Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dVOX5PrFBWIqukhouQkcTj__9v0.cer
File:                     dVOX5PrFBWIqukhouQkcTj__9v0.cer (raw, json)
Hash identifier:          kCkH8zLfJhxP7V0kfOiPFh//WE1CGYRVwzwFOuGrnug=
Subject key identifier:   75:53:97:E4:FA:C5:05:62:2A:BA:48:68:B9:09:1C:4E:3F:FF:F6:FD
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018CC9BC4975C8D50EB0ECDF364C3332E279
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/47/f8aa40-23e1-45f6-84f3-08b4205067b3/1/dVOX5PrFBWIqukhouQkcTj__9v0.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/47/f8aa40-23e1-45f6-84f3-08b4205067b3/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Tue 02 Jan 2024 10:33:29 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    AS: 206479
                          IP: 2001:67c:16c8::/48

Validation:               Failed, certificate revoked on Thu 31 Oct 2024 09:27:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c9:bc:49:75:c8:d5:0e:b0:ec:df:36:4c:33:32:e2:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 10:33:29 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=755397e4fac505622aba4868b9091c4e3ffff6fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:ed:f6:87:72:29:b6:08:c9:fb:63:5b:83:49:
                    94:79:eb:5c:b9:5d:f3:78:d2:96:64:88:58:80:6a:
                    ed:19:71:7a:66:96:60:92:83:42:93:02:f4:db:dc:
                    cb:82:e1:8b:1a:f6:a7:f3:55:3c:d4:f2:cc:8f:09:
                    44:75:91:ec:da:ba:dd:c5:5e:87:f8:f4:1a:3d:9d:
                    b5:73:11:d5:41:24:44:38:79:93:02:fb:fc:c1:bc:
                    aa:81:d8:cf:11:1f:1c:81:50:58:c6:41:a1:bc:16:
                    6f:d4:ad:a3:e0:49:c4:e5:03:84:23:9b:ed:15:4a:
                    ce:9d:13:c6:7e:86:27:6a:13:da:3e:b4:31:28:27:
                    22:cb:7f:92:8d:37:33:3a:74:5c:3f:62:11:86:79:
                    2b:14:9f:b4:cd:e9:44:8a:74:d0:27:ea:2f:82:d1:
                    17:cc:a0:3f:d8:96:cf:d2:90:b7:9f:d8:07:18:15:
                    6a:cd:21:c5:ea:73:98:64:d5:19:28:25:34:67:bc:
                    de:9e:85:2a:1d:e9:c9:59:4d:dc:83:3e:5e:42:43:
                    df:d5:8c:ce:10:a4:fe:3a:b4:f0:09:91:1d:7d:c4:
                    89:2a:28:15:4d:4e:ba:93:7b:dd:0a:6b:7b:f8:41:
                    37:29:c7:18:52:4f:ba:b0:20:f1:c3:74:dc:92:4f:
                    15:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:53:97:E4:FA:C5:05:62:2A:BA:48:68:B9:09:1C:4E:3F:FF:F6:FD
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/f8aa40-23e1-45f6-84f3-08b4205067b3/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/f8aa40-23e1-45f6-84f3-08b4205067b3/1/dVOX5PrFBWIqukhouQkcTj__9v0.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:16c8::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  206479

    Signature Algorithm: sha256WithRSAEncryption
         4d:47:5b:f6:30:44:aa:4b:d0:3a:d6:0d:f8:cb:a2:6c:24:1c:
         c1:00:52:71:84:de:f1:24:1b:3a:ed:92:97:1a:8a:80:39:15:
         43:e0:55:02:24:b2:43:2c:50:28:d7:e5:1f:63:f0:cd:b2:d8:
         39:a8:02:2e:a9:fe:f4:de:97:7c:4d:f6:e6:64:9c:4a:4f:6e:
         85:9c:aa:60:05:cd:38:6f:50:00:f5:5b:4f:ca:a7:3a:99:db:
         e8:02:bb:74:37:bd:f3:72:a5:01:1e:53:f3:a3:49:21:47:dc:
         5c:c1:d7:55:25:1a:4e:d3:c7:9c:d1:ae:0e:b8:b6:be:a4:0c:
         7b:3b:ef:ed:21:47:e3:32:7f:eb:85:be:af:9f:81:1e:63:67:
         68:0c:75:56:97:f7:c1:a4:7a:18:49:86:c2:7f:68:21:e3:44:
         b6:94:61:7d:58:a1:8c:5f:53:5d:4d:8e:8e:2a:5c:70:a0:21:
         14:c3:e9:59:d4:a7:81:71:86:40:a1:69:53:a8:06:1c:45:91:
         4e:ba:9b:87:fb:69:42:60:43:c1:e6:f3:a9:c5:c2:bc:ce:a9:
         e7:52:77:84:87:61:3d:db:76:c8:bc:0f:b1:43:93:af:20:a7:
         4f:ee:83:90:cf:d0:5e:80:1b:b3:ab:e7:51:c6:36:05:e2:21:
         74:dc:65:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----