Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/TxZ56k_-tbUDhYRWQvkNi3q8sY0.cer
File:                     TxZ56k_-tbUDhYRWQvkNi3q8sY0.cer (raw, json)
Hash identifier:          6YIm/F0lUWQdtlzC5QNjIS4zVuWhTiXTuB6hwtKfrUM=
Subject key identifier:   4F:16:79:EA:4F:FE:B5:B5:03:85:84:56:42:F9:0D:8B:7A:BC:B1:8D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856B636DAC3D9A44C9C68861A9CA463A0D
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/42/c1c475-5003-4df7-ab3a-13b3e6072431/1/TxZ56k_-tbUDhYRWQvkNi3q8sY0.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/42/c1c475-5003-4df7-ab3a-13b3e6072431/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 03:32:36 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 2001:678:480::/48

Validation:               Failed, certificate revoked on Tue 18 Apr 2023 11:47:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6b:63:6d:ac:3d:9a:44:c9:c6:88:61:a9:ca:46:3a:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 03:32:36 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=4f1679ea4ffeb5b50385845642f90d8b7abcb18d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:78:ad:d7:48:2e:4d:e1:b4:10:33:16:d4:8b:
                    5d:83:04:a6:83:e4:a7:62:49:5f:c7:44:19:75:67:
                    5a:d3:a8:19:2b:6b:cc:e4:e6:b1:38:90:c9:9c:53:
                    0f:fa:b1:0f:0b:88:36:b4:97:27:96:79:e9:ba:66:
                    95:43:da:0c:2c:9b:40:b0:1a:5a:62:92:69:82:d2:
                    b4:3c:fd:77:5f:2d:c2:1e:ea:ca:6b:72:06:0d:31:
                    4b:54:a2:6c:45:cb:a8:30:08:4f:7b:9b:45:7d:b7:
                    53:15:95:df:8f:99:67:d5:1d:25:bb:1a:0b:f3:33:
                    6f:d4:93:b9:7c:b0:2b:61:3b:d7:0b:7c:73:ef:8e:
                    c8:0d:dc:7d:6c:37:4e:26:5a:b7:b3:8e:97:e5:03:
                    32:b2:04:e0:7e:f9:f5:6f:8c:ab:68:50:d2:83:22:
                    9b:38:6b:2a:32:32:57:63:6e:1f:50:da:72:ca:a2:
                    43:2e:df:12:71:53:3c:14:29:d8:38:57:75:8e:7e:
                    9e:34:bb:74:03:5b:ed:56:91:8b:f7:a1:30:0c:45:
                    c0:68:95:fb:26:52:fa:84:c6:90:68:ad:c2:e1:41:
                    4d:69:81:15:ab:fd:94:63:f9:14:1e:e6:d8:a1:47:
                    ed:65:b3:f2:98:fa:97:6a:f7:f8:a6:b2:54:fe:16:
                    92:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:16:79:EA:4F:FE:B5:B5:03:85:84:56:42:F9:0D:8B:7A:BC:B1:8D
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/c1c475-5003-4df7-ab3a-13b3e6072431/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/c1c475-5003-4df7-ab3a-13b3e6072431/1/TxZ56k_-tbUDhYRWQvkNi3q8sY0.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:678:480::/48

    Signature Algorithm: sha256WithRSAEncryption
         a7:35:f3:38:64:7b:8e:0e:52:d6:e6:96:37:4a:4f:d2:16:fd:
         4a:49:d4:b7:28:f5:00:36:2f:ef:0c:02:56:e9:0e:d2:42:c8:
         ed:bc:3f:fe:cc:16:49:8d:57:4b:03:bc:93:b2:fe:51:fd:71:
         37:da:9b:02:bf:63:c2:4a:77:64:ee:71:27:28:3c:41:09:48:
         b2:73:bc:f0:81:49:01:87:29:fb:a5:5a:62:c1:f2:8a:62:3e:
         93:c5:14:a6:dc:88:cd:90:03:86:79:c6:c3:8c:8e:74:c7:ba:
         32:5e:6e:cd:71:77:4c:77:35:32:f7:af:fa:fc:5f:f1:36:0c:
         98:6e:6f:64:81:06:15:81:fa:08:f9:74:4c:48:e7:6d:3e:1c:
         f3:2f:a9:39:40:56:8c:2c:16:1d:fe:f0:6d:55:ac:28:57:37:
         5d:07:10:bd:b2:e2:05:42:7f:c2:18:04:5c:2e:dd:4e:d3:34:
         8c:55:bd:73:be:a7:c7:99:e5:7e:ee:a1:b3:a1:30:66:2c:1d:
         9c:68:aa:20:93:26:7e:c8:41:1c:6d:1a:db:a1:12:25:e4:52:
         28:f0:bf:5c:3b:4e:07:9a:0f:79:3b:ce:1b:6c:f8:c6:97:df:
         3a:92:71:ad:9a:f9:78:20:2f:6e:47:85:2c:f7:df:38:d8:c7:
         0e:0b:c1:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----