Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bL-IqcNs9ivdMwPvHU11ETxmpVs.cer
File:                     bL-IqcNs9ivdMwPvHU11ETxmpVs.cer (raw, json)
Hash identifier:          xqfedrzn08tTu6RkQWP5GhyHkVG/6J+9EDLv4DzttlM=
Subject key identifier:   6C:BF:88:A9:C3:6C:F6:2B:DD:33:03:EF:1D:4D:75:11:3C:66:A5:5B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018571D5A02492AE8B5114DBF90B101BD771
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/93/ecdca3-5f1c-4647-bcdc-314f384132d2/1/bL-IqcNs9ivdMwPvHU11ETxmpVs.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/93/ecdca3-5f1c-4647-bcdc-314f384132d2/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 02 Jan 2023 09:35:03 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 193.104.96.0/24

Validation:               Failed, certificate revoked on Wed 09 Aug 2023 08:35:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:71:d5:a0:24:92:ae:8b:51:14:db:f9:0b:10:1b:d7:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 09:35:03 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=6cbf88a9c36cf62bdd3303ef1d4d75113c66a55b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:3b:29:7f:36:fe:6b:67:f9:a7:f1:7d:b6:18:
                    8b:b5:17:34:fb:09:b2:8c:4a:a9:02:b8:f3:4d:83:
                    3c:79:c4:f8:0d:6e:94:23:48:e7:b6:bd:9f:51:42:
                    42:7f:c1:d6:d1:57:8b:6d:52:03:7c:cf:e9:4a:45:
                    51:cd:06:dd:5f:c5:e5:5d:d5:30:c8:4d:06:66:3f:
                    71:2d:4b:07:00:7c:c7:91:79:2b:88:74:b8:6e:70:
                    31:04:0d:f8:b2:94:f1:54:f1:45:a6:78:01:3a:e7:
                    8c:c1:e3:09:5a:bf:bd:67:ec:e0:74:b2:10:12:2c:
                    68:ca:28:52:87:20:33:5d:d2:a3:e0:24:68:a7:2d:
                    e9:d6:20:8d:e7:bb:ea:6a:46:ca:9e:1c:51:9c:4e:
                    18:d9:ef:b2:d5:5a:18:05:0f:19:75:9d:6c:c5:b8:
                    11:fa:6b:bd:77:e1:fe:3a:d1:7b:f7:6a:9d:4c:04:
                    bb:52:c8:7a:ff:a6:c0:be:0e:ab:59:40:04:7a:a7:
                    8a:7e:d7:42:d5:49:76:22:ab:85:9f:fb:d4:e4:b7:
                    02:e9:db:01:db:99:4d:78:fb:58:a5:81:9b:70:6c:
                    52:1f:1b:c5:dc:7a:f8:01:68:93:b5:48:f4:24:cc:
                    5f:b4:9f:87:7d:fe:96:0a:a2:7f:2c:8c:ca:60:f8:
                    36:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:BF:88:A9:C3:6C:F6:2B:DD:33:03:EF:1D:4D:75:11:3C:66:A5:5B
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/ecdca3-5f1c-4647-bcdc-314f384132d2/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/ecdca3-5f1c-4647-bcdc-314f384132d2/1/bL-IqcNs9ivdMwPvHU11ETxmpVs.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.104.96.0/24

    Signature Algorithm: sha256WithRSAEncryption
         72:b1:cf:d2:da:c7:d7:39:e4:e9:fb:9c:42:6f:40:12:87:65:
         84:60:10:e1:00:d0:07:d4:1a:8b:f7:a5:70:d4:8d:d0:9e:cd:
         b6:cd:d7:9d:a5:ee:d2:08:70:49:66:79:21:9e:09:f8:7a:9c:
         4d:70:e6:a3:e9:e3:55:a6:35:59:1e:71:42:d2:66:69:2b:e3:
         6b:83:b5:d2:ed:3c:1e:5b:dd:b5:71:5b:bc:68:be:5e:73:b9:
         33:79:92:e2:16:d4:74:c0:dd:9d:84:06:2b:d9:1b:30:92:5c:
         9d:88:4a:6c:b1:95:03:2c:55:45:50:c7:05:47:18:2f:65:6b:
         e2:bc:c1:fd:82:c4:0d:2a:ad:6e:69:61:f3:d4:48:be:37:44:
         33:92:86:14:a6:43:21:49:dc:52:34:c6:af:1d:0c:ed:e6:48:
         c6:68:af:c2:2d:e2:41:2e:2f:27:84:2f:6a:b6:cb:39:51:e8:
         76:f2:5d:28:b1:1d:31:b6:fa:6b:0e:94:86:bf:07:d1:be:49:
         38:0f:35:79:52:91:46:95:15:59:a1:a1:47:ed:78:71:a9:f0:
         87:ec:33:9c:d4:e2:a5:88:73:d0:e9:06:0a:88:07:24:21:51:
         25:c0:38:04:f5:d4:36:2c:a5:21:d8:9a:70:4b:d0:d3:3c:ba:
         27:bd:dc:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----