Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/DJheuNlLn6EUIteC8xT_bi3tB60.cer
File:                     DJheuNlLn6EUIteC8xT_bi3tB60.cer (raw, json)
Hash identifier:          wNXxrcGN+/kTKNI+MLe3+lU9Bv+3qNtXNnoXZRIp+7E=
Subject key identifier:   0C:98:5E:B8:D9:4B:9F:A1:14:22:D7:82:F3:14:FF:6E:2D:ED:07:AD
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856ED3FE4FEE2CF771FA2C150BFDC98792
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/6c/29c524-c98e-4320-8274-521171b7d268/1/DJheuNlLn6EUIteC8xT_bi3tB60.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/6c/29c524-c98e-4320-8274-521171b7d268/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 19:34:25 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 213.232.239.0/24

Validation:               Failed, certificate revoked on Thu 14 Dec 2023 10:54:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6e:d3:fe:4f:ee:2c:f7:71:fa:2c:15:0b:fd:c9:87:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 19:34:25 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=0c985eb8d94b9fa11422d782f314ff6e2ded07ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:50:65:6a:32:dd:f5:0a:2e:1a:69:ca:1d:07:
                    99:a4:bb:85:57:3e:61:95:bd:67:78:f5:aa:84:34:
                    ae:c2:e8:1c:e9:1b:00:92:d8:fa:f6:21:5a:8c:37:
                    8e:80:99:68:0c:d0:1a:c1:c7:9a:b3:32:35:e1:16:
                    e1:6c:82:2a:1c:03:b4:fa:07:79:46:39:e1:32:93:
                    89:e6:8a:67:51:ca:34:67:06:8f:94:ce:09:29:80:
                    35:cf:56:8f:87:d5:c2:f4:d2:9d:f9:48:60:2d:4f:
                    c3:2d:70:b9:5b:3b:8f:e3:b6:38:d4:d8:0f:41:fe:
                    2b:bc:86:d8:e1:77:2e:34:03:3c:0e:7e:df:12:7e:
                    3e:91:fd:44:5e:a8:b2:fb:54:87:8c:c9:e8:55:79:
                    bf:02:b9:3e:ef:8a:f4:22:3a:7e:95:5d:d5:fc:2e:
                    94:be:dd:74:7d:09:4e:d8:e7:dd:87:74:84:48:59:
                    0e:d0:fa:38:df:2b:69:16:c0:44:8e:4b:eb:fb:9b:
                    19:5c:44:e3:ac:14:99:f8:59:7b:76:57:fe:df:9e:
                    80:bf:3c:7e:2c:b1:04:e8:58:8f:a5:e6:56:f9:e4:
                    10:d9:43:7f:15:8d:cd:b6:05:a4:34:be:53:05:ba:
                    a6:d9:d5:0e:c8:66:99:83:15:8a:b7:ed:66:6e:1b:
                    18:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:98:5E:B8:D9:4B:9F:A1:14:22:D7:82:F3:14:FF:6E:2D:ED:07:AD
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/29c524-c98e-4320-8274-521171b7d268/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/29c524-c98e-4320-8274-521171b7d268/1/DJheuNlLn6EUIteC8xT_bi3tB60.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  213.232.239.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5d:3f:eb:e8:b2:02:a8:ff:d9:da:ab:ee:6e:ef:b5:87:d6:ab:
         4a:4d:86:71:5c:8c:cc:3a:02:fa:83:e2:1f:f0:93:cb:5f:e6:
         3e:99:36:70:de:6f:de:99:e6:15:38:69:56:e4:00:50:3c:fd:
         88:59:13:ee:07:4a:51:a6:ac:7a:cc:5d:c1:df:4b:31:f9:51:
         7e:42:30:75:fb:fd:7f:55:9a:e9:1c:a5:59:9a:10:d6:6d:86:
         1f:91:df:42:2f:d1:15:53:f4:ba:d8:da:80:15:46:a4:10:4b:
         82:71:2a:69:0b:a2:fc:61:30:7f:21:d4:9a:52:ed:d9:a5:83:
         79:85:28:02:a8:44:b3:84:82:17:a6:83:aa:d0:fe:45:20:f7:
         c5:6f:87:d0:3c:1b:6b:95:a5:16:d8:bd:60:e8:e5:33:73:82:
         58:66:6a:77:7e:16:61:9c:91:d5:99:f5:d4:ac:ed:1c:ec:4d:
         86:6b:bd:1c:5e:00:26:c6:ec:1b:c3:4b:92:6c:fd:db:03:7a:
         2d:a3:d9:6b:34:a3:a9:a2:da:74:08:a4:09:15:12:78:c1:ec:
         ee:3c:4c:35:da:35:3f:73:88:6b:e4:c8:25:33:ca:39:97:dc:
         fa:78:09:05:24:ce:d0:a3:d5:dc:0e:2e:6f:44:b0:ad:b2:bf:
         7c:5d:bd:99
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAYVu0/5P7iz3cfosFQv9yYeSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjMwMTAxMTkzNDI1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwYzk4NWViOGQ5NGI5ZmExMTQyMmQ3ODJmMzE0ZmY2ZTJkZWQwN2FkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzlBlajLd9QouGmnKHQeZpLuFVz5h
lb1nePWqhDSuwugc6RsAktj69iFajDeOgJloDNAawceaszI14RbhbIIqHAO0+gd5
RjnhMpOJ5opnUco0ZwaPlM4JKYA1z1aPh9XC9NKd+UhgLU/DLXC5WzuP47Y41NgP
Qf4rvIbY4XcuNAM8Dn7fEn4+kf1EXqiy+1SHjMnoVXm/Ark+74r0Ijp+lV3V/C6U
vt10fQlO2Ofdh3SESFkO0Po43ytpFsBEjkvr+5sZXETjrBSZ+Fl7dlf+356Avzx+
LLEE6FiPpeZW+eQQ2UN/FY3NtgWkNL5TBbqm2dUOyGaZgxWKt+1mbhsYQQIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFAyYXrjZS5+hFCLXgvMU/24t7QetMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzZjLzI5YzUy
NC1jOThlLTQzMjAtODI3NC01MjExNzFiN2QyNjgvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNmMvMjljNTI0
LWM5OGUtNDMyMC04Mjc0LTUyMTE3MWI3ZDI2OC8xL0RKaGV1TmxMbjZFVUl0ZUM4
eFRfYmkzdEI2MC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQA1ejvMA0GCSqGSIb3DQEBCwUAA4IBAQBdP+vo
sgKo/9naq+5u77WH1qtKTYZxXIzMOgL6g+If8JPLX+Y+mTZw3m/emeYVOGlW5ABQ
PP2IWRPuB0pRpqx6zF3B30sx+VF+QjB1+/1/VZrpHKVZmhDWbYYfkd9CL9EVU/S6
2NqAFUakEEuCcSppC6L8YTB/IdSaUu3ZpYN5hSgCqESzhIIXpoOq0P5FIPfFb4fQ
PBtrlaUW2L1g6OUzc4JYZmp3fhZhnJHVmfXUrO0c7E2Ga70cXgAmxuwbw0uSbP3b
A3oto9lrNKOpotp0CKQJFRJ4wezuPEw12jU/c4hr5MglM8o5l9z6eAkFJM7Qo9Xc
Di5vRLCtsr98Xb2Z
-----END CERTIFICATE-----