Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/G74s_7WsriD9ejp1rduru4HUdgA.cer
File:                     G74s_7WsriD9ejp1rduru4HUdgA.cer (raw, json)
Hash identifier:          lFUPCwQPFEribLncW7lBnCwThdOFyUJQB52Olyfwsm4=
Subject key identifier:   1B:BE:2C:FF:B5:AC:AE:20:FD:7A:3A:75:AD:DB:AB:BB:81:D4:76:00
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018CC7257AF1E24537270FAC8FD9B1566D9A
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/ea/a46763-19cc-434c-b229-38c07c0c8f59/1/G74s_7WsriD9ejp1rduru4HUdgA.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/ea/a46763-19cc-434c-b229-38c07c0c8f59/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 22:29:31 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    IP: 37.77.144.0/24

Validation:               Failed, certificate revoked on Tue 02 Jan 2024 12:47:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c7:25:7a:f1:e2:45:37:27:0f:ac:8f:d9:b1:56:6d:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 22:29:31 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=1bbe2cffb5acae20fd7a3a75addbabbb81d47600
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:fe:8d:3d:b0:39:52:a5:a9:9f:20:a0:2b:2b:
                    9d:5f:61:02:eb:16:8b:4a:52:39:be:e7:b4:6a:43:
                    41:73:04:0b:84:bb:23:58:ef:b0:cc:88:89:60:5f:
                    c9:d5:4d:81:cf:fd:68:5e:fd:86:34:14:18:b5:bc:
                    9b:47:ce:e3:53:e7:30:c7:8f:77:83:a2:62:cc:b6:
                    10:91:ca:86:fe:ec:31:37:bb:d2:7b:8a:f3:6f:0d:
                    52:94:63:f8:d5:99:14:1b:6c:7c:b7:a0:d3:8f:0f:
                    84:4c:75:d4:9a:f4:c4:81:7a:97:8e:61:9c:da:aa:
                    0a:b0:61:1c:7a:b1:ad:e7:6e:2c:3b:08:c0:1c:d8:
                    f0:bd:44:02:30:fd:10:e5:c1:fa:86:b5:44:38:47:
                    c7:89:08:93:cf:97:09:57:08:04:ad:87:68:b4:75:
                    e0:51:fa:35:11:00:b0:49:a8:e5:47:a9:71:5f:07:
                    49:d5:3a:60:05:b5:b9:5e:8d:f8:e3:42:dc:79:24:
                    80:a0:90:a3:91:c7:9c:ee:10:38:11:5d:30:a3:1c:
                    e6:46:ea:11:66:94:ba:8d:19:65:0e:43:7e:a7:0d:
                    74:fe:61:31:5e:f8:05:94:23:aa:6c:be:88:3c:b4:
                    ec:51:98:41:60:4a:02:44:ff:62:9f:3c:5d:26:d4:
                    cd:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:BE:2C:FF:B5:AC:AE:20:FD:7A:3A:75:AD:DB:AB:BB:81:D4:76:00
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/a46763-19cc-434c-b229-38c07c0c8f59/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/a46763-19cc-434c-b229-38c07c0c8f59/1/G74s_7WsriD9ejp1rduru4HUdgA.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  37.77.144.0/24

    Signature Algorithm: sha256WithRSAEncryption
         53:24:44:e2:5e:8e:35:d4:1a:a1:81:0b:46:78:86:36:58:8a:
         7f:5d:5f:14:60:9b:4c:66:0e:84:ea:cb:b8:a0:53:81:24:82:
         7a:c0:89:f6:92:36:e9:fa:6d:d9:5d:b9:4a:c9:91:5c:c2:6e:
         98:7a:27:11:c4:4d:0f:e6:dc:6c:cb:aa:c7:2d:cd:87:aa:a1:
         f0:62:ed:eb:d8:08:84:00:72:07:c1:6e:82:25:cb:09:42:46:
         f9:b9:de:7b:d4:47:2b:17:49:b1:36:34:01:8d:3f:06:71:b7:
         c4:a5:a1:be:9c:4f:6c:1c:5b:8a:2a:cb:e4:64:fe:50:c2:8b:
         e1:03:8d:61:6e:c3:4a:de:c7:e9:cb:b2:98:0a:ba:64:31:dd:
         5d:ae:7e:72:31:c8:98:33:7c:38:89:8b:d8:5b:05:10:e2:61:
         f1:7d:9b:45:bd:6d:f2:01:73:a3:62:df:78:e7:b3:00:a3:2b:
         9b:24:94:f3:e6:b2:a6:00:83:74:37:83:0a:74:60:e5:74:27:
         5d:6b:f4:52:52:1a:a2:cb:53:90:32:1e:bb:41:9f:82:32:0a:
         1c:6e:dd:94:98:a2:bd:51:61:32:17:c3:b6:13:c2:21:b1:0b:
         e4:7e:7d:a6:0a:98:11:f7:ae:0d:88:50:bc:c3:bc:61:82:2a:
         27:52:22:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----