Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/F2IBXHF4p4R2BIe4A5bWS_8AC1s.cer
File:                     F2IBXHF4p4R2BIe4A5bWS_8AC1s.cer (raw, json)
Hash identifier:          OTYs6nqazNSkWedAipxLAXOyI4Av+VfRSRuiG2ZFULg=
Subject key identifier:   17:62:01:5C:71:78:A7:84:76:04:87:B8:03:96:D6:4B:FF:00:0B:5B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0185701E29258CF027AAE6A98A413035C930
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/b9/3ce1bc-e01d-49fe-9636-e56cd49e80e2/1/F2IBXHF4p4R2BIe4A5bWS_8AC1s.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/b9/3ce1bc-e01d-49fe-9636-e56cd49e80e2/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 02 Jan 2023 01:35:02 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    AS: 199885
                          IP: 193.138.102.0/24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:1e:29:25:8c:f0:27:aa:e6:a9:8a:41:30:35:c9:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 01:35:02 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=1762015c7178a784760487b80396d64bff000b5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:23:05:ef:02:a3:e1:a0:10:a9:2e:c5:c4:b5:
                    f8:85:b4:69:91:53:98:8f:54:28:5f:a5:ad:a5:cd:
                    80:be:29:92:7c:6d:d6:37:7a:6d:ef:cb:55:9b:4f:
                    90:9f:21:62:6e:9f:c2:f1:26:24:a0:ee:e1:ca:3a:
                    4b:2b:9c:fc:e6:85:b0:f1:0c:1b:9a:ce:26:23:ee:
                    46:64:d3:17:cb:5b:0c:65:b4:d7:9a:2d:cb:f2:13:
                    d0:c7:09:8c:20:23:aa:16:5d:eb:d1:0f:82:1d:f1:
                    75:4f:73:cd:a6:10:f9:6c:ff:c3:cc:16:c4:b6:63:
                    0b:e3:17:d8:ee:4e:7a:56:84:94:66:87:f3:1c:c9:
                    dd:28:5f:2d:f3:de:bf:cf:e7:be:8a:26:e4:d9:61:
                    ec:8b:ef:66:14:28:cb:70:b0:07:b9:c4:23:e6:d3:
                    f2:27:22:0c:8f:29:2f:e4:b4:2a:1e:a5:d2:99:f2:
                    f0:9a:1c:60:08:53:ed:c9:b1:f3:dd:71:8b:d7:40:
                    f9:8f:b3:f4:a2:aa:b7:28:6c:29:e1:b6:2f:71:e3:
                    e5:40:a6:1c:dc:31:5a:b1:d8:88:f2:60:c7:99:b8:
                    54:89:58:09:cf:65:d1:9b:7b:46:39:2d:d8:d4:46:
                    a8:a9:b9:59:32:db:0c:62:e7:cd:36:e4:8f:dd:ae:
                    26:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:62:01:5C:71:78:A7:84:76:04:87:B8:03:96:D6:4B:FF:00:0B:5B
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/3ce1bc-e01d-49fe-9636-e56cd49e80e2/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/3ce1bc-e01d-49fe-9636-e56cd49e80e2/1/F2IBXHF4p4R2BIe4A5bWS_8AC1s.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.138.102.0/24

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  199885

    Signature Algorithm: sha256WithRSAEncryption
         7d:5f:16:b9:d2:9c:00:8b:a1:61:4e:46:a3:39:53:70:40:5a:
         3b:13:91:50:f1:08:a3:7d:f0:70:08:0a:12:7a:71:7d:35:e7:
         6a:9d:bd:b3:18:e8:46:57:ef:d6:4f:96:4c:d4:b4:17:f5:30:
         03:f7:6a:90:1a:bc:45:46:66:f3:75:19:31:61:1b:f6:fa:20:
         2e:4c:36:c4:61:55:4d:ba:b3:65:35:da:ae:66:a6:a7:37:2c:
         80:4a:86:50:59:a6:03:16:69:60:c8:96:f5:ba:b6:94:46:6d:
         d3:7f:a1:f2:08:2e:ea:61:d4:da:55:b5:d0:aa:2f:2f:f0:a6:
         18:19:11:2f:a6:bc:cc:4a:88:e5:3d:c5:37:8c:c0:89:a6:9c:
         f5:69:9a:46:6b:63:c8:fe:5a:eb:5d:ad:ee:3f:47:ed:4b:ac:
         c5:4b:13:48:1d:c3:db:49:15:b9:d6:61:0d:38:83:2c:77:9d:
         22:b0:94:31:12:af:e1:fc:a0:35:7d:de:41:08:75:f9:c2:ec:
         30:5a:39:55:b3:6c:a7:ac:05:ec:2c:a1:29:40:5f:f0:9c:ae:
         2f:77:21:8c:49:83:93:42:42:5e:43:bc:8d:84:ef:5a:91:bc:
         39:4c:2b:b8:e9:b8:95:e6:89:d7:a0:1a:3d:48:42:5a:27:6d:
         db:6f:20:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 2 11:51:49 2023 by rpki-client on console-fra.rpki-client.org