Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cVuQCrn_8TiKT3RqiexBhZ70d54.cer
File:                     cVuQCrn_8TiKT3RqiexBhZ70d54.cer (raw, json)
Hash identifier:          PcEzVDl+UWaO4wXlMR5pjL83dMazBVAR59fjwkC9jmM=
Subject key identifier:   71:5B:90:0A:B9:FF:F1:38:8A:4F:74:6A:89:EC:41:85:9E:F4:77:9E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018571692CAF7C7B24C49427B900C69CFF4F
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/96/81ebdd-dc9d-4d82-8d2f-e79aeae39940/1/cVuQCrn_8TiKT3RqiexBhZ70d54.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/96/81ebdd-dc9d-4d82-8d2f-e79aeae39940/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 02 Jan 2023 07:36:36 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 86.106.22.0/24

Validation:               Failed, certificate revoked on Mon 02 Jan 2023 10:05:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:71:69:2c:af:7c:7b:24:c4:94:27:b9:00:c6:9c:ff:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 07:36:36 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=715b900ab9fff1388a4f746a89ec41859ef4779e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:7e:2d:d2:c2:21:19:eb:0a:f6:06:08:3b:85:
                    cc:9c:b8:20:3a:1d:33:5f:38:a3:83:b9:bd:96:fe:
                    16:e8:75:9a:c9:c7:6a:91:59:2e:f0:8c:df:8a:b5:
                    0d:78:82:5f:91:de:0e:50:15:b1:c4:d0:29:37:49:
                    24:c7:47:69:18:3b:af:43:b3:3a:e3:c1:f0:d2:59:
                    06:4c:b6:a5:03:b0:20:23:13:02:5c:b1:23:69:88:
                    91:83:86:b8:a0:91:99:7a:93:08:c2:72:db:64:f5:
                    da:a4:48:a6:8a:a5:5a:89:e2:d9:08:10:a4:1a:67:
                    d7:99:18:4c:3c:ab:69:b1:18:75:f5:b2:42:f4:ce:
                    f6:f9:47:a1:41:06:c1:cc:1b:ad:db:e4:c5:97:ef:
                    ca:13:6c:f8:6b:a8:10:f8:87:a1:68:8a:8b:5c:6e:
                    11:59:8e:57:fb:18:31:3f:92:ef:94:c3:21:0b:3f:
                    4f:99:36:b3:3d:38:46:e1:e1:b3:6f:cb:b6:f1:a1:
                    df:17:7c:57:22:7d:9f:c5:7e:1f:a1:56:10:e0:c6:
                    08:e2:3f:fe:27:41:8c:04:18:93:61:ba:14:8e:0c:
                    7c:57:83:b7:3b:0a:2c:2f:86:26:36:bd:76:39:75:
                    ef:e7:b8:be:09:53:d5:45:1d:77:ff:78:bf:c6:0d:
                    85:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:5B:90:0A:B9:FF:F1:38:8A:4F:74:6A:89:EC:41:85:9E:F4:77:9E
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/81ebdd-dc9d-4d82-8d2f-e79aeae39940/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/81ebdd-dc9d-4d82-8d2f-e79aeae39940/1/cVuQCrn_8TiKT3RqiexBhZ70d54.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  86.106.22.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a3:68:e8:40:f9:f7:a6:f2:02:23:c5:81:cd:c7:0d:9f:e9:fc:
         45:c8:16:9d:76:07:3a:ff:2a:60:00:06:de:aa:0f:fb:5c:fd:
         4b:c8:b0:b0:ec:99:c1:39:f7:cc:6e:1c:a0:df:43:41:11:79:
         83:a0:ca:0f:21:08:41:53:ae:6a:7a:2e:23:a5:4a:43:5f:76:
         31:a1:de:d3:35:af:5d:79:f1:15:5e:63:d7:7f:d9:df:d4:de:
         b0:16:95:87:9b:fd:eb:03:72:57:fa:c7:07:4f:26:55:6d:e7:
         53:10:8b:2b:f8:35:33:c8:d1:ab:da:8b:cb:07:d1:61:97:f1:
         b0:e4:fc:dd:8c:f6:eb:6c:9c:2b:da:2d:79:b2:05:a0:56:4d:
         1c:69:c0:88:2e:39:49:55:eb:5b:32:e2:2a:89:d7:7e:06:bb:
         8d:16:e7:6d:23:7d:c8:5c:1c:e2:47:64:75:33:f4:7c:cf:cb:
         c3:1a:bf:79:65:53:d8:c0:41:90:c1:46:1a:47:e1:69:c3:60:
         bd:57:6a:fb:d9:d8:8e:04:fe:63:0c:6e:15:be:d6:f8:19:b7:
         d6:81:76:11:c3:74:ef:25:ac:5b:ef:72:83:90:2d:b9:82:66:
         cb:87:c1:fc:6d:2a:c1:a7:d5:87:9e:02:1f:1c:7d:21:77:87:
         e1:c4:8b:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----