Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2uagkHwj_-GwG5cDvHsztZD_vM.cer
File:                     a2uagkHwj_-GwG5cDvHsztZD_vM.cer (raw, json)
Hash identifier:          BqhSMw4D0QerXwz0v9NKM7gjUBFEn/kD4QyhWpHvhV0=
Subject key identifier:   6B:6B:9A:82:41:F0:8F:FF:86:C0:6E:5C:0E:F1:EC:CE:D6:43:FE:F3
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018E2D1853BFDC72052ABAF4838D7DC74627
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/cc/7e5d60-7041-49b9-820b-fc836eb8300b/1/a2uagkHwj_-GwG5cDvHsztZD_vM.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/cc/7e5d60-7041-49b9-820b-fc836eb8300b/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 11 Mar 2024 10:39:12 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    IP: 45.92.77.0/24
                          IP: 2a14:1840::/29
Validation:               Failed, certificate revoked on Tue 16 Apr 2024 08:28:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8e:2d:18:53:bf:dc:72:05:2a:ba:f4:83:8d:7d:c7:46:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Mar 11 10:39:12 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=6b6b9a8241f08fff86c06e5c0ef1ecced643fef3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:c4:d6:21:2c:c9:0f:a4:c9:a8:c9:a9:e7:0d:
                    fb:b0:60:d6:d4:35:11:b3:2f:02:09:e3:2c:ea:d4:
                    d6:9a:23:cd:61:b1:19:7b:06:d9:c2:a2:68:74:9b:
                    e7:ad:78:f6:76:75:a2:4d:8d:b6:bd:c3:e4:a5:b9:
                    df:b7:63:d1:37:86:f0:b4:25:78:4e:4a:da:47:0a:
                    1c:0b:0d:57:4d:7d:b1:b2:17:7b:47:e2:1c:36:2d:
                    d3:12:d8:8c:50:6e:06:5c:71:79:53:d5:61:75:06:
                    7d:f0:8e:47:cb:ac:82:1c:da:55:10:29:67:77:ed:
                    ea:8c:3e:b8:46:79:3e:04:e0:be:12:b5:3f:a6:11:
                    f2:dd:fe:f0:44:06:8e:b9:b6:c7:76:94:b6:83:e6:
                    43:75:bc:81:18:71:eb:91:d4:02:34:bd:07:25:4f:
                    11:e9:19:a7:bf:b3:24:69:a1:22:44:20:ac:f8:ae:
                    6f:a3:69:7b:c9:fa:76:e5:47:c9:bc:b8:f1:e4:81:
                    cd:62:0f:f6:b5:68:d9:6d:68:a1:fe:d7:4c:f2:84:
                    ed:39:ac:4e:2f:da:8b:03:e5:0f:9a:34:44:9b:0c:
                    4e:d9:68:ce:38:20:85:a2:ac:6e:09:f0:7a:eb:2f:
                    9a:1c:21:29:52:8d:e0:a2:b4:33:0a:b0:9c:f1:85:
                    60:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:6B:9A:82:41:F0:8F:FF:86:C0:6E:5C:0E:F1:EC:CE:D6:43:FE:F3
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/7e5d60-7041-49b9-820b-fc836eb8300b/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/7e5d60-7041-49b9-820b-fc836eb8300b/1/a2uagkHwj_-GwG5cDvHsztZD_vM.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.92.77.0/24
                IPv6:
                  2a14:1840::/29

    Signature Algorithm: sha256WithRSAEncryption
         8e:46:20:14:fc:46:ea:79:81:48:60:a8:07:b2:bd:81:f1:c2:
         96:1f:a2:09:d9:04:7d:b1:c1:f8:bf:5c:df:55:b9:c6:c4:5e:
         68:74:02:52:87:92:80:5e:5d:a5:4e:91:31:1b:62:e4:1d:99:
         98:8d:ab:70:13:81:5c:59:4c:72:8d:11:c9:c9:87:e4:94:c8:
         e9:fa:ad:60:b6:05:0a:45:83:36:0e:18:ed:e2:59:e1:0d:d7:
         c0:c6:6e:61:93:39:27:60:d4:cb:9c:16:88:8c:68:76:fa:5d:
         2e:fd:43:bd:38:02:e8:b2:cf:f3:07:7a:e8:2f:93:90:a7:92:
         f3:e7:9d:ac:ff:da:10:a6:29:73:bc:7a:99:92:69:2a:a7:ee:
         d1:9b:be:22:63:c7:d1:34:53:99:09:d8:31:6c:ce:8c:ef:0b:
         3d:a1:69:23:01:ac:85:0f:76:ec:d6:26:89:7e:7a:3d:55:bc:
         88:a4:fb:e0:e1:82:9a:4a:99:4d:df:4d:02:d6:dc:8d:aa:50:
         57:be:90:17:09:59:3c:91:6a:f0:bb:d0:e5:f5:07:56:8b:ca:
         5d:2b:d5:0e:d0:26:fd:1e:c3:e0:53:45:61:ff:46:91:8e:c3:
         c8:c4:ea:c4:40:0d:32:50:a4:53:16:78:f5:9f:34:9e:72:e5:
         47:6b:03:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----