Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/EK0ZMK-er97hDnaGhJ1Br37zNDk.cer
File:                     EK0ZMK-er97hDnaGhJ1Br37zNDk.cer (raw, json)
Hash identifier:          AL3i7rfKQWe3rMqzOzob4uXy1BWjNVdvy9Ow2C//deQ=
Subject key identifier:   10:AD:19:30:AF:9E:AF:DE:E1:0E:76:86:84:9D:41:AF:7E:F3:34:39
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018CC348BC936ABA33CDEDB81D7C7203EA17
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/f7/595d8c-185a-4f86-a32a-60fa912615cb/1/EK0ZMK-er97hDnaGhJ1Br37zNDk.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/f7/595d8c-185a-4f86-a32a-60fa912615cb/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 04:29:33 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    IP: 31.24.83.0/24

Validation:               Failed, certificate revoked on Tue 16 Apr 2024 05:58:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c3:48:bc:93:6a:ba:33:cd:ed:b8:1d:7c:72:03:ea:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 04:29:33 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=10ad1930af9eafdee10e7686849d41af7ef33439
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:11:f3:09:b8:6b:27:da:84:8b:42:d8:d7:b0:
                    9c:a7:f6:85:88:fe:29:db:dc:8f:03:9a:8a:65:a9:
                    9c:4b:0c:dd:61:44:26:99:c4:c0:29:55:f1:93:20:
                    f8:3d:b8:8c:c3:b3:ea:ec:09:8c:c1:dc:0c:2f:82:
                    94:d3:10:99:80:af:f6:b4:33:b7:3d:b9:7c:c5:22:
                    c0:4b:3a:a8:36:5f:a0:dd:66:53:9f:cb:ef:6c:bb:
                    ab:22:28:a3:e2:47:a3:99:39:00:2c:57:bb:42:ca:
                    d0:7e:68:5e:b2:d8:b2:53:df:74:e4:8a:26:20:19:
                    e0:54:c6:66:51:b5:50:52:12:c6:63:cf:01:d2:6b:
                    88:76:e5:f7:b9:49:a6:05:56:01:9b:39:a5:eb:6f:
                    44:83:27:74:10:ba:03:21:c0:d4:22:d7:3d:9c:47:
                    c3:71:0f:9f:73:44:7e:8a:96:52:8c:80:35:4f:87:
                    72:58:88:11:8e:f2:4c:79:e1:7d:f3:e6:ec:f1:5b:
                    aa:d4:bf:fc:d4:d7:db:a9:3e:08:11:21:50:a7:42:
                    13:f1:70:91:38:7a:dd:b6:65:95:11:96:fc:e1:3b:
                    2f:15:b6:ff:12:18:43:49:35:1c:ef:a9:c9:a7:0c:
                    36:3d:97:a1:30:bd:b5:47:c4:1e:83:87:0a:53:05:
                    e4:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:AD:19:30:AF:9E:AF:DE:E1:0E:76:86:84:9D:41:AF:7E:F3:34:39
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/595d8c-185a-4f86-a32a-60fa912615cb/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/595d8c-185a-4f86-a32a-60fa912615cb/1/EK0ZMK-er97hDnaGhJ1Br37zNDk.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.24.83.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0a:95:39:90:74:dc:e9:c0:56:46:59:be:4d:37:a5:41:77:fb:
         8a:eb:ae:ca:8b:9c:6a:e1:5b:87:e8:aa:0e:30:dd:c4:2a:37:
         b4:17:9a:35:21:5b:d2:dc:5d:ea:33:bd:ab:ec:24:1c:9d:a6:
         09:3f:8b:20:3e:78:5e:6f:28:58:be:ed:2a:39:99:39:b7:04:
         95:8f:7a:88:1f:5b:de:cc:66:66:94:b9:68:ce:e2:b1:4b:7f:
         c9:d5:77:96:8d:4c:d5:b2:e8:31:e6:a3:e3:4f:68:12:d9:7e:
         ca:f3:a5:49:40:d5:be:14:8e:e6:0b:07:f8:4e:65:ec:48:1e:
         43:cf:74:27:11:5d:1b:45:e7:d2:9d:03:b1:42:9a:ba:38:97:
         c1:7e:39:38:b4:b9:d8:14:ac:ce:33:56:23:67:38:6e:64:82:
         56:56:8f:0f:4d:73:31:68:2c:5b:6d:5a:46:97:02:b5:d9:6d:
         6b:7f:7b:7a:39:73:0c:55:fc:84:b2:f7:78:3e:1f:ec:7b:72:
         55:a7:32:7e:85:fa:e6:8d:f7:f1:5b:bc:d8:2d:58:10:c8:be:
         4e:57:c6:bc:fb:d5:c3:d8:2e:07:c1:c9:d1:e0:6f:8c:47:d6:
         6b:74:a6:8c:2d:f8:81:e5:88:45:e3:38:7c:63:69:ae:c7:99:
         49:28:92:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----