:76:
         24:9d:7c:e6:72:55:8f:1a:99:0c:26:ec:8c:5c:7b:c6:5c:78:
         9d:fa:6f:f7:57:10:34:f3:6b:cf:1c:e1:3d:fd:af:14:35:25:
         cb:c4:09:57:c8:ba:67:b1:75:ef:67:7d:e4:ed:2e:85:9b:fa:
         1f:3b:24:dd:5c:22:53:ea:8a:03:0c:d8:74:c9:ba:14:59:2e:
         93:03:c5:95:ae:ef:63:64:02:51:d2:2b:cb:ed:26:07:ce:22:
         85:6c:cb:85:5c:f7:c0:68:d5:8a:9a:2d:2a:21:2b:52:88:fd:
         b8:b7:8a:18:7b:e5:05:7d:8d:8c:25:69:df:4b:36:34:f3:e2:
         52:13:57:16:37:1d:be:f7:60:72:bb:87:89:d6:cf:10:9f:ed:
         97:17:5f:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 20 12:48:45 2023 by rpki-client on console-ams.rpki-client.org