Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/BNBIkwOibdTpdRlk2zm22k28M6Q.cer
File:                     BNBIkwOibdTpdRlk2zm22k28M6Q.cer (raw, json)
Hash identifier:          Pudkdl3UKisb9iMIFkOPd1TTRS+q/gkpgtSa5Maw2VY=
Subject key identifier:   04:D0:48:93:03:A2:6D:D4:E9:75:19:64:DB:39:B6:DA:4D:BC:33:A4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018D12B438BE56FFA960BB695E5AF9DD94FF
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/32/c75139-6b36-4612-9d99-9d470ced0eaf/1/BNBIkwOibdTpdRlk2zm22k28M6Q.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/32/c75139-6b36-4612-9d99-9d470ced0eaf/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Tue 16 Jan 2024 14:36:57 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    IP: 80.75.221.0/24

Validation:               Failed, certificate revoked on Thu 18 Jan 2024 12:48:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8d:12:b4:38:be:56:ff:a9:60:bb:69:5e:5a:f9:dd:94:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan 16 14:36:57 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=04d0489303a26dd4e9751964db39b6da4dbc33a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:99:3c:43:88:b1:43:58:7a:c6:ca:48:6c:b0:
                    ca:4e:ef:36:eb:95:e9:c3:1a:11:ee:86:0c:e3:2f:
                    24:0c:f9:8b:eb:a0:e5:d3:ac:d5:18:28:03:2f:0b:
                    0a:c9:4c:e2:c5:9b:17:18:a5:bb:af:ec:25:0c:4e:
                    06:e2:63:4d:c0:aa:a8:da:f5:f3:2d:03:ec:7b:dc:
                    41:3f:2e:ef:7f:5b:ea:56:4a:e6:68:81:05:d8:c6:
                    9b:c3:19:a1:58:e2:4e:6c:72:47:b2:11:c7:6b:d4:
                    0c:00:0b:85:f8:12:d2:41:df:e4:dd:94:16:a9:b2:
                    ba:96:23:f2:2f:3e:e6:62:41:af:e1:8d:e6:ee:24:
                    43:57:ef:16:da:b8:59:85:2a:ee:2b:30:b5:71:2a:
                    6a:30:9d:6d:39:b2:7a:68:fe:d2:1d:e1:7e:08:de:
                    30:49:66:13:d0:35:b3:54:c4:20:23:1c:19:ab:e2:
                    e1:fe:ae:84:b1:81:7c:9e:c0:78:d4:00:a1:c5:7e:
                    2d:63:94:d0:0a:fe:9e:d4:7b:50:41:00:99:da:3a:
                    17:35:f8:bf:77:e6:98:b6:98:d2:cf:fb:ed:d8:40:
                    a5:67:2a:d1:f8:6d:3d:69:01:5a:46:3f:96:02:8c:
                    c2:86:5d:d4:b2:45:d7:5a:2b:01:05:f9:cf:f3:cc:
                    49:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:D0:48:93:03:A2:6D:D4:E9:75:19:64:DB:39:B6:DA:4D:BC:33:A4
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/c75139-6b36-4612-9d99-9d470ced0eaf/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/c75139-6b36-4612-9d99-9d470ced0eaf/1/BNBIkwOibdTpdRlk2zm22k28M6Q.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.75.221.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4c:9a:8a:0f:86:20:1c:62:eb:f6:89:28:de:a8:8c:8a:4f:f5:
         da:01:e0:a1:b3:9f:7a:10:b9:e5:1c:92:54:8e:16:63:c5:cc:
         26:db:90:78:f6:1c:18:d9:fb:c9:ca:22:8f:aa:b9:d6:69:3b:
         44:20:47:11:fa:07:a7:e2:3e:f1:65:fb:44:96:fe:9d:ce:df:
         0e:60:8a:11:19:9a:08:eb:d4:ec:cd:af:ad:71:fc:ca:62:e0:
         20:af:1b:7e:a7:93:e2:f2:f5:6e:86:60:31:9d:3f:3a:5c:8d:
         95:91:11:cc:e2:ee:07:43:24:5b:0e:47:20:49:1e:a8:04:6f:
         48:0e:36:f5:0e:e0:e0:ab:7c:84:31:ff:f7:79:7c:cb:91:a7:
         24:37:ab:41:dd:7d:1a:39:ec:51:7d:42:37:9a:ad:a8:ca:77:
         35:9e:0e:97:00:34:69:7d:4d:7c:cc:83:ab:b3:1b:ed:ff:13:
         a6:f8:8d:60:ca:30:c5:83:ac:41:37:60:8a:5e:af:e2:1b:da:
         9b:cf:da:99:e5:94:9d:b0:dd:d9:ad:06:69:bb:48:56:fc:c1:
         0d:a1:a7:ec:f9:19:81:18:67:e7:a1:12:67:b3:69:9b:b4:fd:
         51:c8:f0:47:51:c4:51:75:57:f4:b3:40:cc:0e:28:07:54:ae:
         9c:e7:45:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----