Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/CThPATyR_-3G19Jg8BfIziQnZns.cer
File:                     CThPATyR_-3G19Jg8BfIziQnZns.cer (raw, json)
Hash identifier:          QyFvg3UqU9LEnE1vJUpsw1fOjzIMurd3sRQBtrHUrr8=
Subject key identifier:   09:38:4F:01:3C:91:FF:ED:C6:D7:D2:60:F0:17:C8:CE:24:27:66:7B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018BAE04EDFB8883F441B90C5FADE73443BA
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/a7/106f2b-277d-4eb0-b02e-88ca77027b37/1/CThPATyR_-3G19Jg8BfIziQnZns.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/a7/106f2b-277d-4eb0-b02e-88ca77027b37/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 08 Nov 2023 08:20:40 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 2001:67c:128::/48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:ae:04:ed:fb:88:83:f4:41:b9:0c:5f:ad:e7:34:43:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Nov  8 08:20:40 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=09384f013c91ffedc6d7d260f017c8ce2427667b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:5e:b6:33:43:c0:01:69:27:a5:ec:0c:60:6c:
                    3d:b5:cc:4e:ef:fa:a2:bc:a7:ca:57:a8:f5:bb:ea:
                    49:95:8c:70:1f:80:85:bb:8e:66:36:79:75:9c:9a:
                    12:af:90:b7:c8:7b:d2:9e:7d:d2:4f:b2:66:b3:bc:
                    12:5a:00:b8:da:8a:99:2e:fa:18:1e:8e:08:c5:fc:
                    9e:2e:1e:e8:3f:94:08:32:4a:15:d5:60:ec:61:b1:
                    c2:68:8a:4a:e8:cb:40:47:12:50:07:16:d7:f7:23:
                    cf:9f:df:e9:41:6e:1c:fa:ef:2d:f0:63:a8:0a:f0:
                    b2:06:31:f4:05:1b:29:0d:33:c9:ba:76:e1:75:d5:
                    af:18:c4:77:82:05:7d:ec:af:98:81:15:90:94:f4:
                    15:96:91:ea:ec:5d:aa:8e:26:18:47:74:3e:68:d1:
                    4d:c1:f6:0c:24:72:83:a5:89:b3:03:22:2b:10:50:
                    01:0e:13:19:65:09:ef:1d:28:94:0a:8a:8b:75:55:
                    1a:0c:aa:9e:09:28:dd:0d:44:59:36:4c:87:f4:3e:
                    f7:e6:ca:b1:98:bf:d8:3c:7d:73:ca:b6:b2:7b:a5:
                    ce:6c:3f:49:cc:3b:e2:55:59:34:a5:38:e0:83:91:
                    2e:42:2c:a5:f6:3c:e4:fb:5e:90:e2:93:8c:f0:a1:
                    c9:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:38:4F:01:3C:91:FF:ED:C6:D7:D2:60:F0:17:C8:CE:24:27:66:7B
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/106f2b-277d-4eb0-b02e-88ca77027b37/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/106f2b-277d-4eb0-b02e-88ca77027b37/1/CThPATyR_-3G19Jg8BfIziQnZns.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:128::/48

    Signature Algorithm: sha256WithRSAEncryption
         8a:97:70:a5:fb:60:e7:92:cc:08:1f:51:52:b5:fd:ee:73:71:
         75:e7:b8:25:8b:f4:d2:40:66:17:5d:49:b7:45:3e:3c:c8:29:
         71:7e:f7:f5:6b:1b:e2:9a:5e:47:54:26:f7:d0:cb:78:ec:b1:
         ed:cb:60:4b:ba:41:0c:de:a2:01:05:1f:86:82:df:8a:bd:c3:
         5b:5d:8d:7d:30:1a:70:a0:87:60:7e:69:27:97:bb:8d:46:4b:
         16:6b:d7:38:5e:5b:1c:08:cc:c0:0e:59:83:a5:34:af:d2:96:
         c5:e6:80:04:1b:5a:cb:e5:6f:ed:37:8a:d4:97:b0:a2:ed:2d:
         f8:af:c3:e1:93:1c:95:6e:0a:17:c2:70:a3:74:f7:22:97:2a:
         50:eb:6a:27:7d:5a:3c:88:60:b1:65:9b:c6:ef:20:02:dd:52:
         18:a2:b7:f3:1a:40:4d:ca:55:52:52:ef:3b:06:97:d5:e0:9c:
         5a:65:28:74:f8:85:97:54:38:c8:4a:ff:06:15:5f:6a:3d:04:
         ae:0a:7d:1d:42:4d:d6:fe:6f:1e:1b:e8:8b:d4:85:6e:5d:50:
         11:33:c8:7b:30:46:dd:6d:1a:8f:1a:31:b8:a2:23:9e:37:c1:
         a1:f9:33:a9:2d:11:ef:b2:d4:97:cd:90:31:86:77:ba:7b:35:
         da:a3:34:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----