Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/J7FbbSx5rBpwpxGy-6jXlJC3ujA.cer
File:                     J7FbbSx5rBpwpxGy-6jXlJC3ujA.cer (raw, json)
Hash identifier:          YJu6o0a2jKccIhFo+9XN8J9H6J7pSMJiuJUM2YJUt44=
Subject key identifier:   27:B1:5B:6D:2C:79:AC:1A:70:A7:11:B2:FB:A8:D7:94:90:B7:BA:30
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01887DE564BDA6C30C6BE38712583F985D37
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rsync.paas.rpki.ripe.net/repository/92ef9160-1df7-429f-9b34-9a3d2bf0cc72/0/27B15B6D2C79AC1A70A711B2FBA8D79490B7BA30.mft
caRepository:             rsync://rsync.paas.rpki.ripe.net/repository/92ef9160-1df7-429f-9b34-9a3d2bf0cc72/0/
Notify URL:               https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before:   Fri 02 Jun 2023 20:56:05 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 62.122.185.0/24

Validation:               Failed, certificate revoked on Thu 21 Sep 2023 07:42:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:7d:e5:64:bd:a6:c3:0c:6b:e3:87:12:58:3f:98:5d:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jun  2 20:56:05 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=27b15b6d2c79ac1a70a711b2fba8d79490b7ba30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:ea:3a:d2:3b:2a:98:6b:a3:0d:09:fa:84:52:
                    51:2b:4a:e1:7d:6a:22:19:6a:37:52:91:e7:96:61:
                    b7:f8:02:a5:b5:2d:33:af:f1:99:a7:14:e2:0d:a5:
                    c2:86:12:01:1b:9a:8a:c7:f5:4b:d3:68:7b:bb:36:
                    88:74:41:63:0e:3c:82:92:4c:dc:11:93:95:ca:16:
                    de:24:13:f7:af:b7:4d:70:bd:c0:3d:17:5f:40:6e:
                    52:40:cd:80:f5:7c:cf:8f:77:e3:25:1f:01:52:3f:
                    b2:54:74:ae:53:71:fc:e2:94:e5:6d:5f:65:92:94:
                    90:16:03:ae:a1:76:a1:05:87:79:28:44:85:76:92:
                    26:47:3f:be:04:72:04:ef:78:fc:76:e2:e6:81:df:
                    9c:aa:0b:70:79:0f:fd:0d:86:8d:a6:2e:07:bb:73:
                    ac:16:55:ab:db:92:ce:23:d2:89:df:21:87:3a:21:
                    e8:c8:bc:46:35:3e:a2:c9:fb:ae:c4:6d:d6:e2:9e:
                    03:fc:44:b4:5c:40:9d:2a:f4:6e:64:18:7d:8d:54:
                    12:a5:54:fe:2a:5a:ed:29:3b:1d:2f:ab:fc:a4:21:
                    ee:bc:0e:26:f6:f1:58:0b:09:38:ba:4f:82:db:c4:
                    60:2c:21:63:0d:a8:47:be:69:cb:a4:52:74:f1:2b:
                    5e:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:B1:5B:6D:2C:79:AC:1A:70:A7:11:B2:FB:A8:D7:94:90:B7:BA:30
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/92ef9160-1df7-429f-9b34-9a3d2bf0cc72/0/
                RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/92ef9160-1df7-429f-9b34-9a3d2bf0cc72/0/27B15B6D2C79AC1A70A711B2FBA8D79490B7BA30.mft
                RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.122.185.0/24

    Signature Algorithm: sha256WithRSAEncryption
         77:07:a7:d8:46:fd:a4:78:fc:e6:e0:a2:4d:93:2e:c3:79:52:
         18:44:1a:33:3e:32:e3:7e:a9:e6:71:06:61:97:09:6a:ad:07:
         b1:c1:3f:f3:92:b5:cf:b6:6b:4b:b5:78:7f:42:17:cd:e2:ad:
         f7:5a:fc:1b:c2:32:37:f1:24:0e:a7:eb:8f:b8:89:f2:bc:f8:
         a6:34:29:33:2b:c6:ca:5e:f2:e4:f8:b5:af:f2:91:a6:22:82:
         23:83:5b:c0:06:01:89:83:22:17:b8:d5:6a:6e:51:2b:ff:d5:
         7c:8a:9b:e4:7c:14:b3:67:33:a6:f8:04:92:ab:dc:04:e8:8d:
         ca:72:19:ca:cf:9b:d5:c5:71:80:ac:57:86:f5:a5:77:93:80:
         fd:ee:b5:79:5c:42:ca:b0:3f:eb:2e:21:68:16:5f:a5:4e:bf:
         03:15:52:db:77:34:b1:9e:e8:8b:ff:84:b9:aa:d0:65:f5:a5:
         f2:7e:92:79:dc:d7:86:72:6e:6a:48:0b:49:5e:e3:63:4f:f8:
         d7:3b:a0:6a:78:91:5a:da:da:22:d5:26:9f:ad:9d:6f:90:0f:
         8c:37:3d:bb:74:84:50:4e:32:4e:55:25:25:32:65:ae:8a:9d:
         b8:80:53:d2:2c:2e:11:3e:b3:91:dc:7e:3b:7e:29:1c:42:31:
         7e:c7:47:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----