Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/VWmKXf0rusqgwrsY1a_tGjuY3pU.cer
File:                     VWmKXf0rusqgwrsY1a_tGjuY3pU.cer (raw, json)
Hash identifier:          7piRgS72/+inoay/Gi10viEJQ/4RFWPC6raqRTzvwJw=
Subject key identifier:   55:69:8A:5D:FD:2B:BA:CA:A0:C2:BB:18:D5:AF:ED:1A:3B:98:DE:95
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0186A7DFD96FACFBA9A3F0F52C111B723336
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/a9/8035f0-520d-4612-aab7-7dd7e13d165f/1/VWmKXf0rusqgwrsY1a_tGjuY3pU.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/a9/8035f0-520d-4612-aab7-7dd7e13d165f/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 03 Mar 2023 14:28:30 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 2a0e:7480::/29

Validation:               Failed, certificate revoked on Fri 22 Dec 2023 14:02:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:a7:df:d9:6f:ac:fb:a9:a3:f0:f5:2c:11:1b:72:33:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Mar  3 14:28:30 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=55698a5dfd2bbacaa0c2bb18d5afed1a3b98de95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:bc:75:fc:f0:b6:d0:1a:b1:3d:92:40:d4:ed:
                    b5:d9:89:ca:3d:e7:29:c8:88:72:76:34:39:38:d5:
                    77:04:2f:0a:dd:7b:46:35:ae:4e:cb:55:4b:dc:0a:
                    c6:0e:a3:b3:b8:73:8f:27:cd:0c:2b:72:32:94:d6:
                    43:a6:96:27:b5:6b:6b:d8:7a:08:bf:60:c1:4e:f9:
                    11:bc:4f:0c:fd:5a:97:c8:fe:97:aa:3d:4a:18:92:
                    26:d3:f1:b2:d1:db:97:7f:25:d3:89:35:f1:51:37:
                    10:ce:43:eb:f1:cc:c4:45:3c:e1:11:7a:a2:43:f3:
                    25:a3:9d:36:a3:78:d0:a9:03:e7:f5:74:54:ca:90:
                    52:8b:6c:fc:27:a4:fb:3e:f3:ae:29:82:4b:99:ab:
                    9c:a5:35:cf:46:bb:d4:98:b8:d6:01:01:88:e6:b8:
                    1a:1e:88:93:f8:ae:40:41:34:01:d1:a6:28:4f:42:
                    1a:45:b4:b2:5f:0c:00:36:3a:5d:c4:01:53:12:c6:
                    55:6d:f6:3b:d1:32:de:25:d1:30:2d:d2:d6:ae:01:
                    0e:48:ff:9d:1d:d1:b8:77:3e:23:38:de:a7:f6:70:
                    5e:bc:e4:88:5a:b3:88:67:8d:cc:eb:bc:b4:cd:1a:
                    d6:99:9f:cb:c5:a8:78:27:cd:e8:32:e8:48:3f:33:
                    3e:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:69:8A:5D:FD:2B:BA:CA:A0:C2:BB:18:D5:AF:ED:1A:3B:98:DE:95
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/8035f0-520d-4612-aab7-7dd7e13d165f/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/8035f0-520d-4612-aab7-7dd7e13d165f/1/VWmKXf0rusqgwrsY1a_tGjuY3pU.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:7480::/29

    Signature Algorithm: sha256WithRSAEncryption
         27:7c:3f:68:81:d3:1d:24:55:80:a6:89:34:85:60:37:b8:2f:
         b7:9c:79:0f:c0:95:4a:b8:3d:53:5f:59:b3:97:62:4a:99:ee:
         11:4e:04:98:0f:44:fd:86:e4:fd:2c:c0:4b:1e:1a:08:dc:b3:
         9a:18:b0:43:24:b8:e3:9c:7e:57:43:8c:f6:a0:15:9d:f4:49:
         ce:03:54:5c:ed:95:03:b5:b1:be:b5:0a:5b:73:d2:f8:4e:52:
         7c:b7:58:a1:42:7c:83:f8:72:06:42:7e:f6:34:25:32:9b:b5:
         ba:0e:85:cd:e9:1a:e5:8e:c0:d2:a6:e1:02:57:f6:70:35:e0:
         e7:43:6b:28:70:01:6a:7a:93:7c:fb:77:70:5c:d7:27:60:d0:
         9a:53:52:54:57:73:18:93:c4:0b:75:3e:cd:0a:fa:0e:04:61:
         5a:d5:dd:1c:bb:fa:61:c9:28:93:a0:86:c6:d6:a0:98:0f:b7:
         df:2e:fe:dd:f4:1b:00:f5:2a:a1:8e:d9:7f:aa:97:ab:d1:65:
         71:c8:7e:fe:c9:1e:c8:22:55:78:6d:f5:1b:81:ad:51:68:f6:
         21:53:77:20:8a:5f:0d:d2:ff:e3:71:b1:66:4c:f7:1e:7f:ba:
         6e:7e:6f:b9:f6:f0:97:21:70:fa:5a:08:45:8d:69:4a:b5:a6:
         89:a9:5f:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----