Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8mhiy8WLTaRPcZUlVGSo2VRf7QQ.cer
File:                     8mhiy8WLTaRPcZUlVGSo2VRf7QQ.cer (raw, json)
Hash identifier:          4Sw9S2i6xCf23MIgU2EXr74jCQPlqximxDiABNWppGc=
Subject key identifier:   F2:68:62:CB:C5:8B:4D:A4:4F:71:95:25:54:64:A8:D9:54:5F:ED:04
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018571D67E19166EB674E3E9645F87882048
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/87/80dfb2-948b-4214-82ed-ac7012cf1dcd/1/8mhiy8WLTaRPcZUlVGSo2VRf7QQ.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/87/80dfb2-948b-4214-82ed-ac7012cf1dcd/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 02 Jan 2023 09:36:00 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 178.212.225.0/24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:71:d6:7e:19:16:6e:b6:74:e3:e9:64:5f:87:88:20:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 09:36:00 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=f26862cbc58b4da44f7195255464a8d9545fed04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:2e:68:1e:64:d8:18:c8:ba:95:10:46:51:4d:
                    58:23:83:c2:16:77:10:6c:46:db:d8:99:5e:b9:c9:
                    3c:4a:da:ef:1f:a3:de:02:39:00:e0:96:25:60:b4:
                    3c:af:47:fe:15:98:94:2c:86:9e:16:3f:12:ba:e4:
                    b6:96:1a:4c:f0:bb:e6:fc:91:3a:d4:c2:30:7b:c4:
                    0d:70:38:a8:85:f1:3b:c1:70:f2:7a:27:99:c2:f5:
                    fc:43:ac:58:99:84:a8:5c:ba:f7:4a:d8:64:96:7e:
                    7e:eb:1c:dc:19:a5:c1:5f:1e:72:f5:57:ae:16:3a:
                    91:bf:f3:71:2e:1e:59:11:8c:1b:67:3f:03:4b:c4:
                    2f:b4:12:f7:ea:42:7a:04:2c:a9:25:2c:2d:36:50:
                    c0:b5:09:57:08:a0:db:4c:01:be:4c:72:f6:f0:f5:
                    e7:c6:78:f8:3a:56:e4:76:23:4c:36:44:94:6a:28:
                    66:1e:36:ad:be:d5:f2:c7:cd:b5:55:eb:d7:e3:93:
                    7e:78:fe:8f:a0:42:ea:31:10:3d:41:c5:4f:bb:d9:
                    7a:4c:2a:4b:c8:57:84:c7:76:5b:47:f5:ec:d6:28:
                    e5:7b:7b:06:a8:d5:f5:bc:67:46:a6:d1:0a:53:c9:
                    82:80:01:0c:a0:9c:6a:82:6b:83:14:b0:dd:68:57:
                    9b:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:68:62:CB:C5:8B:4D:A4:4F:71:95:25:54:64:A8:D9:54:5F:ED:04
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/80dfb2-948b-4214-82ed-ac7012cf1dcd/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/80dfb2-948b-4214-82ed-ac7012cf1dcd/1/8mhiy8WLTaRPcZUlVGSo2VRf7QQ.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  178.212.225.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9e:2c:06:16:75:74:c8:33:03:d5:06:f9:82:f2:10:e7:32:65:
         d0:61:ac:e7:30:98:d1:38:e4:f6:76:ea:7e:46:43:12:d6:1f:
         90:68:b7:b9:d4:05:f0:44:f5:4b:12:9e:b5:8d:53:f0:1a:2e:
         cb:b9:3d:1f:35:6e:da:cb:be:a7:4d:00:cb:d7:54:83:04:36:
         70:68:0f:15:47:23:0b:4f:1b:ae:a3:4f:b4:01:fa:ca:4c:92:
         83:1c:da:61:34:03:c6:b1:8d:bd:9c:77:5e:8b:1e:c9:75:e0:
         dd:52:39:80:23:99:5e:09:7a:fc:8d:c1:e2:2c:ef:84:7f:66:
         93:ba:9b:8b:57:cf:47:b5:ac:65:1a:c5:ec:02:07:17:81:4f:
         24:5f:a7:c4:fc:18:e5:60:d8:59:2d:72:6c:14:66:ee:43:c6:
         a6:e2:9b:56:d4:ff:13:70:a9:28:7e:4f:e6:bb:e5:44:5f:2f:
         66:a8:d2:23:05:d5:6c:22:c9:7a:44:8b:f7:f0:44:16:4b:dc:
         a0:85:e1:75:0f:ef:06:b5:64:60:ed:ab:3f:46:50:ef:da:b1:
         d1:13:a4:1a:d5:d6:46:e2:eb:f7:86:ba:a6:5b:35:39:08:e7:
         ce:05:9c:46:a0:4c:99:30:3e:0c:6a:f0:a4:b2:65:8a:0b:4a:
         7a:fc:b7:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 4 11:34:50 2023 by rpki-client on console-fra.rpki-client.org