Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/BWVawidea4oChgIgN8f4WUr1i4Q.cer
File:                     BWVawidea4oChgIgN8f4WUr1i4Q.cer (raw, json)
Hash identifier:          YqkGEZn9rXZ/1uFu4ud5DKXLBCF7BZcLUVxGTaxnuI0=
Subject key identifier:   05:65:5A:C2:27:5E:6B:8A:02:86:02:20:37:C7:F8:59:4A:F5:8B:84
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856ED3019B45C0E3F7625EDFF79BC2F9E4
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/d9/f01432-6718-4cb8-acb4-60abc45277c5/1/BWVawidea4oChgIgN8f4WUr1i4Q.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/d9/f01432-6718-4cb8-acb4-60abc45277c5/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 19:33:20 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 176.97.200.0/24
                          IP: 2a11:d8c0::/29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6e:d3:01:9b:45:c0:e3:f7:62:5e:df:f7:9b:c2:f9:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 19:33:20 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=05655ac2275e6b8a0286022037c7f8594af58b84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:53:a9:ea:47:88:46:e8:d0:8a:3f:e6:cf:a7:
                    9e:9c:78:12:0e:29:31:f7:66:91:bc:97:e6:62:a3:
                    e5:51:3e:86:fb:c4:c2:ec:c8:41:31:bb:a0:a0:a2:
                    c5:1e:80:2f:a2:80:4e:f6:54:f1:92:20:ab:ec:83:
                    53:0f:7a:13:2d:44:c3:b3:ec:70:12:25:87:3a:2e:
                    7a:85:d7:fc:0c:09:ca:64:23:d1:f6:97:2c:2d:89:
                    f5:d9:17:0b:fd:71:a6:1f:77:da:e1:ff:59:9b:78:
                    ca:22:da:fa:21:57:d9:c0:91:3a:48:5d:31:86:33:
                    b3:02:5b:b4:97:97:ac:dd:2d:2a:c0:17:95:82:10:
                    07:21:85:11:22:10:16:56:f2:49:16:fb:ad:95:9e:
                    d9:2e:9c:04:61:71:8a:cc:59:79:78:81:2e:e8:c1:
                    41:44:17:43:97:52:24:08:ad:3d:8f:e8:88:f4:64:
                    36:00:a4:f3:24:90:2b:69:81:93:da:cc:9d:17:81:
                    b7:8b:9b:4f:a0:7c:72:0b:b6:d3:28:1c:ab:2c:13:
                    11:1f:1d:98:e9:71:5c:46:1f:98:80:99:42:fd:22:
                    0a:7f:85:ad:e3:c0:5e:37:0c:1b:80:68:9e:5f:33:
                    fa:0e:3e:5f:09:e1:b7:92:71:68:5f:da:54:61:81:
                    b4:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:65:5A:C2:27:5E:6B:8A:02:86:02:20:37:C7:F8:59:4A:F5:8B:84
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/f01432-6718-4cb8-acb4-60abc45277c5/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/f01432-6718-4cb8-acb4-60abc45277c5/1/BWVawidea4oChgIgN8f4WUr1i4Q.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  176.97.200.0/24
                IPv6:
                  2a11:d8c0::/29

    Signature Algorithm: sha256WithRSAEncryption
         20:5f:74:af:aa:e1:48:fc:d1:39:e4:3d:19:42:a5:86:d8:96:
         97:b8:e7:e9:82:c7:e8:ca:17:26:ba:d8:42:e4:98:a1:50:9d:
         86:cf:11:bf:05:04:27:ed:f7:fb:15:9d:44:f6:a0:23:fb:58:
         8b:d1:3d:b5:d3:ce:ee:da:a3:db:b7:58:65:89:ae:88:74:6e:
         4c:fb:93:e0:8c:be:34:dd:15:4f:35:2f:57:74:db:0a:da:e8:
         ff:d3:6a:36:73:ff:be:42:59:94:58:c7:1c:6a:d4:0a:bd:f2:
         fb:1e:79:df:3f:e4:dd:78:26:29:8b:78:a1:8b:44:67:76:fd:
         b1:45:61:6f:db:9f:fc:49:6d:41:d0:01:b2:41:d4:6a:a0:b7:
         aa:97:1d:f4:24:89:d4:cc:05:f6:61:3f:4b:71:ec:e7:20:cb:
         c2:f7:dc:2e:da:c0:9d:78:e3:82:1f:26:91:14:97:ce:8f:ef:
         8d:8d:ee:2c:5f:f1:13:81:4f:25:3d:9a:02:c8:ec:84:51:82:
         e6:6f:7e:af:ee:a3:35:27:b0:73:e5:cb:03:0c:78:e6:69:f4:
         84:a9:d6:9a:e8:38:d0:70:e2:3f:b3:34:a1:95:78:b2:2a:1d:
         01:d0:3a:54:47:42:7c:c7:03:b3:51:e1:b3:f8:7f:df:f4:36:
         f5:19:34:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 1 15:14:25 2023 by rpki-client on console-ams.rpki-client.org