Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/CvN4z3Pejw4nKlX3XbAJgDbsVoA.cer
File:                     CvN4z3Pejw4nKlX3XbAJgDbsVoA.cer (raw, json)
Hash identifier:          zuAoTLAGvcaHhqZ2+uM989UsQb+JGB8mEVEhUQrmtmQ=
Subject key identifier:   0A:F3:78:CF:73:DE:8F:0E:27:2A:55:F7:5D:B0:09:80:36:EC:56:80
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018B8578A688BD979C252BBAC51D887B2E02
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/71/1801b6-cf49-4405-970d-cf9e8c6a412e/1/CvN4z3Pejw4nKlX3XbAJgDbsVoA.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/71/1801b6-cf49-4405-970d-cf9e8c6a412e/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Tue 31 Oct 2023 11:22:38 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 2a0d:bbc0::/29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:85:78:a6:88:bd:97:9c:25:2b:ba:c5:1d:88:7b:2e:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Oct 31 11:22:38 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=0af378cf73de8f0e272a55f75db0098036ec5680
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:c0:5c:b7:95:19:46:c1:85:55:f9:dc:76:f4:
                    3b:fc:b6:92:8d:8f:41:fe:ba:5d:c4:db:37:fc:89:
                    25:4d:52:18:e7:37:22:9d:0f:43:2c:e8:0d:22:2b:
                    df:a7:a2:a6:4e:2a:6e:bb:ff:34:bb:e9:e4:2c:5e:
                    80:53:d1:88:48:c9:d4:bf:ce:50:90:53:00:b9:f7:
                    22:0f:d4:77:ac:fd:fa:de:d7:15:0b:f5:65:f2:72:
                    5c:a8:8b:f0:45:75:c2:5c:b2:c3:8a:3f:09:8f:78:
                    1b:07:cf:29:1c:e3:7b:40:8b:e6:2b:c4:39:60:be:
                    7f:77:09:26:84:dd:a4:6c:40:87:e4:1a:bf:fe:c3:
                    2e:c7:c5:aa:0a:48:12:3d:82:70:55:f2:f9:7d:09:
                    01:83:43:dc:83:07:3a:39:91:b4:13:3e:82:67:fe:
                    87:fd:e7:ef:d5:5a:09:c0:65:d4:d1:ad:74:e5:04:
                    c4:a9:cf:91:b3:43:f6:35:38:83:8a:2b:67:83:76:
                    0d:07:7f:1a:ad:57:72:6b:7f:eb:22:6d:a6:be:d4:
                    38:e9:14:8e:72:33:37:85:2d:af:19:fb:73:10:82:
                    91:48:a2:9b:75:5e:64:64:1e:5a:3f:89:a5:46:15:
                    ef:77:13:60:54:d7:57:6e:42:e3:41:48:96:69:90:
                    8b:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:F3:78:CF:73:DE:8F:0E:27:2A:55:F7:5D:B0:09:80:36:EC:56:80
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/1801b6-cf49-4405-970d-cf9e8c6a412e/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/1801b6-cf49-4405-970d-cf9e8c6a412e/1/CvN4z3Pejw4nKlX3XbAJgDbsVoA.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0d:bbc0::/29

    Signature Algorithm: sha256WithRSAEncryption
         98:5e:18:8f:29:7a:f9:ca:88:58:dc:b9:17:7d:76:15:59:27:
         2e:10:c9:22:98:eb:4c:76:65:1d:e3:01:c0:0e:1f:64:83:74:
         92:40:4e:00:c9:77:bd:41:14:f7:36:d9:4f:0f:1f:42:43:e3:
         d3:5b:47:46:65:41:39:b2:25:ec:53:c4:d1:72:57:29:73:48:
         5d:67:37:14:22:30:00:6f:d6:a8:89:ea:a8:c7:8d:23:7b:b7:
         97:90:7d:b8:87:ab:3d:95:67:38:a5:0c:a6:09:26:1a:b6:ad:
         8b:f9:11:1f:d3:5a:19:f2:99:c1:f1:af:ee:4f:66:eb:11:3e:
         77:1e:bc:2c:9b:eb:ca:87:e8:35:56:28:8e:1d:ea:ce:98:76:
         0a:4b:7f:93:ca:12:e9:f5:de:b4:56:93:00:de:2d:97:d0:3d:
         4f:16:68:aa:11:f2:1e:71:84:52:26:f0:5d:e5:55:9a:fa:cb:
         a5:2b:74:d6:78:f9:a3:e7:cb:10:87:62:e0:ca:15:a9:9c:89:
         98:8b:2c:96:fa:92:65:cb:ed:c8:00:fd:cf:91:d3:aa:7a:39:
         1f:58:e8:01:99:31:1c:33:eb:81:5c:80:61:93:91:ab:d7:e8:
         05:fa:01:21:e9:16:b9:32:b3:ce:da:21:dc:e1:ff:42:fe:da:
         94:b9:e3:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 31 12:32:32 2023 by rpki-client on console-ams.rpki-client.org