Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Rt3sBjoD0wsU_b-Z9Biy9kjN97w.cer
File:                     Rt3sBjoD0wsU_b-Z9Biy9kjN97w.cer (raw, json)
Hash identifier:          HaQuaa9tHV2GOKyeNoh0owm2r+TxgCGhQeUy/gYN0zk=
Subject key identifier:   46:DD:EC:06:3A:03:D3:0B:14:FD:BF:99:F4:18:B2:F6:48:CD:F7:BC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856B6331F01B5D57ACCC02192F6B1728F3
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/e2/3d4b2f-5b65-4b30-b4db-dcf2cb3df6bc/1/Rt3sBjoD0wsU_b-Z9Biy9kjN97w.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/e2/3d4b2f-5b65-4b30-b4db-dcf2cb3df6bc/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 03:32:21 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 194.62.41.0/24

Validation:               Failed, certificate revoked on Thu 20 Jul 2023 10:53:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6b:63:31:f0:1b:5d:57:ac:cc:02:19:2f:6b:17:28:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 03:32:21 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=46ddec063a03d30b14fdbf99f418b2f648cdf7bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:db:dc:94:e0:ba:72:71:1a:24:3e:be:be:fb:
                    88:99:3c:66:d9:1e:bc:83:d7:ae:87:68:d7:4e:5b:
                    e3:74:b4:d2:76:0a:3b:0b:4a:b8:67:ad:07:7f:2c:
                    26:ab:40:44:43:54:5d:fb:21:5e:d7:e4:d6:82:f8:
                    5a:df:97:30:7a:9a:b9:62:e2:f0:1c:e3:80:ab:e2:
                    06:61:92:83:d5:d7:5b:47:8d:e2:7b:81:21:a2:96:
                    27:8e:89:ac:7b:7a:c8:20:6c:96:7d:be:33:f8:73:
                    b0:f3:55:fd:13:fb:c7:53:b0:37:cf:2c:cc:5b:db:
                    7d:91:57:f8:c3:10:83:d8:c6:9f:d6:f6:df:5e:18:
                    3c:ec:cc:7c:6a:08:ac:79:b6:8a:ba:69:48:4e:08:
                    7e:d5:49:ad:4d:a6:24:65:e6:ca:46:ce:98:ba:c9:
                    63:f3:89:af:d5:08:b8:d4:21:fc:bc:7f:01:1f:d5:
                    f9:d1:31:65:4a:e4:77:68:f0:fe:58:9b:34:05:71:
                    e4:69:a4:db:c0:ea:3a:98:01:c0:9c:26:11:2f:7a:
                    35:48:a9:e2:b0:4b:9d:a5:98:44:4a:ad:a2:c3:32:
                    0c:17:75:2f:c3:cd:a3:bb:73:e3:be:1a:d3:5d:e9:
                    aa:37:c0:33:a3:bb:01:40:df:0d:ba:88:77:e9:06:
                    ef:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:DD:EC:06:3A:03:D3:0B:14:FD:BF:99:F4:18:B2:F6:48:CD:F7:BC
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/3d4b2f-5b65-4b30-b4db-dcf2cb3df6bc/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/3d4b2f-5b65-4b30-b4db-dcf2cb3df6bc/1/Rt3sBjoD0wsU_b-Z9Biy9kjN97w.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.62.41.0/24

    Signature Algorithm: sha256WithRSAEncryption
         96:df:63:66:70:77:32:68:80:da:d7:d0:49:78:1a:4d:55:e3:
         29:b2:28:02:0b:27:40:b9:49:12:c2:5c:cc:50:fa:48:8e:71:
         7a:db:4e:4f:c6:8d:90:64:0d:71:45:ab:fe:14:82:ac:8d:5c:
         06:01:fd:cb:b7:c7:74:9c:9c:6e:84:72:39:14:04:cd:b4:08:
         7b:ff:35:b3:f2:89:16:cb:a2:01:f3:4f:43:b8:f9:38:34:01:
         58:78:9f:a6:9d:a5:c1:a3:71:d8:9f:b8:75:64:95:a4:6d:ec:
         aa:9f:7f:98:06:11:dd:08:09:88:b7:2a:80:90:cd:fb:b8:c8:
         08:3a:54:91:64:9a:75:54:5c:0f:db:6d:aa:3b:8e:bd:f5:8b:
         39:f7:82:cb:c1:d1:8b:0a:cd:90:22:5b:4c:2e:87:08:f4:22:
         c4:37:84:90:50:96:04:79:88:03:05:1a:57:83:22:1a:9b:ae:
         ee:72:f1:1e:53:ff:9a:c0:08:21:c3:47:d7:4a:b7:ea:ea:e4:
         01:1e:d1:2f:1c:2e:7e:05:5b:ed:ae:cf:4e:6a:2f:4f:40:b3:
         06:7e:5d:ee:fc:66:4e:7b:d1:7e:4a:a7:d6:99:6f:90:60:30:
         3f:f2:4b:62:4a:53:a1:68:6e:16:23:2a:3d:ec:ed:8d:a9:ba:
         50:64:4e:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----