Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/A5nswJFEFGzBdbWKTeQAx2Wa5PU.cer
File:                     A5nswJFEFGzBdbWKTeQAx2Wa5PU.cer (raw, json)
Hash identifier:          ZDHJMWUdWouYPlUosN7DKVJvABvgjoDRsQWGj5WdJE4=
Subject key identifier:   03:99:EC:C0:91:44:14:6C:C1:75:B5:8A:4D:E4:00:C7:65:9A:E4:F5
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018A3842536EB9A535E9191228A2B1839352
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/63/7aab20-06a4-4e1c-98e8-085c90211cd0/1/A5nswJFEFGzBdbWKTeQAx2Wa5PU.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/63/7aab20-06a4-4e1c-98e8-085c90211cd0/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 27 Aug 2023 18:29:45 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 93.95.112.0/21

Validation:               Failed, certificate revoked on Fri 17 Nov 2023 14:43:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:38:42:53:6e:b9:a5:35:e9:19:12:28:a2:b1:83:93:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Aug 27 18:29:45 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=0399ecc09144146cc175b58a4de400c7659ae4f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:2d:dd:e9:55:f6:af:63:a8:dc:69:68:b2:27:
                    8c:1d:a4:07:da:14:15:a7:ef:ef:88:58:83:bf:b0:
                    a6:22:82:c8:70:b1:1f:eb:b7:09:7b:53:df:1d:8b:
                    f9:28:a2:90:57:ca:4d:64:8f:9f:ce:07:c7:7b:76:
                    3c:4f:fc:2d:71:4c:2c:12:2a:46:44:a6:44:15:cb:
                    64:91:9a:66:87:44:b6:ac:26:ac:b9:a9:c3:5a:2f:
                    12:e3:44:75:5c:8e:ef:90:44:89:bb:4e:71:f7:76:
                    6c:18:e9:1d:4a:e1:d8:fb:d3:69:55:a3:a2:32:97:
                    0c:f3:b2:5d:03:9a:a4:5b:18:79:4c:63:5b:74:95:
                    4a:d4:90:70:6e:a4:79:f5:5e:c4:0a:54:dc:e2:90:
                    8b:2b:59:29:c9:1d:2b:a8:67:e3:9d:99:63:61:c7:
                    da:3a:53:e3:50:10:66:11:2e:bb:29:8a:c4:37:1a:
                    97:12:92:0c:4f:71:ea:42:6d:62:89:ec:92:fa:41:
                    f4:51:83:6f:84:12:0c:8c:dd:c8:f0:48:ae:9d:7f:
                    26:a3:b3:de:0f:64:45:47:55:d1:da:66:7c:18:ca:
                    82:a1:7f:18:f4:ff:5e:62:bb:81:fd:4d:61:7f:d3:
                    ff:43:4a:80:bc:53:52:5e:d4:6a:11:d9:9c:54:b8:
                    3a:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:99:EC:C0:91:44:14:6C:C1:75:B5:8A:4D:E4:00:C7:65:9A:E4:F5
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/7aab20-06a4-4e1c-98e8-085c90211cd0/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/7aab20-06a4-4e1c-98e8-085c90211cd0/1/A5nswJFEFGzBdbWKTeQAx2Wa5PU.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.95.112.0/21

    Signature Algorithm: sha256WithRSAEncryption
         4a:e7:04:29:5b:03:5d:c1:6f:05:9a:42:50:68:12:f2:64:b9:
         72:f2:b0:ee:1e:37:f2:3e:34:a5:6b:22:76:2c:f3:93:b0:fe:
         a9:a2:e8:26:0f:7e:ba:66:26:fa:fa:79:03:94:1a:0f:6f:a4:
         f9:52:14:20:57:e5:7f:85:5a:db:cb:53:b4:b4:90:75:d1:9d:
         2a:7f:3e:a9:36:35:f3:86:fc:af:06:ca:39:48:9f:04:f1:44:
         15:4b:9b:0f:c0:83:e9:57:ee:a3:3e:db:1e:58:f5:15:63:53:
         36:05:97:ac:9f:0c:e3:e2:41:d1:7c:42:df:6c:74:6e:6c:02:
         6d:97:3f:83:22:42:de:a9:2a:b9:6d:96:47:62:4c:b7:10:82:
         79:0e:67:5a:ff:3f:09:2b:f3:9e:a5:13:af:74:2e:72:f6:ae:
         c1:e4:a0:e7:0c:30:4b:1f:f2:a7:c0:6b:81:8e:27:b1:bf:ba:
         c0:52:58:04:42:ee:fe:f0:70:ab:a0:32:09:17:f0:5b:ca:8d:
         2e:13:34:13:eb:26:ca:d1:10:e7:ea:cf:05:d4:2b:36:1c:03:
         e3:af:59:49:3a:88:18:1a:f5:13:93:2c:53:30:0e:e1:8c:c8:
         ca:bb:55:bd:20:88:88:56:08:e8:44:4d:51:0c:21:7c:bc:d6:
         e4:ea:5d:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----