Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cjz5cJRRmnWjI4GBB2BXAzsR6IQ.cer
File:                     cjz5cJRRmnWjI4GBB2BXAzsR6IQ.cer (raw, json)
Hash identifier:          gersw5BDpbC8TnPEezQJKzvyx1/t/uWq3y6pX7ZUTLI=
Subject key identifier:   72:3C:F9:70:94:51:9A:75:A3:23:81:81:07:60:57:03:3B:11:E8:84
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018692EB409E774BA8B5FFA5A206CB6DC0C4
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/a9/279bbc-5840-4a20-bf7d-1c9a32523244/1/cjz5cJRRmnWjI4GBB2BXAzsR6IQ.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/a9/279bbc-5840-4a20-bf7d-1c9a32523244/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 27 Feb 2023 12:48:56 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 185.197.151.0/24

Validation:               Failed, certificate revoked on Wed 16 Aug 2023 08:28:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:92:eb:40:9e:77:4b:a8:b5:ff:a5:a2:06:cb:6d:c0:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Feb 27 12:48:56 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=723cf97094519a75a3238181076057033b11e884
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:07:dd:e1:84:49:ee:23:7e:7b:29:fa:7c:6b:
                    b4:fe:4a:a4:78:34:79:05:de:55:ae:ab:28:24:22:
                    2a:f7:5c:3d:88:e0:b7:1d:ee:0a:af:be:07:9d:b2:
                    6b:96:8c:6c:29:b8:d6:d4:36:99:c2:e0:6b:4a:7b:
                    6d:13:58:15:d5:11:4e:fe:2e:a3:1b:2b:a4:5f:49:
                    6c:91:28:b8:79:b1:ae:fb:e7:cf:4d:87:78:31:36:
                    04:46:ed:2f:dd:63:68:21:cc:ce:de:58:23:7f:42:
                    62:fc:1d:09:f0:6e:81:e8:10:39:0c:3c:cc:38:f8:
                    57:37:00:f2:53:8a:fb:4a:33:21:dd:4d:cb:51:15:
                    e0:72:2a:54:b2:56:4a:de:0e:9c:1e:2d:94:00:67:
                    3c:48:c0:f8:8d:9a:e7:7a:4a:d6:01:bc:d3:95:fd:
                    e2:61:82:03:36:6f:5f:d0:bd:1b:04:64:4d:b5:64:
                    0a:bd:50:86:a9:55:80:26:be:13:05:04:ed:20:df:
                    76:27:ba:d2:ba:ce:cd:be:a5:0c:ac:ba:d1:a0:ab:
                    5e:93:34:da:10:3a:7d:8c:59:6f:5b:b2:8a:55:fc:
                    93:bc:09:e0:3e:05:69:8f:02:a9:31:87:8e:b5:0d:
                    c2:f5:8c:0f:35:b2:43:69:2e:18:92:62:7a:2d:a3:
                    61:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:3C:F9:70:94:51:9A:75:A3:23:81:81:07:60:57:03:3B:11:E8:84
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/279bbc-5840-4a20-bf7d-1c9a32523244/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/279bbc-5840-4a20-bf7d-1c9a32523244/1/cjz5cJRRmnWjI4GBB2BXAzsR6IQ.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.197.151.0/24

    Signature Algorithm: sha256WithRSAEncryption
         98:e6:bd:2f:19:68:a2:fc:17:72:4d:65:4e:a5:0b:a5:1d:22:
         f2:78:61:7e:5a:a6:40:f5:1c:8c:3a:60:ef:3d:10:5a:73:b2:
         02:73:14:0f:ba:92:c7:47:2d:56:f4:d8:37:51:58:00:15:d7:
         3b:41:35:96:cc:70:72:15:6c:bb:87:5a:c9:de:91:db:8a:80:
         89:62:0c:52:0e:d7:1a:86:b8:49:0d:ec:43:d4:48:55:b3:11:
         cd:fc:23:34:8a:c4:ff:6f:a9:4d:43:3f:b1:15:a7:a4:1a:2c:
         e9:86:cf:f0:a3:70:4f:0d:8b:4a:88:b7:ea:8b:ae:cd:45:6c:
         6f:00:43:56:78:e8:a7:c3:90:5d:7f:ad:ae:44:78:ce:35:f0:
         1c:0f:2f:1b:49:93:8b:07:7a:4f:e7:b3:f9:00:03:a8:83:59:
         ed:e9:45:5b:82:d8:f5:0f:39:dd:a3:13:b2:a6:a5:f9:3e:b9:
         ad:a6:09:82:77:8c:14:d6:e3:42:81:24:c7:5f:8b:76:e8:72:
         1b:e6:5d:cd:d7:cb:f0:16:b6:d8:d1:c8:41:72:63:06:d9:9c:
         e2:0b:44:c0:e5:e9:06:21:22:c7:a4:92:c1:d3:8e:2e:e5:9a:
         98:d5:23:51:41:b6:f5:a8:b0:11:cd:02:5b:f4:38:8b:32:f2:
         c5:dd:b6:0e
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAYaS60Ced0uotf+logbLbcDEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjMwMjI3MTI0ODU2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MjNjZjk3MDk0NTE5YTc1YTMyMzgxODEwNzYwNTcwMzNiMTFlODg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5gfd4YRJ7iN+eyn6fGu0/kqkeDR5
Bd5VrqsoJCIq91w9iOC3He4Kr74HnbJrloxsKbjW1DaZwuBrSnttE1gV1RFO/i6j
GyukX0lskSi4ebGu++fPTYd4MTYERu0v3WNoIczO3lgjf0Ji/B0J8G6B6BA5DDzM
OPhXNwDyU4r7SjMh3U3LURXgcipUslZK3g6cHi2UAGc8SMD4jZrnekrWAbzTlf3i
YYIDNm9f0L0bBGRNtWQKvVCGqVWAJr4TBQTtIN92J7rSus7NvqUMrLrRoKtekzTa
EDp9jFlvW7KKVfyTvAngPgVpjwKpMYeOtQ3C9YwPNbJDaS4YkmJ6LaNhIQIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFHI8+XCUUZp1oyOBgQdgVwM7EeiEMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2E5LzI3OWJi
Yy01ODQwLTRhMjAtYmY3ZC0xYzlhMzI1MjMyNDQvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTkvMjc5YmJj
LTU4NDAtNGEyMC1iZjdkLTFjOWEzMjUyMzI0NC8xL2NqejVjSlJSbW5Xakk0R0JC
MkJYQXpzUjZJUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQAucWXMA0GCSqGSIb3DQEBCwUAA4IBAQCY5r0v
GWii/BdyTWVOpQulHSLyeGF+WqZA9RyMOmDvPRBac7ICcxQPupLHRy1W9Ng3UVgA
Fdc7QTWWzHByFWy7h1rJ3pHbioCJYgxSDtcahrhJDexD1EhVsxHN/CM0isT/b6lN
Qz+xFaekGizphs/wo3BPDYtKiLfqi67NRWxvAENWeOinw5Bdf62uRHjONfAcDy8b
SZOLB3pP57P5AAOog1nt6UVbgtj1DzndoxOypqX5PrmtpgmCd4wU1uNCgSTHX4t2
6HIb5l3N18vwFrbY0chBcmMG2ZziC0TA5ekGISLHpJLB044u5ZqY1SNRQbb1qLAR
zQJb9DiLMvLF3bYO
-----END CERTIFICATE-----