Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/_WS25Rfnbt8F9J0fgS361iLUQoc.cer
File:                     _WS25Rfnbt8F9J0fgS361iLUQoc.cer (raw, json)
Hash identifier:          WHrqo1csYRaf2vqj5HY2l4RGrBEE/1G7DPSj4igBN6k=
Subject key identifier:   FD:64:B6:E5:17:E7:6E:DF:05:F4:9D:1F:81:2D:FA:D6:22:D4:42:87
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0188253864C6A712190BE084C88F615BA87F
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/dc/5fbe06-9cba-4e6f-9e2e-1d2df95b7b14/1/_WS25Rfnbt8F9J0fgS361iLUQoc.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/dc/5fbe06-9cba-4e6f-9e2e-1d2df95b7b14/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Tue 16 May 2023 15:40:32 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 176.116.23.0/24
                          IP: 2a11:ecc0::/29

Validation:               Failed, certificate revoked on Thu 26 Oct 2023 16:07:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:25:38:64:c6:a7:12:19:0b:e0:84:c8:8f:61:5b:a8:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: May 16 15:40:32 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=fd64b6e517e76edf05f49d1f812dfad622d44287
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:64:c6:5e:6c:b2:28:6b:9e:28:5d:8e:85:b2:
                    62:5f:9d:aa:d4:2d:6d:a5:00:2b:12:42:19:d4:b4:
                    a7:e7:2b:ea:df:fc:d8:2c:02:c6:28:d2:aa:a5:1b:
                    6d:7d:97:13:0e:eb:ec:f5:8a:1f:5d:c8:9f:55:bf:
                    9e:fd:7e:90:00:89:75:6c:cd:28:6b:26:fd:b5:c0:
                    ef:69:f0:87:fd:8f:43:8c:a5:0b:5e:19:66:cb:76:
                    d4:e9:7b:21:5d:72:ba:8b:3f:0e:58:55:4d:6f:b2:
                    f2:9c:89:67:f6:b4:bc:ce:e4:89:4c:6e:0b:7c:76:
                    51:06:0c:90:af:8f:9d:c3:31:8f:47:f1:6b:6e:e7:
                    47:ed:e1:c1:2a:85:6b:5f:3b:0f:98:b0:7a:81:a9:
                    80:0d:0a:4d:e8:6f:f7:62:85:36:0e:4f:74:2d:bf:
                    37:02:d8:22:75:79:ae:6a:fc:47:e7:8a:50:ea:d5:
                    46:fc:be:dc:5f:93:72:5c:10:00:31:6f:13:d4:94:
                    dc:c2:6a:f1:79:23:5c:aa:29:65:09:4f:13:a7:74:
                    5a:bb:93:09:c6:87:9c:68:eb:0f:00:73:3e:3a:41:
                    e8:3d:b3:e4:2a:98:35:a2:8d:10:ea:7b:21:f6:e5:
                    c9:b5:19:bb:e9:cc:a6:2f:f5:ff:68:c5:b2:02:f0:
                    87:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:64:B6:E5:17:E7:6E:DF:05:F4:9D:1F:81:2D:FA:D6:22:D4:42:87
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/5fbe06-9cba-4e6f-9e2e-1d2df95b7b14/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/5fbe06-9cba-4e6f-9e2e-1d2df95b7b14/1/_WS25Rfnbt8F9J0fgS361iLUQoc.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  176.116.23.0/24
                IPv6:
                  2a11:ecc0::/29

    Signature Algorithm: sha256WithRSAEncryption
         55:8f:a9:36:e9:d8:23:a3:3c:44:f5:af:d4:5c:12:25:fa:80:
         a2:6e:2b:92:05:d6:66:99:61:6e:b2:4f:31:dd:c5:52:97:a3:
         97:ca:60:f7:56:ef:35:2d:dd:5b:98:61:54:3f:fc:0f:62:e1:
         e4:9a:93:d1:e7:3a:e2:08:fd:41:80:54:91:bc:f8:89:44:d1:
         4d:6a:9f:15:83:eb:31:44:8e:77:54:ea:47:3d:9a:8b:90:ad:
         4c:ca:d3:25:b5:5d:ac:54:6e:9e:34:b6:68:26:91:9b:5f:93:
         28:24:51:d8:92:4c:83:11:ff:dc:cb:6b:13:c1:1a:17:45:b8:
         74:94:49:e5:57:81:71:06:50:dd:fc:7c:94:c1:78:46:9a:c2:
         77:91:a0:c6:3c:47:0a:99:1c:e1:52:09:5f:fa:e9:6f:84:17:
         3a:77:aa:27:9b:4e:30:04:5d:04:42:e0:66:85:19:09:7f:96:
         ab:52:dc:82:71:b7:eb:2f:05:30:74:de:61:0b:de:12:96:b2:
         89:ad:10:c0:d6:f4:ba:40:3a:dd:7f:83:60:a6:94:27:47:07:
         31:75:21:70:f1:9b:f7:00:0f:bb:04:c4:5d:85:46:59:1c:42:
         3f:39:a9:6c:0c:7b:39:1c:1c:7a:d0:ad:60:72:0e:14:d6:aa:
         25:5a:47:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----