Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/C_yuCUeuoYqR3CYE5y-Bo02VTMs.cer
File:                     C_yuCUeuoYqR3CYE5y-Bo02VTMs.cer (raw, json)
Hash identifier:          78Z6tSZLAM9W3d0j6K117ykcEizwclXXHVehJwOGM2g=
Subject key identifier:   0B:FC:AE:09:47:AE:A1:8A:91:DC:26:04:E7:2F:81:A3:4D:95:4C:CB
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018B854F719F4295D26C21A0B2C96394FC09
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/66/bb8df1-cfdc-40be-aab2-d9f63c593edd/1/C_yuCUeuoYqR3CYE5y-Bo02VTMs.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/66/bb8df1-cfdc-40be-aab2-d9f63c593edd/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Tue 31 Oct 2023 10:37:38 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 194.26.234.0/24

Validation:               Failed, certificate revoked on Wed 01 Nov 2023 08:22:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:85:4f:71:9f:42:95:d2:6c:21:a0:b2:c9:63:94:fc:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Oct 31 10:37:38 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=0bfcae0947aea18a91dc2604e72f81a34d954ccb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:ff:fc:b1:78:69:9e:6a:ab:31:6e:b1:67:2c:
                    07:45:66:8f:02:e1:c2:28:73:0c:92:43:80:f3:f2:
                    bd:4b:9f:21:2e:f0:b7:a1:2d:7f:fb:9b:43:77:32:
                    69:54:5d:f9:cc:3c:da:bc:ea:bf:83:b9:2c:1a:91:
                    fc:e9:7a:e6:27:7a:f8:19:c1:d6:ff:ba:39:f4:a3:
                    c6:1d:c9:3a:ff:1e:a4:0e:bd:a1:20:8a:71:cb:c0:
                    67:64:8d:50:6e:61:0d:55:bd:be:91:ee:23:66:2d:
                    fb:25:aa:f4:ed:65:4f:5c:d8:b0:a2:9b:fe:14:a3:
                    7a:38:da:34:ce:f7:60:12:10:e9:20:07:83:de:dd:
                    4d:b5:7d:9d:f2:48:36:41:29:df:68:aa:7a:69:86:
                    9c:76:dd:8c:d5:7f:89:36:60:68:a2:f4:d4:64:3c:
                    da:a2:29:33:c5:71:72:28:65:64:fe:fc:99:78:7c:
                    49:73:00:5c:3b:fc:2a:4a:ad:2f:78:07:1e:97:24:
                    46:bf:31:b9:ed:76:97:35:14:7a:12:1e:73:12:5d:
                    8c:7a:62:c6:20:d6:e3:da:8e:0e:91:19:cb:84:2c:
                    2b:5e:5b:bd:e6:d9:ba:b7:31:cb:eb:d6:50:3e:87:
                    a3:55:f6:27:c7:85:ac:8d:c8:6f:8f:cb:b2:f7:14:
                    e4:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:FC:AE:09:47:AE:A1:8A:91:DC:26:04:E7:2F:81:A3:4D:95:4C:CB
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/bb8df1-cfdc-40be-aab2-d9f63c593edd/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/bb8df1-cfdc-40be-aab2-d9f63c593edd/1/C_yuCUeuoYqR3CYE5y-Bo02VTMs.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.26.234.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1e:14:89:7b:13:5b:7a:de:ec:37:29:7a:81:94:17:1d:5c:e8:
         75:42:57:a8:d5:6b:83:94:bb:41:aa:d9:32:65:aa:01:f8:ea:
         25:1f:3d:c3:8b:ca:da:e7:e9:68:2d:c3:df:c0:30:ab:b7:5a:
         fa:60:08:f7:3a:db:f9:d7:02:38:9e:22:7f:ea:90:dc:44:7e:
         83:78:4e:e9:cf:8a:96:08:c2:6f:33:d0:dd:2d:39:9d:20:01:
         bd:6f:41:c7:17:a5:bb:9e:14:86:f5:9c:7a:70:b9:1f:10:81:
         09:e1:7a:27:04:e3:56:bd:bc:81:6d:dc:34:e1:0b:06:03:e0:
         ea:5e:75:5f:9c:93:77:b9:60:0f:d4:c3:64:05:c6:78:b1:1c:
         8a:dd:44:07:14:d1:81:7d:07:b3:5f:50:1d:03:a4:9d:c2:ee:
         f5:ec:f0:11:4c:49:54:31:8f:16:72:c8:db:cd:fb:55:33:00:
         33:55:62:e2:5b:22:f5:d5:1e:c7:a7:31:85:f2:b5:e8:5a:ae:
         b7:5f:1a:ab:47:58:b1:ae:88:21:31:0d:0e:ec:98:43:44:7d:
         10:c0:ba:e8:17:56:06:c7:05:69:bc:aa:41:b7:20:f1:3d:9a:
         a0:b6:f2:90:6c:ba:8b:ff:55:df:8a:e8:21:af:84:55:25:35:
         61:3f:f0:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----