Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eCZo87pHfeIFKswRCxntS2ETCds.cer
File:                     eCZo87pHfeIFKswRCxntS2ETCds.cer (raw, json)
Hash identifier:          z1nZ+lOuUrnaLFni6nEKXhOy866cKHDX6eXEDIyKyQM=
Subject key identifier:   78:26:68:F3:BA:47:7D:E2:05:2A:CC:11:0B:19:ED:4B:61:13:09:DB
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01857168BAC57136FBFF982F6E0D9DE36C9E
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/30/6b9a2b-e96a-4598-ad17-ef970c117da5/1/eCZo87pHfeIFKswRCxntS2ETCds.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/30/6b9a2b-e96a-4598-ad17-ef970c117da5/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 02 Jan 2023 07:36:07 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 193.105.25.0/24

Validation:               Failed, certificate revoked on Tue 12 Dec 2023 13:09:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:71:68:ba:c5:71:36:fb:ff:98:2f:6e:0d:9d:e3:6c:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 07:36:07 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=782668f3ba477de2052acc110b19ed4b611309db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:09:e6:ba:5e:54:a3:4e:64:e2:07:2d:7d:c8:
                    e9:b4:95:1c:1e:ba:50:6d:6b:11:0b:40:e2:73:36:
                    14:3b:d4:ed:c8:90:ce:5c:d2:32:25:86:17:11:d5:
                    58:df:12:27:45:2b:32:ee:e9:52:eb:82:b8:ea:46:
                    82:be:3f:d6:a1:b8:c1:0a:2a:e9:28:1f:3d:e0:25:
                    49:e8:b8:88:b2:84:1f:ac:ab:41:e0:ef:71:2f:a1:
                    a6:21:3c:a9:71:8f:9e:56:98:69:cd:1f:54:af:d6:
                    d2:2a:55:d1:32:d8:71:fd:31:39:56:d7:9b:9c:32:
                    58:ea:95:15:57:e7:d3:36:77:54:1f:1c:86:8d:3a:
                    74:d0:34:21:68:5e:5e:00:36:b7:3d:94:11:23:1c:
                    6f:c8:23:ab:e9:4a:02:38:5a:d7:6f:34:87:56:85:
                    52:3c:8d:0e:db:67:33:50:c4:df:ba:34:e0:5f:56:
                    da:b0:8c:7d:d2:8e:27:a5:b0:23:c2:5f:57:3a:a0:
                    53:f7:17:66:47:c9:7b:87:a5:48:0c:b7:ce:4e:98:
                    3b:e5:83:6c:c0:c2:4d:7e:e7:71:70:4d:77:42:3d:
                    04:bb:15:10:d1:87:e9:ce:9e:d0:45:bd:7f:65:d6:
                    3c:0d:f2:be:ef:ae:55:f4:40:d2:09:a2:08:a1:8d:
                    54:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:26:68:F3:BA:47:7D:E2:05:2A:CC:11:0B:19:ED:4B:61:13:09:DB
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6b9a2b-e96a-4598-ad17-ef970c117da5/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6b9a2b-e96a-4598-ad17-ef970c117da5/1/eCZo87pHfeIFKswRCxntS2ETCds.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.105.25.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7a:e9:ec:40:ec:71:33:fa:1e:e8:cd:c4:91:58:5e:9f:ac:2e:
         b6:c8:93:0b:bf:a5:d1:70:c7:ce:58:b5:53:d9:23:15:2b:63:
         fe:ad:75:84:4b:a4:7d:f2:aa:e3:fa:17:a2:51:c1:50:07:c9:
         d5:18:2a:e4:f1:7d:d4:1a:93:30:d8:47:dc:e0:f6:da:fd:4a:
         09:a2:92:f6:e9:d5:25:ab:9d:ae:e8:7e:96:33:ea:e6:93:79:
         a4:26:20:bd:cc:05:d3:5d:48:9b:55:9a:ae:33:ab:ae:2f:d6:
         dd:d7:ac:61:38:5e:80:6c:e7:3b:c2:b9:76:cf:67:25:c7:6d:
         ef:3b:1c:0a:39:aa:61:7a:b0:d9:f7:4c:98:0e:a0:6e:c6:0f:
         60:d5:d3:d7:3a:b8:e5:39:6b:a4:6b:5e:97:59:8b:fc:dd:a5:
         09:9d:81:ad:c6:68:1e:b4:12:8c:51:fa:d6:46:6f:4e:04:1c:
         ff:3f:de:f3:12:e1:bb:4e:88:98:83:8e:9e:37:4d:c6:b1:3b:
         72:48:ca:f9:71:db:53:61:eb:82:1a:b9:b3:d8:0b:c1:6c:57:
         84:eb:f3:ca:85:b9:6e:8d:2c:9f:bf:db:b6:18:c0:8b:af:af:
         b1:0e:17:b1:fc:90:eb:98:cf:82:05:7e:81:0d:b4:e2:f0:a2:
         7f:35:6d:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----