Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e-x6uCuqBzuxLmLLTQTD4GzpfPo.cer
File:                     e-x6uCuqBzuxLmLLTQTD4GzpfPo.cer (raw, json)
Hash identifier:          5rVzWUldZGjW1KnEqAmvMAQYTfqrZJRNjTt7aw8JCBs=
Subject key identifier:   7B:EC:7A:B8:2B:AA:07:3B:B1:2E:62:CB:4D:04:C3:E0:6C:E9:7C:FA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01867E9DB09A8C19E4E4C4DE596DF97A483B
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/6c/011ee3-8bb5-4646-a5a3-73ac1975f698/1/e-x6uCuqBzuxLmLLTQTD4GzpfPo.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/6c/011ee3-8bb5-4646-a5a3-73ac1975f698/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 23 Feb 2023 14:11:49 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 91.240.228.0/24

Validation:               Failed, certificate revoked on Thu 06 Jul 2023 11:19:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:7e:9d:b0:9a:8c:19:e4:e4:c4:de:59:6d:f9:7a:48:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Feb 23 14:11:49 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=7bec7ab82baa073bb12e62cb4d04c3e06ce97cfa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:3c:f7:8d:2b:47:95:a4:b7:22:26:17:b4:f4:
                    a3:f0:16:01:04:45:46:70:c1:5b:8d:90:6c:52:ce:
                    f6:da:95:36:65:ed:9b:fb:47:99:08:3e:e4:cd:08:
                    c8:c8:09:f9:a2:5c:0e:b0:32:d0:e1:28:b8:39:e0:
                    15:47:5a:98:4f:7e:ca:00:2f:64:19:26:56:c7:38:
                    47:ea:ca:45:72:9f:52:3f:8a:e7:d9:0f:0a:eb:0b:
                    39:83:cf:31:dc:15:09:61:3d:29:f9:92:0d:ef:d6:
                    e6:a2:f9:d5:71:b0:4e:5f:ce:7f:90:f5:f0:46:48:
                    d4:c9:0a:57:1a:96:06:8b:68:bc:31:b0:a6:01:95:
                    ab:e3:ab:16:b1:9d:3d:95:06:5c:91:3d:c8:53:b8:
                    62:46:23:6b:60:85:07:a0:85:64:a6:f4:1e:3f:e9:
                    55:1f:72:01:98:11:e4:7f:55:9b:36:7e:ea:69:76:
                    5a:58:3a:0b:d5:c3:62:dc:26:a8:07:d4:fe:ae:71:
                    82:2e:a2:fc:35:44:c7:eb:ca:f8:11:89:7f:3b:bc:
                    c9:75:24:4e:84:9f:5e:9b:a9:51:ee:2d:44:70:6f:
                    ee:c7:29:69:39:8c:ae:10:e2:25:37:18:fe:78:f7:
                    05:2a:4f:f9:97:cc:8f:5d:4b:5a:f4:99:d7:f2:ef:
                    27:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:EC:7A:B8:2B:AA:07:3B:B1:2E:62:CB:4D:04:C3:E0:6C:E9:7C:FA
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/011ee3-8bb5-4646-a5a3-73ac1975f698/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/011ee3-8bb5-4646-a5a3-73ac1975f698/1/e-x6uCuqBzuxLmLLTQTD4GzpfPo.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.240.228.0/24

    Signature Algorithm: sha256WithRSAEncryption
         76:8a:73:b5:6d:8c:f8:c0:41:ba:fb:0d:b0:09:99:e1:6f:b3:
         f9:ce:2a:47:a2:25:4b:75:62:24:6e:11:1b:72:0f:51:b4:05:
         36:91:ee:49:82:fc:93:7e:30:ef:87:eb:e8:99:3b:6c:62:32:
         91:30:6b:3e:4e:8a:6a:9c:43:05:7b:86:7d:1f:cd:7c:e0:0a:
         16:9d:b8:fe:95:90:5f:c5:68:f3:7a:f5:5c:9c:76:7d:5e:17:
         12:7d:5e:40:b2:c4:60:a8:3b:e6:83:d5:f0:77:b7:7f:96:5c:
         35:e2:11:fc:3b:63:55:fe:09:d2:bc:fd:3e:b7:00:cc:2a:24:
         45:a9:f6:17:0b:7c:c0:63:06:7b:1c:e0:c1:19:3b:a3:3b:53:
         bb:1f:d3:2b:9a:8f:9b:f9:c6:d2:14:31:37:e0:b6:fb:91:5d:
         72:01:be:e8:97:44:7a:b2:f4:1b:ff:9c:fe:e0:af:9a:45:40:
         7d:81:e4:08:95:e6:9b:e3:81:ad:9a:0c:6b:e2:b7:94:79:6a:
         c6:49:ee:44:6b:c6:51:e6:e1:cd:5e:4c:00:eb:c4:eb:80:37:
         09:73:76:19:8c:f1:de:9b:ca:3c:82:77:c7:53:11:0a:65:c0:
         5c:dc:99:fe:71:a9:c8:63:d3:01:7b:2e:1d:19:de:28:a0:42:
         93:d2:c9:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----