Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/BBoNAIW4knA5aKsT3WZb1oIW87I.cer
File:                     BBoNAIW4knA5aKsT3WZb1oIW87I.cer (raw, json)
Hash identifier:          GLkXgcYE9ZkAk9MpsiZ/PYGfIDtNVxVV73h8u1K2p+0=
Subject key identifier:   04:1A:0D:00:85:B8:92:70:39:68:AB:13:DD:66:5B:D6:82:16:F3:B2
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0187222D105639A2D33A5B942B46CB56F690
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/192/041A0D0085B892703968AB13DD665BD68216F3B2.mft
caRepository:             rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/192
Notify URL:               https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before:   Mon 27 Mar 2023 08:26:31 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 193.3.173.0/24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:22:2d:10:56:39:a2:d3:3a:5b:94:2b:46:cb:56:f6:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Mar 27 08:26:31 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=041a0d0085b892703968ab13dd665bd68216f3b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:2c:9c:e4:32:39:d8:c9:de:0b:1b:95:c4:27:
                    30:52:1f:59:ff:68:d0:b1:33:49:c2:ed:a2:b0:38:
                    74:49:ac:9f:5c:7a:6d:29:06:bf:0e:e4:a3:5d:3b:
                    86:5d:25:1f:50:28:a5:88:8a:4b:0b:c3:46:48:90:
                    72:78:77:eb:d3:e8:c3:93:3c:d5:52:f5:9d:b8:fe:
                    45:54:46:7b:02:a7:b4:89:32:3f:9c:9c:57:f5:71:
                    d2:2b:48:62:af:67:35:24:47:32:fe:a3:0b:10:12:
                    22:86:dd:a9:85:01:9a:45:90:44:43:8a:0d:42:63:
                    cf:ea:ad:0d:45:2c:fd:41:a9:48:e2:09:53:fd:ba:
                    3c:b5:22:9f:97:30:3d:49:be:0e:dd:76:41:1d:03:
                    1d:e8:55:ed:6f:56:0a:e3:dc:f6:a4:91:6c:a4:d2:
                    67:bf:a6:5a:33:9f:9d:e9:35:58:86:3a:29:82:9d:
                    b6:7c:72:e3:4a:0d:e3:bd:42:b3:96:f6:13:5e:ec:
                    17:5b:ff:6b:1f:eb:2a:cc:d9:4b:d0:7f:c1:2f:bb:
                    42:57:96:b1:a0:4e:01:ef:38:49:ef:6c:92:dc:ed:
                    5c:7d:40:df:36:bf:60:ef:39:2d:e2:fd:ee:1a:2a:
                    25:c0:bd:82:ba:ed:c3:23:68:38:fb:2b:aa:76:e9:
                    f8:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:1A:0D:00:85:B8:92:70:39:68:AB:13:DD:66:5B:D6:82:16:F3:B2
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/192
                RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/192/041A0D0085B892703968AB13DD665BD68216F3B2.mft
                RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.3.173.0/24

    Signature Algorithm: sha256WithRSAEncryption
         00:1e:94:09:d6:6e:95:83:51:ab:da:06:6c:20:79:7a:59:7c:
         8a:d1:90:41:81:25:31:e6:ef:9e:34:f8:0e:52:67:ee:e2:74:
         d6:e0:37:19:b9:3a:43:70:3e:a5:4d:90:b8:7e:0c:81:66:8c:
         78:8e:74:68:44:44:55:35:80:7b:06:b5:f2:61:3d:7e:96:6a:
         3f:db:6b:80:87:12:30:6d:e0:30:7e:a4:85:dc:b9:6c:2e:5b:
         f9:31:9f:9e:24:d2:62:80:bc:94:98:e6:83:f1:30:40:c3:84:
         30:db:7a:6e:bb:91:69:f1:1d:95:e1:67:e1:d0:ed:d0:c7:e4:
         ac:6d:e8:98:7f:91:b8:d7:47:a7:ff:d1:80:72:ef:86:78:a4:
         fc:b9:0a:ed:43:89:40:22:0c:76:b1:f9:e0:6e:88:0b:40:ff:
         bf:99:a0:96:96:c2:40:34:60:5f:6a:ae:20:14:ea:8b:d8:0d:
         92:c8:a4:17:52:24:98:ac:cb:e4:8e:8a:11:8d:36:61:c6:44:
         60:d0:da:3d:b7:a2:27:71:3c:73:c5:ef:a2:bf:19:d7:30:02:
         d4:35:98:fc:5e:28:90:49:2c:f8:d7:fe:94:87:4c:f2:ce:ff:
         97:33:e4:03:89:97:99:8b:e6:d8:7a:97:76:a0:4a:2f:f9:75:
         28:c0:c5:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 19 08:05:49 2023 by rpki-client on console-ams.rpki-client.org