Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Lqwt2LEoBZSu9r7LGVpVtFHHsJs.cer
File:                     Lqwt2LEoBZSu9r7LGVpVtFHHsJs.cer (raw, json)
Hash identifier:          HT99lXjLaJIBy2e2p8zqnziBu+7eYF4sR0VAHwTs2ZY=
Subject key identifier:   2E:AC:2D:D8:B1:28:05:94:AE:F6:BE:CB:19:5A:55:B4:51:C7:B0:9B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856D1A821D486CB4448767C041224DD3D5
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/e0/3c57c6-9739-4625-b029-5b8716dd3623/1/Lqwt2LEoBZSu9r7LGVpVtFHHsJs.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/e0/3c57c6-9739-4625-b029-5b8716dd3623/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 11:32:11 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 91.214.112.0/24

Validation:               Failed, certificate revoked on Wed 08 Mar 2023 07:28:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6d:1a:82:1d:48:6c:b4:44:87:67:c0:41:22:4d:d3:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 11:32:11 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=2eac2dd8b1280594aef6becb195a55b451c7b09b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:c6:60:9e:b6:6e:bc:4f:9b:ba:8f:06:80:4a:
                    b3:21:bb:6a:72:9b:eb:24:fc:6f:c4:2e:53:61:5c:
                    b3:60:50:4b:92:8a:90:01:a8:fc:cd:40:f7:09:fb:
                    59:ba:ce:73:d6:af:7b:9c:d5:0a:29:00:97:61:a3:
                    03:82:df:e5:0c:5d:e0:36:3b:49:8c:05:b9:e7:06:
                    f2:e1:df:b3:c1:88:cf:d2:50:a4:59:e2:f8:8d:a3:
                    06:7e:79:d0:21:0e:79:47:5a:8f:87:64:fd:59:d4:
                    41:fd:fb:15:2d:16:a3:5b:3d:f0:e9:19:e2:a2:e0:
                    58:a6:ec:37:6c:9c:0e:ff:8a:5e:8a:c7:72:35:f5:
                    52:e9:1d:10:6c:59:bb:17:bc:b2:7b:a8:40:68:94:
                    7a:59:7a:a0:36:63:ef:fc:d9:1f:97:7a:8e:1b:05:
                    52:a6:34:fd:42:31:d9:23:dc:bc:cd:a8:4c:1d:8e:
                    e5:cd:48:6c:60:cd:7b:e0:07:5c:e6:50:e8:a4:fd:
                    5c:d0:0c:c3:50:4f:2b:b2:d9:89:ae:93:b1:c9:31:
                    91:2c:d0:37:94:49:ff:19:72:58:9b:f1:14:1d:15:
                    27:c8:df:ec:14:7a:7a:9e:8a:c5:6a:77:f5:5b:6b:
                    4f:0f:e1:27:37:05:50:e1:11:fe:b8:37:ce:04:62:
                    12:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:AC:2D:D8:B1:28:05:94:AE:F6:BE:CB:19:5A:55:B4:51:C7:B0:9B
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/3c57c6-9739-4625-b029-5b8716dd3623/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/3c57c6-9739-4625-b029-5b8716dd3623/1/Lqwt2LEoBZSu9r7LGVpVtFHHsJs.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.214.112.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5e:66:ea:ea:58:bc:ad:61:22:d0:ee:bc:a0:01:f8:2f:9b:e0:
         11:dd:f7:d6:0e:03:c2:d1:71:39:7e:a5:29:fa:ab:83:3b:76:
         99:c8:7a:65:77:ce:ce:51:d0:27:45:5c:a2:c6:48:38:02:13:
         10:57:43:b7:34:72:4c:48:b0:4e:4a:7c:c8:45:db:9e:a7:75:
         e5:8f:b1:35:5a:7d:05:4e:51:71:f2:ad:29:22:2a:54:16:f7:
         e3:e8:14:5f:21:3c:d5:27:9e:2f:48:3f:b4:7c:3e:7f:82:7c:
         d4:4a:65:39:e0:b3:4a:25:12:5d:05:7f:8d:f5:d7:4a:dd:a3:
         a9:86:e9:de:f7:80:e5:84:ae:cf:56:09:fb:7d:81:f0:64:d1:
         0b:41:d7:81:f3:ed:76:ce:71:8c:8b:c7:c8:c5:97:af:c8:59:
         f3:d1:9f:11:f0:40:77:70:bb:b5:c1:b1:69:4d:50:a6:c8:0e:
         37:0d:e0:cc:4b:eb:90:4d:8a:19:aa:eb:fd:3c:98:f8:fc:8e:
         3c:6d:49:32:08:45:35:04:7f:b3:4e:c2:1d:66:42:98:99:f9:
         27:a2:b7:f3:44:c6:65:22:e1:17:a5:5a:9a:1c:0b:22:92:de:
         7a:1f:5f:e1:81:74:76:34:ce:b8:5e:8d:fc:81:f1:70:6e:b4:
         97:60:1c:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----