Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/AuKyKLUM3JDuSY5Rv8kVmXymxZA.cer
File:                     AuKyKLUM3JDuSY5Rv8kVmXymxZA.cer (raw, json)
Hash identifier:          k656bedwPZAf1l4nJ25/PHFhs63v+6Rg54jjat79XLU=
Subject key identifier:   02:E2:B2:28:B5:0C:DC:90:EE:49:8E:51:BF:C9:15:99:7C:A6:C5:90
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018A2C6223BBEC566D69EF9E6F1F1A7D4420
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/12/9bbf75-30d8-4bcc-bc51-1b21765172b6/1/AuKyKLUM3JDuSY5Rv8kVmXymxZA.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/12/9bbf75-30d8-4bcc-bc51-1b21765172b6/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 25 Aug 2023 11:09:03 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 188.64.142.0/24
                          IP: 2a13:bd40::/29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:2c:62:23:bb:ec:56:6d:69:ef:9e:6f:1f:1a:7d:44:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Aug 25 11:09:03 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=02e2b228b50cdc90ee498e51bfc915997ca6c590
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:26:e4:e7:1a:3d:a6:8d:08:2a:21:d3:c9:a4:
                    85:7b:ce:41:df:12:02:c1:17:1b:6b:c1:0c:c9:3b:
                    28:f2:78:c1:c8:05:93:18:d9:4e:33:6d:21:00:b3:
                    25:92:74:ea:98:d7:f4:2b:8f:c1:45:45:6f:fa:22:
                    49:7f:da:36:88:e9:37:45:4c:33:f9:7b:a5:59:d7:
                    94:1e:ef:2a:ea:0b:59:92:9d:31:05:3e:cc:57:87:
                    59:76:7f:6d:0b:ba:87:d5:d8:d3:dd:51:07:6f:6d:
                    02:4f:4b:49:2b:3b:f9:bf:b2:d6:9c:22:2a:e9:52:
                    8a:f5:68:c3:ac:83:8d:79:f4:a9:52:c0:cc:e8:b2:
                    3b:ab:b7:5c:a6:88:7f:d1:cc:d7:03:60:f8:33:96:
                    75:26:c3:dc:74:09:7f:ef:0f:17:08:9f:be:e7:b4:
                    fc:94:83:4b:2c:f5:cd:4a:af:19:04:d7:b1:b4:c0:
                    68:6e:b3:a2:68:b2:22:9c:de:51:a2:4c:84:03:58:
                    12:a8:58:f4:c1:07:f7:3f:97:fb:98:28:6d:46:46:
                    2d:06:83:10:e6:1f:2d:75:33:86:2e:c5:60:40:cc:
                    1f:dd:42:61:79:8e:dc:b1:a9:ae:57:92:8f:3a:b5:
                    d2:2e:a9:59:6e:dd:b0:f3:e9:46:57:1b:4b:85:70:
                    8b:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:E2:B2:28:B5:0C:DC:90:EE:49:8E:51:BF:C9:15:99:7C:A6:C5:90
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/9bbf75-30d8-4bcc-bc51-1b21765172b6/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/9bbf75-30d8-4bcc-bc51-1b21765172b6/1/AuKyKLUM3JDuSY5Rv8kVmXymxZA.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  188.64.142.0/24
                IPv6:
                  2a13:bd40::/29

    Signature Algorithm: sha256WithRSAEncryption
         a9:fd:c2:33:48:2c:da:b1:0d:73:b3:23:9f:52:52:65:81:76:
         b0:3f:4e:9b:a6:02:7f:34:a5:fa:0f:81:92:47:af:8f:3c:ce:
         90:fa:00:01:37:6f:67:95:ab:64:7f:ad:da:84:5d:f2:d0:50:
         5a:12:54:e6:29:7f:4e:ff:a4:da:ab:82:cb:53:11:0b:d9:ae:
         23:d6:4e:f4:75:8a:9f:4b:24:70:9f:0f:67:3d:5f:25:27:da:
         83:02:7c:56:25:d5:e8:6f:4c:42:bf:0e:db:0a:ed:d1:1a:f7:
         fc:88:1c:1d:1d:42:18:ad:c2:fd:3d:18:d8:4e:49:14:81:1c:
         26:09:b2:a9:75:ab:43:bb:14:6c:0b:72:52:be:05:5d:14:48:
         a9:63:26:e5:1f:5b:22:90:59:e4:f7:03:ce:99:07:3f:ef:21:
         1d:52:bb:1c:fa:47:5a:5f:bc:26:20:ba:41:dc:21:18:b9:10:
         75:78:9f:64:cb:80:b7:11:20:f8:29:40:b9:5f:c0:f7:bf:da:
         91:69:f8:1b:96:b8:98:36:28:1f:32:84:4e:60:f1:54:80:43:
         d1:ce:3f:f8:b6:d4:6a:2b:cf:2f:da:95:cf:09:10:6f:7e:64:
         e6:ca:bf:27:98:9d:8d:19:c0:b0:c3:50:67:f9:aa:22:22:2d:
         2a:20:22:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 1 14:21:23 2023 by rpki-client on console-fra.rpki-client.org