Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/BjYJAf_k8jwYxFtUSrh1nbVSkss.cer
File:                     BjYJAf_k8jwYxFtUSrh1nbVSkss.cer (raw, json)
Hash identifier:          83J7eIItulYqRW2limhES+NSp/TREW1eCqY8qOG1ddE=
Subject key identifier:   06:36:09:01:FF:E4:F2:3C:18:C4:5B:54:4A:B8:75:9D:B5:52:92:CB
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856B6336F18F06A9BD5922E62CF54227AA
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/70/12b60c-e647-4375-9869-d6e1e2af0b3c/1/BjYJAf_k8jwYxFtUSrh1nbVSkss.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/70/12b60c-e647-4375-9869-d6e1e2af0b3c/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 03:32:22 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 176.97.198.0/24
                          IP: 2a11:d740::/29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6b:63:36:f1:8f:06:a9:bd:59:22:e6:2c:f5:42:27:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 03:32:22 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=06360901ffe4f23c18c45b544ab8759db55292cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:4c:94:29:48:ed:ec:eb:13:73:2b:c7:7f:14:
                    f8:21:d4:aa:2d:4d:ae:88:37:43:c6:52:51:de:5c:
                    3f:6c:bd:1b:7b:fa:cd:b1:2c:e2:4a:84:ff:35:26:
                    bb:61:42:39:b2:13:5b:6d:36:df:b2:37:98:d0:18:
                    85:f1:52:ef:31:0f:e9:57:d7:3c:2f:6d:84:b9:64:
                    66:eb:ad:6b:e0:9b:67:35:ac:78:26:0d:12:24:f8:
                    f2:23:09:7b:9b:3f:b7:e5:1c:5a:33:c9:62:25:c6:
                    65:af:4f:3b:02:f5:77:84:13:6b:30:f0:90:7a:07:
                    7b:75:eb:25:4a:4a:31:dd:b3:4d:13:92:26:3d:c3:
                    b7:ac:18:8d:9e:c5:ad:2c:97:45:ac:5c:b1:f6:6b:
                    cf:6f:11:59:97:f8:35:71:f5:9e:6d:bb:fe:d9:bf:
                    6e:92:3b:bf:5f:3a:59:a3:64:bb:55:15:51:98:62:
                    de:01:7b:71:12:93:43:e6:10:8e:0c:36:f1:e8:2b:
                    a7:00:af:62:04:98:cf:e0:f6:61:f6:0f:1c:d3:86:
                    d7:9d:d2:bd:07:4b:3a:a5:5d:6c:91:8d:9c:2c:2b:
                    46:7f:46:ce:67:31:38:fd:9f:47:0d:80:c3:8d:a8:
                    d9:40:1d:f9:00:62:f8:20:31:9f:d2:84:44:96:05:
                    62:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:36:09:01:FF:E4:F2:3C:18:C4:5B:54:4A:B8:75:9D:B5:52:92:CB
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/12b60c-e647-4375-9869-d6e1e2af0b3c/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/12b60c-e647-4375-9869-d6e1e2af0b3c/1/BjYJAf_k8jwYxFtUSrh1nbVSkss.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  176.97.198.0/24
                IPv6:
                  2a11:d740::/29

    Signature Algorithm: sha256WithRSAEncryption
         94:6b:34:c0:1c:ca:cb:c5:8d:41:f1:d9:6c:36:20:b6:a8:d2:
         e0:6a:20:f2:d4:96:4d:d9:89:0b:cc:6c:81:0d:cb:d5:cd:a6:
         30:39:3a:5b:3f:4d:12:5c:1a:bd:67:14:3f:1b:9c:97:44:db:
         70:5a:4d:17:16:85:fa:1a:e0:04:af:b8:5f:45:11:18:f9:8b:
         fd:34:09:f2:c8:58:ef:7e:42:d5:1c:f9:ef:62:1b:0f:6e:69:
         62:3e:1a:ae:aa:c7:c3:e8:e4:19:ef:48:21:35:88:9d:76:f4:
         14:14:56:6a:fa:78:6b:02:b3:bb:39:fd:08:b3:f5:1e:de:04:
         38:47:b7:51:74:1e:79:13:35:35:3f:24:dd:a2:7d:b8:ce:61:
         a6:f0:ad:95:58:5d:7f:74:7d:51:3c:09:f2:85:1e:e9:0a:3e:
         a7:a3:22:57:eb:54:a8:f6:84:af:65:95:c9:4a:dc:6c:4e:a6:
         09:4a:02:16:70:ad:1f:59:6f:89:f2:72:6f:57:d5:6d:e1:ce:
         f8:fe:39:97:f5:75:85:9b:91:15:f1:2d:94:19:89:38:2d:06:
         bb:46:d0:cd:d6:9c:e7:51:42:ea:f6:ef:ef:23:90:d2:4f:2e:
         a5:ff:de:b2:2b:de:c8:2d:f0:ac:06:97:9e:c2:f1:41:85:b5:
         6a:6c:db:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 2 12:50:17 2023 by rpki-client on console-ams.rpki-client.org