Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96D92FKSruT45BrpWnAnpAwPVEo.cer
File:                     96D92FKSruT45BrpWnAnpAwPVEo.cer (raw, json)
Hash identifier:          /zKFI6c24WFWus1eJZ7wiKr3UMofyODY11zgD/cdplI=
Subject key identifier:   F7:A0:FD:D8:52:92:AE:E4:F8:E4:1A:E9:5A:70:27:A4:0C:0F:54:4A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018C68648E6B6D6891A852DA195228E4B89E
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/1e/1c9743-546b-4c6d-807d-e3ea6998d42a/1/96D92FKSruT45BrpWnAnpAwPVEo.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/1e/1c9743-546b-4c6d-807d-e3ea6998d42a/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 14 Dec 2023 12:54:29 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 84.246.85.0/24
                          IP: 2a14:2d80::/29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:68:64:8e:6b:6d:68:91:a8:52:da:19:52:28:e4:b8:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Dec 14 12:54:29 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=f7a0fdd85292aee4f8e41ae95a7027a40c0f544a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:4d:8b:37:ed:dd:9b:47:d3:fc:0f:03:c8:44:
                    80:b5:1b:b2:c2:07:96:96:48:f9:72:74:fd:70:c2:
                    2b:4c:6f:a0:f2:3f:ea:75:5e:1f:59:a2:fd:2f:95:
                    06:92:2d:7e:09:31:2d:d0:08:00:9b:b1:d2:09:3c:
                    00:21:c4:e7:ad:d6:87:0a:3c:41:8b:26:33:6f:46:
                    f8:4d:0f:71:7d:6b:22:bb:44:73:ed:48:8a:19:a5:
                    2d:c8:45:a1:26:54:b0:1b:e5:80:11:0f:9d:62:24:
                    d7:31:06:5f:81:09:70:9c:58:63:44:65:b7:f6:a7:
                    43:98:2f:f2:01:af:ef:58:b4:34:ee:a1:9a:75:06:
                    dc:0f:cd:89:d6:38:08:55:f5:37:36:c9:6d:d7:ee:
                    d6:30:ab:3c:52:ba:0d:79:9f:09:4e:49:9d:c2:90:
                    32:6f:22:65:22:aa:93:41:fb:d2:65:9f:de:5c:1d:
                    09:2d:ca:da:82:3b:b1:21:97:9f:fa:72:c2:ba:0c:
                    10:3a:91:05:51:3c:04:67:09:4a:58:55:f1:46:9b:
                    db:2b:e7:db:cb:9e:c5:ff:57:c1:d0:66:e9:ef:cb:
                    03:86:49:05:fc:99:da:ac:f2:9b:5f:e0:a1:03:84:
                    b3:9a:3a:4a:aa:8c:a7:69:e2:79:30:7a:59:48:60:
                    f1:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:A0:FD:D8:52:92:AE:E4:F8:E4:1A:E9:5A:70:27:A4:0C:0F:54:4A
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/1c9743-546b-4c6d-807d-e3ea6998d42a/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/1c9743-546b-4c6d-807d-e3ea6998d42a/1/96D92FKSruT45BrpWnAnpAwPVEo.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  84.246.85.0/24
                IPv6:
                  2a14:2d80::/29

    Signature Algorithm: sha256WithRSAEncryption
         8f:1b:f8:ee:53:5b:a2:5d:13:4b:e2:fe:53:cc:fe:43:b1:23:
         46:96:97:a1:c5:79:68:fe:6e:4f:1e:5e:09:84:ed:73:ec:b0:
         a2:3b:a1:34:fb:06:85:f6:87:0e:4f:e5:c1:bb:69:ea:de:ff:
         45:96:a3:0c:74:a3:a5:0c:60:96:d3:8f:a3:09:a5:ce:d4:ac:
         97:78:39:d6:1e:a9:36:e1:dc:32:29:76:3c:f9:df:a4:e8:20:
         47:b4:68:4c:85:11:ec:3c:0a:93:10:79:c6:5b:79:21:a1:3e:
         3a:53:63:e5:fe:3a:80:56:c9:6e:63:d4:b4:1b:f0:6c:02:83:
         42:cc:56:d3:7a:09:e5:1c:51:38:cf:06:8e:87:3a:00:f2:8e:
         87:15:29:67:e5:83:cf:ef:6e:74:6c:bd:c6:df:d5:12:75:77:
         70:20:c2:7a:8c:38:0b:64:8b:e0:ca:75:e9:20:c6:d8:ec:49:
         54:3b:8f:77:a5:1f:89:4c:a4:48:d7:c3:03:ce:19:80:24:a0:
         df:78:cd:b9:42:70:0d:de:8e:aa:c4:86:a1:7b:1c:29:52:52:
         8a:3e:60:73:3d:29:2b:43:1d:98:9e:aa:67:b0:30:d7:d4:68:
         62:3e:f9:f1:35:c5:cf:d1:af:70:03:4f:b0:0d:a2:da:20:55:
         9e:e4:82:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----