Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98AB2NjexoQyX6hgHwfJrARQeBk.cer
File:                     98AB2NjexoQyX6hgHwfJrARQeBk.cer (raw, json)
Hash identifier:          wgN8c35RFnTDDL1m/T+F7wkS5tQ+6zajnL+FYUuxac4=
Subject key identifier:   F7:C0:01:D8:D8:DE:C6:84:32:5F:A8:60:1F:07:C9:AC:04:50:78:19
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856F405371F20CCB20AB4C01FC3F99A6A3
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/20/8eb46c-218c-444c-89d2-acf322267c47/1/98AB2NjexoQyX6hgHwfJrARQeBk.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/20/8eb46c-218c-444c-89d2-acf322267c47/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 21:32:44 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 176.116.28.0/24
                          IP: 2a11:ec40::/29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:40:53:71:f2:0c:cb:20:ab:4c:01:fc:3f:99:a6:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 21:32:44 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=f7c001d8d8dec684325fa8601f07c9ac04507819
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:8f:d8:9c:ce:95:ff:68:54:81:ab:a0:16:be:
                    2d:95:db:8b:b9:45:ab:fe:f5:dc:a4:4e:a7:4b:c1:
                    fe:99:09:40:91:cc:43:48:fb:46:07:6c:d6:b0:a1:
                    11:6c:ab:fd:ae:74:36:55:fd:06:cc:4c:24:21:e2:
                    c3:ca:15:02:63:62:ca:26:a8:a9:e1:dd:42:fb:36:
                    50:e0:10:eb:72:6c:f9:7f:ee:17:6b:44:ad:88:a4:
                    a0:20:cb:00:43:9a:68:ec:01:06:ee:b7:b2:60:84:
                    53:8f:07:45:d5:40:8f:61:c0:c6:a3:2f:54:a9:a3:
                    c0:9e:a8:0e:fb:41:af:be:c5:62:3b:3c:c6:2f:e2:
                    8c:89:5a:7d:6e:ca:10:f2:c1:8b:82:a4:bc:46:17:
                    b0:1b:15:20:94:c0:63:69:43:ab:23:01:0d:1e:8c:
                    9a:b4:13:f6:58:51:cb:b9:40:ca:34:78:38:7b:81:
                    8b:ef:0b:51:be:f5:db:d2:90:f3:fc:d7:05:e7:ef:
                    f8:83:25:cf:86:0e:45:65:ed:98:f7:0b:a3:45:d2:
                    04:9c:21:45:ff:9a:a6:fc:9d:e0:59:9c:da:48:d8:
                    f6:80:f3:44:2a:a7:87:10:a0:8f:f9:2a:f0:f2:b7:
                    6c:0e:2e:f7:0a:7a:ce:23:54:3c:fe:3d:9d:aa:fc:
                    f9:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:C0:01:D8:D8:DE:C6:84:32:5F:A8:60:1F:07:C9:AC:04:50:78:19
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/8eb46c-218c-444c-89d2-acf322267c47/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/8eb46c-218c-444c-89d2-acf322267c47/1/98AB2NjexoQyX6hgHwfJrARQeBk.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  176.116.28.0/24
                IPv6:
                  2a11:ec40::/29

    Signature Algorithm: sha256WithRSAEncryption
         a6:4a:f5:9b:c9:27:7b:00:96:87:7e:ee:db:b2:52:4f:fb:be:
         67:5a:31:48:72:2d:ab:e7:8c:90:19:48:fc:20:59:bc:d4:8c:
         96:43:6b:57:bd:48:9a:af:a2:71:f4:5a:dd:72:1e:17:a5:ad:
         2f:c9:f7:18:be:ef:06:aa:5b:d6:40:73:6e:3b:fb:5f:d1:5c:
         17:9a:3f:ba:2f:45:65:12:a1:df:ed:38:9e:9a:ef:23:3e:c0:
         fc:14:4a:25:ba:93:b6:03:8f:f7:26:4b:6d:db:5b:af:2b:65:
         99:06:23:81:bd:c4:d6:6e:78:a0:f5:d7:35:15:f6:d1:dd:e7:
         46:b7:c6:0b:30:15:67:96:f0:d7:01:ed:e2:a1:77:f1:52:e0:
         e4:42:32:ca:fb:24:26:fe:fc:ca:3d:1f:aa:65:a7:ab:b5:55:
         4a:92:1d:97:80:a3:4a:86:a6:6c:98:16:1d:7d:ea:e6:76:63:
         aa:85:8c:e2:9c:80:dd:b1:f7:a0:b6:55:fb:1f:bf:50:dd:1b:
         8a:9d:ee:c6:dc:bd:eb:2c:44:18:a4:3f:89:35:6b:b1:e0:a9:
         97:f3:40:97:97:cf:88:94:ea:bf:04:bc:42:02:b5:a0:c0:b4:
         3c:ea:67:92:67:f8:51:41:31:e6:56:c5:56:1b:13:ee:f9:be:
         e5:cc:ee:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----