Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/boP2mIANaucZlwrfqk-4gvpRVt8.cer
File:                     boP2mIANaucZlwrfqk-4gvpRVt8.cer (raw, json)
Hash identifier:          Y9erK2eoY2WXHHYMwcBRU0e+9pBnmcBiZEyx67gcdOM=
Subject key identifier:   6E:83:F6:98:80:0D:6A:E7:19:97:0A:DF:AA:4F:B8:82:FA:51:56:DF
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018F58223368AC1E45DB509121087238EE9D
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/5d/59d1ba-d3af-446d-ad8b-6f762dfc0d0b/1/boP2mIANaucZlwrfqk-4gvpRVt8.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/5d/59d1ba-d3af-446d-ad8b-6f762dfc0d0b/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 08 May 2024 12:16:27 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    IP: 2a0e:ef40::/29

Validation:               Failed, certificate revoked on Fri 10 May 2024 13:04:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:58:22:33:68:ac:1e:45:db:50:91:21:08:72:38:ee:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: May  8 12:16:27 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=6e83f698800d6ae719970adfaa4fb882fa5156df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:91:67:b4:54:8b:94:6f:cb:a8:70:4b:5f:bc:
                    df:89:8d:e8:89:ee:52:85:7b:8c:82:22:47:55:fe:
                    8c:2e:0e:2b:7f:2c:b5:ed:d6:ee:37:a8:33:52:d4:
                    55:d1:56:97:8e:65:84:09:75:94:7a:5e:ec:5d:fd:
                    bd:06:c3:9d:c8:a8:5b:62:1b:df:95:fb:7e:99:3c:
                    4b:ec:da:74:18:bd:42:ae:86:a4:b2:40:42:c1:a6:
                    18:44:4d:61:1b:9b:97:06:17:fa:7d:43:5b:9f:92:
                    de:f9:cb:a1:9b:87:79:82:0b:24:56:3b:a8:b0:9e:
                    98:31:ea:1d:58:38:4c:d0:2d:2a:ff:13:1e:8b:1e:
                    4e:3d:c2:48:3e:8c:06:ea:9f:f9:e0:d2:98:fa:96:
                    90:cd:a7:62:ef:11:9c:ca:bb:72:99:f2:02:29:6e:
                    7b:4a:51:d9:4e:13:91:a2:ff:06:83:14:44:cb:5c:
                    ee:94:f8:1a:07:8e:37:90:cd:a8:3e:74:7f:19:48:
                    0e:8e:93:cd:d0:7d:7b:9f:5e:b9:43:53:6e:0c:b1:
                    13:44:24:28:ea:22:29:32:1e:26:69:bd:c3:0d:e5:
                    73:ab:82:60:fe:05:84:5b:43:33:45:e5:00:2a:f9:
                    de:91:f6:f0:e6:43:fb:fc:08:2b:d1:5a:87:af:4f:
                    97:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:83:F6:98:80:0D:6A:E7:19:97:0A:DF:AA:4F:B8:82:FA:51:56:DF
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/59d1ba-d3af-446d-ad8b-6f762dfc0d0b/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/59d1ba-d3af-446d-ad8b-6f762dfc0d0b/1/boP2mIANaucZlwrfqk-4gvpRVt8.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:ef40::/29

    Signature Algorithm: sha256WithRSAEncryption
         2a:6e:63:73:97:cd:07:60:74:9e:1e:df:16:ec:72:99:e3:05:
         08:7f:d2:08:99:fe:31:0d:df:48:b7:71:a1:f2:9c:e3:41:5f:
         15:1b:2d:64:a1:4d:38:b9:ac:41:1e:13:ac:d8:c6:76:59:50:
         34:a3:c0:90:16:ba:7b:aa:49:3d:2f:d9:74:4f:1d:18:a3:1b:
         30:c7:e7:15:d7:a5:59:9e:2a:bd:87:b6:ad:5d:23:9c:cd:78:
         ec:56:53:8c:67:dd:e7:85:9e:cc:3b:0f:b9:41:04:4f:05:b6:
         bf:46:20:62:44:d3:dd:ab:23:4c:f1:35:15:77:82:6a:04:9e:
         33:f9:07:de:2a:3a:f2:0e:a5:83:17:45:45:0d:ff:79:b3:95:
         1f:28:a0:33:3d:f1:37:ec:b5:a7:53:39:45:16:c7:a9:db:04:
         cd:12:2e:ba:57:1f:89:ea:ff:18:68:f1:82:b5:af:36:ad:75:
         27:68:a1:c5:4a:8b:75:f3:b2:fd:12:d7:34:d7:2a:52:fe:f0:
         5b:ce:18:63:11:45:6c:72:07:e9:30:72:17:4c:65:8c:9c:10:
         d9:2f:87:de:15:8a:6d:3d:29:7c:39:73:87:28:99:d6:6a:1c:
         1e:0c:03:e4:1f:05:61:30:6e:01:d8:f2:96:c3:84:68:70:4c:
         02:27:76:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----