Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/AreYvxthGNs_OP5pudiqAnfASgs.cer
File:                     AreYvxthGNs_OP5pudiqAnfASgs.cer (raw, json)
Hash identifier:          NeogmXRpCxKHWzEPdi47HgxzGPlggnaFMAEdU2gk86E=
Subject key identifier:   02:B7:98:BF:1B:61:18:DB:3F:38:FE:69:B9:D8:AA:02:77:C0:4A:0B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856F421B2146FE9D9968C5785ECE87598E
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/ee/fa78bd-03bb-434c-a714-10ad5a8bfd08/1/AreYvxthGNs_OP5pudiqAnfASgs.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/ee/fa78bd-03bb-434c-a714-10ad5a8bfd08/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 21:34:41 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 88.151.9.0/24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:42:1b:21:46:fe:9d:99:68:c5:78:5e:ce:87:59:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 21:34:41 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=02b798bf1b6118db3f38fe69b9d8aa0277c04a0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:0e:a3:5d:6a:c6:3b:2a:f6:a6:5d:b8:1b:81:
                    98:b4:be:c7:07:f4:dd:3d:98:18:0e:58:be:d4:de:
                    b7:25:bf:cf:f5:bb:61:41:29:2b:5d:17:39:4c:5e:
                    09:ef:35:1c:e3:44:e9:ec:d5:d8:82:5c:55:0d:03:
                    19:8b:83:ad:54:c6:02:d0:f4:fc:5c:91:97:a4:c2:
                    dd:f9:79:f2:79:ef:dd:79:6e:b4:3f:7a:50:27:58:
                    8c:c7:4e:ab:1f:cc:5e:2f:c7:e4:ad:38:f7:90:be:
                    21:c1:c5:15:0c:96:ff:7a:f7:e8:a4:19:64:be:5e:
                    03:2c:50:35:e0:7e:50:1d:8e:e2:d6:25:3b:f2:50:
                    82:37:9d:27:9c:44:38:79:25:b3:76:99:bc:80:a1:
                    44:5c:64:c4:8c:1a:b6:3d:1f:77:84:52:5b:e8:ea:
                    cf:89:c7:fa:1d:83:d9:d6:bb:b2:99:74:32:eb:dc:
                    cf:6d:d1:7b:6a:08:d4:98:b7:40:cd:0e:ca:3e:00:
                    06:39:b2:8f:f0:3b:ff:be:41:1e:8c:9a:e8:87:7e:
                    bf:ba:91:de:29:f7:20:ee:5f:b4:fa:f2:2b:92:6a:
                    aa:3f:da:85:a7:e6:7e:a8:08:5a:01:8a:e3:9d:54:
                    bd:d0:32:07:81:10:1e:03:a6:e3:37:dd:6b:e1:6f:
                    6e:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:B7:98:BF:1B:61:18:DB:3F:38:FE:69:B9:D8:AA:02:77:C0:4A:0B
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/fa78bd-03bb-434c-a714-10ad5a8bfd08/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/fa78bd-03bb-434c-a714-10ad5a8bfd08/1/AreYvxthGNs_OP5pudiqAnfASgs.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  88.151.9.0/24

    Signature Algorithm: sha256WithRSAEncryption
         56:7b:29:e0:b1:38:23:d5:20:17:be:d1:c9:17:d4:55:a3:f8:
         56:9b:66:54:3e:91:fd:f4:6e:47:f4:3f:49:29:38:5e:f6:5c:
         d5:6a:af:53:93:97:77:41:6c:88:b9:b8:48:f5:7b:77:4d:d4:
         2d:14:e8:62:cd:90:97:39:fd:0d:7a:94:94:61:60:83:26:39:
         e9:f9:44:57:fe:a0:bc:18:47:11:40:b0:55:0d:65:22:ea:0a:
         93:c9:4c:15:e3:bb:e1:ca:8e:08:f4:91:d4:c4:37:46:b6:62:
         6f:86:73:d5:64:cb:14:27:6e:7b:41:54:6d:43:05:31:2c:61:
         07:21:52:d6:59:ef:73:cf:38:55:72:42:81:90:45:9b:b3:bb:
         f9:41:2a:ed:a7:34:23:1c:34:fd:1e:63:ef:70:37:cc:8c:b4:
         86:ee:62:67:30:ef:92:ac:a2:dc:14:9a:2a:67:04:c8:75:12:
         f4:80:d0:52:ac:b9:e5:c7:b5:fa:ed:76:62:a4:08:2f:38:f7:
         2f:ac:a9:10:9b:6b:c6:6a:c7:44:a5:d6:82:20:5f:96:ba:0f:
         c4:bf:75:d6:5b:d1:0d:94:57:33:25:40:76:32:7c:11:70:40:
         ed:a7:f6:99:15:50:44:d7:5a:69:c7:7f:e6:35:56:14:b0:1d:
         19:bf:01:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----