Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Ft6KM6As_o__ddCYD1WXcck_69Q.cer
File:                     Ft6KM6As_o__ddCYD1WXcck_69Q.cer (raw, json)
Hash identifier:          /xKs41wwAjGaLEhHmPqGA+oFkTdaSBvHKuUXJmdo/wU=
Subject key identifier:   16:DE:8A:33:A0:2C:FE:8F:FF:75:D0:98:0F:55:97:71:C9:3F:EB:D4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018750861DB7A14254A154293198AA1F2EEA
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/29/352d11-d0e3-453f-80fc-69c93d31db64/1/Ft6KM6As_o__ddCYD1WXcck_69Q.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/29/352d11-d0e3-453f-80fc-69c93d31db64/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 05 Apr 2023 08:26:19 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 185.188.31.0/24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:50:86:1d:b7:a1:42:54:a1:54:29:31:98:aa:1f:2e:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Apr  5 08:26:19 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=16de8a33a02cfe8fff75d0980f559771c93febd4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:f9:c4:78:2e:c2:8b:7e:85:b5:4f:53:98:60:
                    ba:9c:d7:13:fb:30:75:8a:c6:c7:9b:83:6f:6c:29:
                    5e:2c:c4:a6:1c:ad:99:b8:57:bb:63:46:f4:e3:a6:
                    dc:e1:81:15:02:09:b7:51:14:62:46:2e:1c:3a:73:
                    21:67:26:98:6a:cb:b3:ae:03:e9:48:ac:2a:95:1a:
                    50:41:42:23:30:be:00:17:71:8e:d8:26:56:8b:84:
                    92:0b:42:fc:b6:5c:82:da:c2:e8:7d:84:23:fe:67:
                    64:10:d9:31:41:d1:ab:65:03:4f:db:47:e1:7f:fc:
                    82:9c:46:ef:70:bb:a2:19:c6:8c:4c:51:61:a6:e0:
                    1d:5b:75:5b:e6:5f:6f:2b:26:f8:a7:3c:27:12:87:
                    6f:0a:e1:59:ad:75:79:2f:a7:85:63:3b:9e:92:cd:
                    27:c7:0e:a8:53:ac:a0:c8:b0:90:9f:e0:b2:05:0a:
                    54:9b:f9:76:42:23:16:cb:6a:6d:ed:fc:74:c7:2b:
                    41:d1:1e:f9:32:81:38:21:31:8b:bd:a3:8a:3c:ab:
                    ae:8d:eb:4a:c6:38:d8:02:df:60:8f:ab:4c:de:d8:
                    1c:9e:9d:46:ca:d1:ac:2a:23:00:83:46:0c:b3:dd:
                    20:dc:87:eb:90:69:a4:e4:ff:ce:9f:6a:72:04:f1:
                    39:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:DE:8A:33:A0:2C:FE:8F:FF:75:D0:98:0F:55:97:71:C9:3F:EB:D4
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/352d11-d0e3-453f-80fc-69c93d31db64/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/352d11-d0e3-453f-80fc-69c93d31db64/1/Ft6KM6As_o__ddCYD1WXcck_69Q.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.188.31.0/24

    Signature Algorithm: sha256WithRSAEncryption
         59:a5:04:45:72:23:13:57:46:ea:16:d5:da:6c:c8:6c:5c:7e:
         6f:13:45:1a:23:ea:de:29:27:93:24:d2:d4:76:b9:0b:3b:9b:
         fa:97:71:b9:1a:62:ac:e1:01:7e:61:c7:35:81:7d:e8:ce:06:
         d9:55:be:7a:aa:37:f4:c3:53:28:99:b3:6e:af:ae:06:48:91:
         22:9b:99:40:9d:f7:67:6c:d4:36:3b:f7:94:e0:77:a7:b4:83:
         75:b5:24:3d:d8:7b:bf:1f:3a:d3:98:a9:47:1d:fa:a7:93:3b:
         8b:74:36:33:ee:73:0c:48:b1:4a:ea:9b:9d:b5:cc:60:b0:60:
         81:25:cd:55:6d:8d:f8:41:76:ae:73:32:25:48:1e:27:4b:6f:
         f2:4e:75:ae:a0:2b:7c:67:a9:c1:fe:a7:eb:44:cd:11:e1:58:
         96:d9:69:a2:72:00:c4:82:7a:7f:c7:1f:59:63:aa:d1:72:fb:
         61:97:be:a9:a5:2a:b8:3f:c0:05:3d:1d:af:1d:5a:ed:2f:85:
         4e:03:c7:31:e5:25:b1:d2:ec:3f:fd:24:d3:58:29:0b:fb:a2:
         da:98:48:8e:b9:3a:7e:2e:d7:1c:bd:e1:e9:a6:95:67:b2:84:
         72:17:9b:dd:a2:ab:38:bd:fc:8b:ca:32:8e:79:a7:b8:59:ef:
         3c:80:90:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 27 13:02:30 2023 by rpki-client on console-fra.rpki-client.org