Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ZXiatNkDssc_ebL2bthqQ6lkA0A.cer
File:                     ZXiatNkDssc_ebL2bthqQ6lkA0A.cer (raw, json)
Hash identifier:          eelNjpXe+6+t3hkQ5idyv1jJCRTI8iDG/3eJ4xeQ7sA=
Subject key identifier:   65:78:9A:B4:D9:03:B2:C7:3F:79:B2:F6:6E:D8:6A:43:A9:64:03:40
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856AF4E0A3C99371293C440C6D1F30ED03
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/62/efa68d-e1fe-49b3-b887-61cce742d310/1/ZXiatNkDssc_ebL2bthqQ6lkA0A.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/62/efa68d-e1fe-49b3-b887-61cce742d310/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 01:31:51 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 5.44.251.0/24

Validation:               Failed, certificate revoked on Mon 31 Jul 2023 08:23:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6a:f4:e0:a3:c9:93:71:29:3c:44:0c:6d:1f:30:ed:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 01:31:51 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=65789ab4d903b2c73f79b2f66ed86a43a9640340
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:e0:ea:ef:7b:90:c1:5e:82:d3:42:39:b2:74:
                    a1:dd:23:20:d7:98:42:35:6a:13:c7:d6:ee:a0:0c:
                    95:24:aa:75:d3:83:6f:7a:d1:6c:df:3e:33:23:fa:
                    d9:54:80:78:0a:a5:48:56:81:5e:32:b2:0b:17:e2:
                    0b:fa:67:a5:a9:37:4c:51:f7:01:67:fc:55:d3:70:
                    35:65:33:d4:a1:a4:35:0c:c5:0c:39:cf:ad:e5:e2:
                    58:e4:9a:cf:31:01:26:24:17:dc:e9:f0:78:f1:62:
                    2b:25:b6:8c:9b:99:1e:8d:1d:c9:b3:0a:46:78:fe:
                    8e:1e:e5:a3:8e:2d:f1:e5:e4:1e:fd:de:e9:c4:30:
                    c8:3b:2d:0c:cc:3f:c7:72:9c:e9:d5:79:b0:76:d8:
                    87:7a:4c:2c:26:a6:2c:38:7c:25:c5:6b:de:7d:04:
                    ba:58:bb:75:fc:aa:86:30:4d:db:1c:c9:c7:81:50:
                    f1:68:26:68:3a:19:63:06:d2:e5:f6:98:01:d5:ad:
                    76:4e:49:f7:55:f1:37:5b:8a:e3:00:43:73:f5:0f:
                    2f:c9:8f:51:a0:a9:1f:85:ad:e3:c2:79:22:3e:93:
                    35:92:6f:27:0a:eb:a4:94:01:b8:61:7a:ef:d0:2a:
                    e5:49:69:d5:fd:fa:ae:dd:c7:2f:26:6f:b4:97:f9:
                    ec:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:78:9A:B4:D9:03:B2:C7:3F:79:B2:F6:6E:D8:6A:43:A9:64:03:40
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/efa68d-e1fe-49b3-b887-61cce742d310/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/efa68d-e1fe-49b3-b887-61cce742d310/1/ZXiatNkDssc_ebL2bthqQ6lkA0A.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.44.251.0/24

    Signature Algorithm: sha256WithRSAEncryption
         72:17:e9:67:70:fb:69:f8:98:b8:26:cb:cc:36:e2:19:22:80:
         27:9b:1d:c3:77:aa:ac:2b:08:c5:fa:e7:bf:b6:fd:75:34:ff:
         c8:4c:04:7b:62:be:45:22:b1:4c:07:31:85:be:ac:83:bc:5b:
         67:82:4f:51:36:31:9a:56:fd:b4:01:b7:71:c9:d4:f1:41:94:
         a0:ef:67:aa:1a:d2:ef:c6:bc:99:da:54:81:4a:92:e2:89:1f:
         6a:29:39:29:32:78:eb:a2:5a:8e:a8:58:fc:d3:a7:21:a6:67:
         18:d9:12:03:c0:c1:13:72:03:75:bb:dc:aa:2a:d7:87:17:e1:
         d2:56:db:42:36:ef:25:0a:03:61:db:8a:b9:f5:2c:b0:26:dd:
         51:a6:e6:85:b3:64:af:c7:d0:2d:14:6d:2a:2c:b5:6d:99:86:
         90:49:39:72:4b:75:c1:5b:f9:79:8b:10:6d:d1:58:26:5e:4b:
         db:3d:2a:6d:f9:6d:29:12:0b:e8:de:3a:88:27:ed:7f:15:24:
         73:90:37:bc:02:97:b0:9c:4d:d2:f9:b1:db:84:fa:a2:2a:63:
         b7:94:f9:bc:6d:1a:9c:d0:d1:78:a4:4d:d0:f7:a0:94:bd:51:
         4f:ff:39:e5:48:f5:7a:c3:e1:05:56:f8:4a:35:19:39:82:6c:
         9a:d1:46:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----