Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/NPLCp7jFIdrIwlpKSY5xZKky2iM.cer
File:                     NPLCp7jFIdrIwlpKSY5xZKky2iM.cer (raw, json)
Hash identifier:          OqbNQ+hj4stxZbL/j6FdvYXw4RcFRcPUVbQ/4KVDd2U=
Subject key identifier:   34:F2:C2:A7:B8:C5:21:DA:C8:C2:5A:4A:49:8E:71:64:A9:32:DA:23
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018B13DD5A50198D5004F3B09C31393BF505
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/c1/4f7deb-8831-4db4-b92e-c619877be219/1/NPLCp7jFIdrIwlpKSY5xZKky2iM.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/c1/4f7deb-8831-4db4-b92e-c619877be219/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 09 Oct 2023 09:55:55 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 212.70.2.0/24
                          IP: 2a0e:f300::/32

Validation:               Failed, certificate revoked on Mon 11 Dec 2023 10:24:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:13:dd:5a:50:19:8d:50:04:f3:b0:9c:31:39:3b:f5:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Oct  9 09:55:55 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=34f2c2a7b8c521dac8c25a4a498e7164a932da23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:a1:b2:70:c4:e5:9a:f6:c0:64:0a:c7:96:6a:
                    d3:8c:da:59:f1:15:c7:fe:c1:39:a7:f8:3b:a7:79:
                    7b:40:86:8f:7f:a0:fe:de:12:ec:a5:97:94:e4:16:
                    5e:5f:3b:2c:5f:ea:2e:95:bf:bb:4e:08:e6:06:18:
                    40:8a:84:11:eb:27:46:1f:4d:84:ac:d2:34:dd:1c:
                    24:8a:38:4d:d1:7f:fc:b7:06:07:3d:04:a6:35:36:
                    35:03:79:65:cc:10:91:37:45:88:68:ce:ba:8f:58:
                    26:5d:88:92:b6:17:78:0e:41:e4:20:5f:d8:be:0b:
                    03:12:40:d4:33:f4:88:bc:01:e4:cf:7b:40:00:a2:
                    5b:9a:8b:3d:a4:77:c6:22:56:dd:40:8a:c9:72:0e:
                    22:d5:a4:b9:4e:5e:e5:0e:51:8f:3b:a4:87:bc:dd:
                    c3:57:46:81:bd:a9:40:5c:f0:cb:d7:f8:00:22:28:
                    4a:d4:b5:fa:09:a4:94:76:be:f5:35:49:7d:62:df:
                    4a:16:47:57:8f:63:6a:92:49:84:e1:59:89:e8:92:
                    24:48:a7:62:e1:d5:90:8f:86:ae:76:ab:c1:92:37:
                    c1:10:01:cd:17:48:cb:0a:65:8e:ab:7a:7c:b3:ce:
                    23:88:28:cd:d2:49:46:4e:2b:07:c9:9a:3a:b2:70:
                    f9:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:F2:C2:A7:B8:C5:21:DA:C8:C2:5A:4A:49:8E:71:64:A9:32:DA:23
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/4f7deb-8831-4db4-b92e-c619877be219/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/4f7deb-8831-4db4-b92e-c619877be219/1/NPLCp7jFIdrIwlpKSY5xZKky2iM.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.70.2.0/24
                IPv6:
                  2a0e:f300::/32

    Signature Algorithm: sha256WithRSAEncryption
         8a:c0:fb:49:42:9e:5c:77:09:ae:6f:f9:28:9b:f9:73:8c:c7:
         14:9b:39:ab:3f:ff:7d:fa:f8:7e:63:98:19:54:43:a0:16:9b:
         c7:52:66:8b:4f:3b:19:f0:ac:86:5a:a4:57:7c:ed:5e:2e:7d:
         bb:ac:f1:54:43:5f:e5:39:d5:50:6d:6f:5d:b4:b3:c4:a9:3c:
         5a:a9:17:ab:d7:21:fa:e7:1e:73:7c:d0:93:79:06:7b:e2:6e:
         e8:d6:c1:5d:84:74:03:e1:5f:f5:f5:c6:de:56:d5:7d:3a:3a:
         23:3d:aa:52:21:16:ba:1d:0f:99:28:cd:ce:61:5c:37:28:8b:
         9a:0c:04:72:9c:42:4c:18:bb:3e:cf:c5:6a:75:de:8f:78:98:
         f2:8e:0a:84:22:77:15:43:3d:b2:45:4b:c7:99:a8:63:3a:5d:
         89:ae:e5:79:92:b8:9f:8a:cf:0e:e2:88:a3:76:f8:ab:c8:90:
         ec:e5:fd:3d:d3:3d:72:4b:a5:44:ba:13:49:6b:f5:c3:f3:59:
         c0:4c:1c:30:3a:86:7e:4a:78:85:83:3a:ff:2c:61:dc:f6:e8:
         4b:c0:f3:f6:7e:bd:cf:f7:c6:6e:a8:7d:e5:08:cd:32:04:92:
         70:97:0f:82:41:13:b4:bb:53:aa:5c:a2:ac:9d:fc:13:09:b3:
         92:11:98:72
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgISAYsT3VpQGY1QBPOwnDE5O/UFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjMxMDA5MDk1NTU1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNGYyYzJhN2I4YzUyMWRhYzhjMjVhNGE0OThlNzE2NGE5MzJkYTIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6aGycMTlmvbAZArHlmrTjNpZ8RXH
/sE5p/g7p3l7QIaPf6D+3hLspZeU5BZeXzssX+oulb+7TgjmBhhAioQR6ydGH02E
rNI03RwkijhN0X/8twYHPQSmNTY1A3llzBCRN0WIaM66j1gmXYiSthd4DkHkIF/Y
vgsDEkDUM/SIvAHkz3tAAKJbmos9pHfGIlbdQIrJcg4i1aS5Tl7lDlGPO6SHvN3D
V0aBvalAXPDL1/gAIihK1LX6CaSUdr71NUl9Yt9KFkdXj2NqkkmE4VmJ6JIkSKdi
4dWQj4audqvBkjfBEAHNF0jLCmWOq3p8s84jiCjN0klGTisHyZo6snD54wIDAQAB
o4ICkzCCAo8wHQYDVR0OBBYEFDTywqe4xSHayMJaSkmOcWSpMtojMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2MxLzRmN2Rl
Yi04ODMxLTRkYjQtYjkyZS1jNjE5ODc3YmUyMTkvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzEvNGY3ZGVi
LTg4MzEtNGRiNC1iOTJlLWM2MTk4NzdiZTIxOS8xL05QTENwN2pGSWRySXdscEtT
WTV4WktreTJpTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQA1EYCMA0EAgACMAcDBQAqDvMAMA0GCSqGSIb3
DQEBCwUAA4IBAQCKwPtJQp5cdwmub/kom/lzjMcUmzmrP/99+vh+Y5gZVEOgFpvH
UmaLTzsZ8KyGWqRXfO1eLn27rPFUQ1/lOdVQbW9dtLPEqTxaqRer1yH65x5zfNCT
eQZ74m7o1sFdhHQD4V/19cbeVtV9OjojPapSIRa6HQ+ZKM3OYVw3KIuaDARynEJM
GLs+z8Vqdd6PeJjyjgqEIncVQz2yRUvHmahjOl2JruV5krifis8O4oijdviryJDs
5f090z1yS6VEuhNJa/XD81nATBwwOoZ+SniFgzr/LGHc9uhLwPP2fr3P98ZuqH3l
CM0yBJJwlw+CQRO0u1OqXKKsnfwTCbOSEZhy
-----END CERTIFICATE-----