Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/_c1FFqJ7uDhIEQyzIIK8_KnzaJA.cer
File:                     _c1FFqJ7uDhIEQyzIIK8_KnzaJA.cer (raw, json)
Hash identifier:          mrXVsOrcKFgc6cMUh9V2UsudtgBZD8p+5Xgotyng2qw=
Subject key identifier:   FD:CD:45:16:A2:7B:B8:38:48:11:0C:B3:20:82:BC:FC:A9:F3:68:90
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018692F8F690C28EB5081B171FE800E29588
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/c0/4b0995-6274-4259-bb4e-310d6c715c24/1/_c1FFqJ7uDhIEQyzIIK8_KnzaJA.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/c0/4b0995-6274-4259-bb4e-310d6c715c24/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 27 Feb 2023 13:03:55 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 109.205.59.0/24

Validation:               Failed, certificate revoked on Wed 04 Oct 2023 07:16:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:92:f8:f6:90:c2:8e:b5:08:1b:17:1f:e8:00:e2:95:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Feb 27 13:03:55 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=fdcd4516a27bb83848110cb32082bcfca9f36890
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:f3:97:df:77:b7:2d:02:a9:6e:ad:fe:df:bb:
                    f6:51:ba:ae:c2:ad:56:26:6a:1a:53:8b:dc:b7:15:
                    94:2d:09:2d:e5:43:e9:05:d2:f6:5e:ab:2a:64:c5:
                    9b:33:25:1b:ad:dc:92:5e:f0:e2:45:5a:4d:72:b5:
                    92:d7:87:60:18:d6:7c:be:16:4e:74:77:7c:55:94:
                    3f:6d:c3:a4:54:30:0d:60:46:e2:f7:1f:49:52:93:
                    b6:22:6b:da:72:0f:f8:aa:31:cd:76:0c:98:4c:a2:
                    6a:b1:2c:0f:2c:c8:f9:4b:a9:17:2e:ca:88:37:ce:
                    7e:ae:fb:b1:47:42:9f:ae:dd:0b:5f:ea:e6:21:38:
                    e7:90:37:8e:d4:70:50:7e:b0:27:01:66:2f:ce:60:
                    fa:53:64:69:ee:99:95:9a:6b:64:1d:14:89:c9:df:
                    21:8e:ac:8b:ab:90:9e:9e:e7:11:27:a7:29:ff:f4:
                    13:4a:cb:99:f4:06:33:7c:89:04:de:33:0c:3a:cd:
                    71:dc:d2:24:ca:ce:28:b6:99:df:da:37:75:84:b1:
                    d9:09:97:ac:79:14:d2:b5:41:d2:38:24:35:aa:c0:
                    6c:49:d2:3f:8e:14:11:e2:56:d7:0d:1f:42:54:40:
                    d8:75:5e:0d:b6:50:3a:35:4b:59:38:b3:ed:4d:47:
                    7f:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:CD:45:16:A2:7B:B8:38:48:11:0C:B3:20:82:BC:FC:A9:F3:68:90
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/4b0995-6274-4259-bb4e-310d6c715c24/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/4b0995-6274-4259-bb4e-310d6c715c24/1/_c1FFqJ7uDhIEQyzIIK8_KnzaJA.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  109.205.59.0/24

    Signature Algorithm: sha256WithRSAEncryption
         30:13:38:10:ca:fa:f4:54:1f:6c:b5:45:76:63:55:42:89:d3:
         13:b6:63:ae:93:0d:02:97:c3:a4:ea:ab:57:b6:05:b2:70:23:
         e5:c5:fa:d0:0a:47:5a:0d:81:a1:c8:96:a3:3d:94:8d:64:86:
         16:e9:11:5c:ed:18:ae:00:88:f9:88:02:5d:53:4a:a4:50:c8:
         32:13:07:33:45:3f:5c:68:ba:3a:33:5a:81:41:20:6f:b9:c8:
         e5:cf:1d:a6:04:36:1b:5e:d5:30:5e:36:49:8e:dc:8c:17:17:
         f5:94:aa:ea:e2:63:ce:56:c4:a9:0f:46:ca:32:14:5b:18:c4:
         9c:f6:a6:54:c9:97:53:85:31:56:1b:ee:90:1e:8a:7c:4d:05:
         3d:0e:05:2c:16:46:0a:d3:a6:fd:af:0d:38:9d:28:3e:18:f5:
         85:0f:f5:86:77:a8:50:00:95:65:7b:cd:d6:e5:82:44:21:33:
         95:76:f5:ad:e7:4e:e7:6d:b8:00:5e:05:76:4c:72:02:59:a4:
         e2:a1:24:be:38:d1:e8:0c:b1:14:36:df:31:a7:51:c2:67:de:
         1e:57:0d:94:69:c8:8b:c6:b8:2b:bb:15:c2:bc:c4:ad:35:4c:
         bf:d0:dc:75:4f:b3:4a:01:e1:df:b1:e2:b7:05:f4:5d:99:58:
         c2:e1:d1:da
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAYaS+PaQwo61CBsXH+gA4pWIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjMwMjI3MTMwMzU1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZGNkNDUxNmEyN2JiODM4NDgxMTBjYjMyMDgyYmNmY2E5ZjM2ODkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlPOX33e3LQKpbq3+37v2Ubquwq1W
JmoaU4vctxWULQkt5UPpBdL2XqsqZMWbMyUbrdySXvDiRVpNcrWS14dgGNZ8vhZO
dHd8VZQ/bcOkVDANYEbi9x9JUpO2Imvacg/4qjHNdgyYTKJqsSwPLMj5S6kXLsqI
N85+rvuxR0Kfrt0LX+rmITjnkDeO1HBQfrAnAWYvzmD6U2Rp7pmVmmtkHRSJyd8h
jqyLq5CenucRJ6cp//QTSsuZ9AYzfIkE3jMMOs1x3NIkys4otpnf2jd1hLHZCZes
eRTStUHSOCQ1qsBsSdI/jhQR4lbXDR9CVEDYdV4NtlA6NUtZOLPtTUd//QIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFP3NRRaie7g4SBEMsyCCvPyp82iQMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2MwLzRiMDk5
NS02Mjc0LTQyNTktYmI0ZS0zMTBkNmM3MTVjMjQvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzAvNGIwOTk1
LTYyNzQtNDI1OS1iYjRlLTMxMGQ2YzcxNWMyNC8xL19jMUZGcUo3dURoSUVReXpJ
SUs4X0tuemFKQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQAbc07MA0GCSqGSIb3DQEBCwUAA4IBAQAwEzgQ
yvr0VB9stUV2Y1VCidMTtmOukw0Cl8Ok6qtXtgWycCPlxfrQCkdaDYGhyJajPZSN
ZIYW6RFc7RiuAIj5iAJdU0qkUMgyEwczRT9caLo6M1qBQSBvucjlzx2mBDYbXtUw
XjZJjtyMFxf1lKrq4mPOVsSpD0bKMhRbGMSc9qZUyZdThTFWG+6QHop8TQU9DgUs
FkYK06b9rw04nSg+GPWFD/WGd6hQAJVle83W5YJEITOVdvWt507nbbgAXgV2THIC
WaTioSS+ONHoDLEUNt8xp1HCZ94eVw2UaciLxrgruxXCvMStNUy/0Nx1T7NKAeHf
seK3BfRdmVjC4dHa
-----END CERTIFICATE-----