Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Bcyxdw73Bhm8rWuqx6g3K8kAcR8.cer
File:                     Bcyxdw73Bhm8rWuqx6g3K8kAcR8.cer (raw, json)
Hash identifier:          bR/Zicsu3KkecawuMmlHaJ0CkNXDaxJp78oGkBdLE2Q=
Subject key identifier:   05:CC:B1:77:0E:F7:06:19:BC:AD:6B:AA:C7:A8:37:2B:C9:00:71:1F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856BD139FCB6F4618B2BD1169A39025566
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/08/e81781-ba83-47a3-aa6b-8cbd81aef494/1/Bcyxdw73Bhm8rWuqx6g3K8kAcR8.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/08/e81781-ba83-47a3-aa6b-8cbd81aef494/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 05:32:32 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 91.246.59.0/24
                          IP: 2a11:bf40::/29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6b:d1:39:fc:b6:f4:61:8b:2b:d1:16:9a:39:02:55:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 05:32:32 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=05ccb1770ef70619bcad6baac7a8372bc900711f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:04:94:88:27:7d:93:45:57:b9:6b:15:e8:41:
                    43:ff:74:a7:93:9e:d1:2f:8f:d4:57:9c:20:ea:61:
                    70:b3:c9:9b:d4:9b:ce:00:9b:81:d6:3d:33:c0:da:
                    b2:c5:0c:e6:ce:dd:23:77:ef:9d:ec:bd:3a:c7:20:
                    05:1f:32:98:d6:4f:1b:6a:bb:48:e5:ec:10:e2:3b:
                    92:20:e8:fa:2c:56:e4:14:07:bb:ea:6c:4f:7b:fb:
                    ea:2a:25:bd:89:b8:32:2a:24:f7:2f:6d:b1:20:c3:
                    84:1b:e6:98:16:ae:f2:2f:4d:ca:65:65:d1:16:a1:
                    ad:4e:f6:e4:e7:25:b6:a1:a6:2e:92:98:e7:ca:bc:
                    88:47:93:59:c9:8e:7d:c6:6f:4d:fb:7c:23:0e:fa:
                    c5:58:22:9d:42:e3:ca:e7:3e:d2:c1:83:3e:33:66:
                    e8:45:32:6f:29:2c:d2:15:10:31:90:69:68:46:7a:
                    38:10:6f:7a:13:81:db:7f:47:95:ae:5f:a6:48:01:
                    01:eb:49:28:2e:36:ea:bb:d2:d1:fd:e2:e6:7f:8e:
                    d2:ff:91:3d:a4:5f:79:cf:12:7f:9f:0f:1e:33:05:
                    7c:9e:e7:39:1c:d0:d3:02:44:91:e7:56:78:d1:d1:
                    af:d5:c7:91:cb:63:3e:99:78:02:b5:94:a8:5f:87:
                    91:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:CC:B1:77:0E:F7:06:19:BC:AD:6B:AA:C7:A8:37:2B:C9:00:71:1F
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/e81781-ba83-47a3-aa6b-8cbd81aef494/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/e81781-ba83-47a3-aa6b-8cbd81aef494/1/Bcyxdw73Bhm8rWuqx6g3K8kAcR8.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.246.59.0/24
                IPv6:
                  2a11:bf40::/29

    Signature Algorithm: sha256WithRSAEncryption
         23:48:29:6b:1e:37:91:e0:91:65:c2:81:2f:f0:11:63:86:2b:
         99:1b:f8:6b:3e:6f:0a:4e:f7:3f:86:a2:d2:c2:43:71:49:9b:
         6d:c8:38:6e:16:22:d8:c9:e7:b2:31:03:c0:6f:60:0b:88:8e:
         5c:06:36:d4:ef:06:4d:00:6e:cb:f4:91:8e:ce:bd:85:de:19:
         dd:83:3c:dd:b1:40:36:05:0b:3f:2e:de:9c:3e:a1:99:99:8a:
         8e:40:93:c2:66:96:5c:d8:db:73:87:c4:5f:27:11:68:4c:24:
         9e:82:43:25:57:57:c9:92:86:d1:a1:f7:36:c1:a4:1e:6d:a8:
         aa:82:ab:ee:d5:ca:8a:4f:1f:34:5f:df:92:f9:f5:fa:2b:80:
         61:14:19:33:96:98:01:71:c2:65:ea:33:7d:0e:63:56:31:5a:
         36:71:39:6a:85:44:7c:54:27:56:3d:43:30:db:95:c3:e7:dd:
         f2:24:84:19:8d:f7:e9:ac:e3:af:4f:86:15:a6:37:6b:e3:d9:
         9e:99:35:78:31:d6:72:2f:d5:48:b0:bb:8b:76:e8:a0:7c:86:
         d1:33:cf:ce:a3:f8:a2:4a:6b:a9:23:a8:6f:cf:35:3a:18:f3:
         c2:0e:18:f1:ce:24:14:1f:95:2c:48:cd:6d:d4:8d:78:67:e1:
         a8:1f:c4:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 30 14:25:49 2023 by rpki-client on console-fra.rpki-client.org