Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/SPjN0W88Ppoig1oYYjE2_U8ODdc.cer
File:                     SPjN0W88Ppoig1oYYjE2_U8ODdc.cer (raw, json)
Hash identifier:          MeQR+uLPNiaJiWCLVC0RZ4/y+k11YNLjQBG9XgW5jXE=
Subject key identifier:   48:F8:CD:D1:6F:3C:3E:9A:22:83:5A:18:62:31:36:FD:4F:0E:0D:D7
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856F4116574A8C0AC49A9740E263428896
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/16/356600-fe51-444c-b4d6-cfe0ed70e436/1/SPjN0W88Ppoig1oYYjE2_U8ODdc.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/16/356600-fe51-444c-b4d6-cfe0ed70e436/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 21:33:34 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 130.193.75.0/24

Validation:               Failed, certificate revoked on Wed 22 Mar 2023 18:24:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:41:16:57:4a:8c:0a:c4:9a:97:40:e2:63:42:88:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 21:33:34 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=48f8cdd16f3c3e9a22835a18623136fd4f0e0dd7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:56:9c:17:81:df:d5:2c:65:5e:19:6d:80:cb:
                    5b:24:84:c1:c0:1b:51:b6:54:db:70:78:b7:ad:e7:
                    50:ad:40:56:b6:22:de:1d:04:a9:f2:b1:c2:fa:bd:
                    fd:34:36:f6:fd:74:83:0a:65:13:1a:d2:11:18:1f:
                    dd:c4:f3:2e:1e:d5:1d:df:6e:ee:27:37:6b:26:ea:
                    84:72:9c:5b:1d:e5:e0:7b:15:07:16:52:86:a4:70:
                    a5:5f:d4:e9:be:f9:0d:b2:8c:cb:7d:e6:79:19:65:
                    12:cd:e3:32:85:bd:a2:df:5f:e2:0c:39:fe:4f:91:
                    3a:4c:27:9b:03:8b:9e:12:5d:82:2a:90:b2:8c:34:
                    4d:1e:d3:e4:ef:35:55:39:7b:b1:83:a1:23:b0:c5:
                    87:ec:0e:56:34:f8:7a:b4:5a:e9:45:2e:85:e3:19:
                    61:f4:4c:60:c1:f9:f4:e5:a6:a3:78:67:68:de:29:
                    45:10:44:b0:ce:3f:c5:61:e1:df:d1:6a:8c:05:79:
                    67:60:7e:a2:12:69:02:ab:30:9c:a7:f6:2d:ae:81:
                    15:72:07:87:c4:98:fd:b1:b3:50:5e:7a:2c:6d:87:
                    6f:18:23:8c:27:5d:b0:94:24:b8:2d:30:e7:75:43:
                    4e:39:9e:8f:b0:27:f0:65:7f:87:d0:18:7f:7e:92:
                    ab:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:F8:CD:D1:6F:3C:3E:9A:22:83:5A:18:62:31:36:FD:4F:0E:0D:D7
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/356600-fe51-444c-b4d6-cfe0ed70e436/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/356600-fe51-444c-b4d6-cfe0ed70e436/1/SPjN0W88Ppoig1oYYjE2_U8ODdc.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.193.75.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2f:93:c7:a8:bf:18:e9:40:db:db:53:0c:f4:0a:e1:de:3d:88:
         b1:33:83:1b:97:78:f0:ea:48:3e:72:d1:9a:a7:b6:82:fe:19:
         69:c8:c2:28:1a:dc:e6:96:d8:ab:ca:31:e1:e2:f7:93:00:29:
         74:da:92:57:32:72:a4:06:f0:1f:b2:3e:9a:a2:c6:64:01:f3:
         02:cf:ec:17:99:b4:20:b1:f3:ea:d1:81:49:cd:82:c1:5b:9b:
         5f:ca:6f:da:3a:5d:d3:0d:ae:11:a2:e8:78:8b:93:1b:e4:e7:
         f6:6a:49:44:79:69:86:02:50:54:bf:ed:a9:98:b3:6e:f0:d7:
         d3:52:14:ac:55:fa:b0:30:15:5f:c1:15:03:31:83:28:84:ba:
         7a:88:79:ec:ef:7a:55:f7:63:48:2f:30:9b:bc:2d:f8:81:b1:
         3d:6e:b1:fa:03:c2:fb:87:65:2d:22:6e:5f:2b:81:b4:88:83:
         05:f5:fa:7b:7a:d5:e3:f8:35:e6:b9:c5:a3:71:18:9d:64:e6:
         7a:9a:80:8b:8e:8f:49:b8:6d:85:a3:f6:e8:97:ab:b8:af:e6:
         8d:a5:1a:52:1c:33:a1:b8:e6:eb:4f:d5:eb:a8:a3:a1:52:1d:
         ae:14:62:6a:0b:be:68:b7:11:1b:33:fb:5b:d5:86:9e:f4:5c:
         de:de:1a:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----