Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/BKd0QvaJXJAyRkJgYiiHqpb8bao.cer
File:                     BKd0QvaJXJAyRkJgYiiHqpb8bao.cer (raw, json)
Hash identifier:          2LBh8/IyNttnm/HBTUIH7ntB6qeM1A4v8CnVbmf3JU8=
Subject key identifier:   04:A7:74:42:F6:89:5C:90:32:46:42:60:62:28:87:AA:96:FC:6D:AA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018CC6B932DF43D06C61B7DB6B4196DD6250
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/a4/2c77c4-e306-4ab9-b87f-8892652996a2/1/BKd0QvaJXJAyRkJgYiiHqpb8bao.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/a4/2c77c4-e306-4ab9-b87f-8892652996a2/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 20:31:15 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    IP: 94.231.205.0/24

Validation:               Failed, certificate revoked on Tue 30 Jan 2024 07:54:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c6:b9:32:df:43:d0:6c:61:b7:db:6b:41:96:dd:62:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 20:31:15 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=04a77442f6895c9032464260622887aa96fc6daa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:23:ef:9c:af:af:2b:1b:74:a9:c9:8c:e8:cf:
                    19:0a:b9:23:07:b9:a5:ff:9f:4a:99:55:3b:12:27:
                    0e:12:2f:69:b2:55:3c:24:14:64:c7:37:24:c2:3a:
                    25:18:7e:fc:49:49:8b:9a:ca:94:58:aa:46:48:7f:
                    84:5b:c8:8a:58:64:2d:be:63:c7:03:c3:ef:47:52:
                    78:66:d4:49:d7:97:97:fd:bc:a3:64:8d:da:58:79:
                    00:c0:a0:65:cd:55:7a:95:ad:43:22:49:8e:71:c3:
                    e1:9f:59:8f:71:91:56:50:84:76:a0:82:57:c8:b9:
                    42:69:0f:00:e1:32:2b:2d:9d:e0:47:9b:47:11:ed:
                    0f:38:2e:44:4d:6d:bd:a1:f5:c5:c3:9c:2e:2d:8d:
                    c5:75:bc:07:a2:d0:0c:c2:6a:a6:36:f7:d0:16:88:
                    31:fd:7e:ed:d4:1d:19:5d:5d:3a:5a:4c:b1:27:ba:
                    10:4f:fe:22:33:92:24:4f:d8:b1:53:1a:27:7f:ac:
                    4d:9d:0c:6d:3d:d5:c1:ef:e3:3d:ef:31:42:50:a7:
                    3c:ff:cc:b6:b2:59:b5:b9:3c:86:31:7a:66:92:d3:
                    39:02:05:9a:96:87:3c:46:22:9c:00:cb:45:3f:c1:
                    11:ae:b5:09:66:cf:07:bf:75:ff:40:90:df:91:63:
                    d9:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:A7:74:42:F6:89:5C:90:32:46:42:60:62:28:87:AA:96:FC:6D:AA
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/2c77c4-e306-4ab9-b87f-8892652996a2/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/2c77c4-e306-4ab9-b87f-8892652996a2/1/BKd0QvaJXJAyRkJgYiiHqpb8bao.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  94.231.205.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b0:cf:bd:da:28:1e:a8:5a:48:3c:fc:36:3f:de:bb:ff:e4:a2:
         10:e5:36:97:05:5e:d9:93:6d:08:c8:3c:0e:7c:8a:55:9a:b9:
         6f:6e:dc:95:b1:d0:19:a4:c0:24:05:78:5e:0f:33:01:c3:e0:
         d7:27:b1:14:ec:da:1f:fa:85:49:b9:ef:4d:b0:84:af:68:c8:
         a9:56:20:fa:56:b7:1c:21:e7:ca:26:6a:19:75:af:11:ad:e0:
         c2:b9:3d:16:b6:90:a4:4b:9c:ad:92:04:0c:c2:b4:9e:a3:8e:
         c5:2a:0d:97:a4:22:3c:d8:e1:dc:42:70:37:08:36:6a:e3:de:
         dd:1c:eb:fe:bf:a5:c6:7d:03:0b:bb:f9:b9:fb:2a:ae:4d:ae:
         0a:1e:13:42:2a:b7:88:be:a9:d3:b9:ed:a5:90:07:b4:e2:8e:
         7c:e7:5f:dd:d7:03:d7:6e:33:1e:8c:fd:4e:0a:a6:51:70:a0:
         ec:96:e3:ea:6e:a8:64:99:9b:0d:29:60:02:27:05:2d:c8:33:
         96:10:69:3a:d7:37:a2:8b:0d:82:76:79:bd:c6:96:b0:d3:8a:
         0f:1d:54:42:d7:31:28:61:2d:bf:29:da:58:3d:e7:6d:62:ff:
         75:26:a4:26:4e:d2:1f:40:ec:fb:74:a4:f0:d5:40:7a:08:b1:
         cf:aa:f1:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----