Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eJUXJYI2oCJYLzRuiBUgdYQGF80.cer
File:                     eJUXJYI2oCJYLzRuiBUgdYQGF80.cer (raw, json)
Hash identifier:          FMHji9sxqFV3UbglJ6ZFqcrDNQLt2cpnvRnw10mHRpo=
Subject key identifier:   78:95:17:25:82:36:A0:22:58:2F:34:6E:88:15:20:75:84:06:17:CD
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856EFBEF546A07D70FFD99156EE42F28C5
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/11/5fa8ef-845f-42e8-8c3a-84c85a9009ed/1/eJUXJYI2oCJYLzRuiBUgdYQGF80.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/11/5fa8ef-845f-42e8-8c3a-84c85a9009ed/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 20:18:02 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 193.243.189.0/24

Validation:               Failed, certificate revoked on Thu 21 Dec 2023 09:47:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6e:fb:ef:54:6a:07:d7:0f:fd:99:15:6e:e4:2f:28:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 20:18:02 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=789517258236a022582f346e88152075840617cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:11:d4:b5:f9:44:b5:d9:2b:95:eb:27:3e:c6:
                    0b:fe:77:67:2e:f5:b7:c1:8e:c7:57:ac:3b:3b:19:
                    67:4d:d9:ca:97:61:f6:18:96:ee:10:31:26:c6:a0:
                    e3:dd:a4:54:e3:ac:1f:3c:06:dd:81:d4:a0:6a:ad:
                    23:b5:e2:82:a0:ab:93:3d:fb:01:12:53:92:33:a6:
                    df:44:a6:78:26:9e:16:54:4f:1d:18:b6:2e:35:f7:
                    5c:4d:7e:90:01:df:61:d8:9e:b1:46:78:fe:20:5c:
                    40:22:30:0e:78:56:c1:6a:7d:7a:74:73:e7:67:ed:
                    fc:66:bc:93:57:50:4a:87:9a:2c:0c:ba:c6:1b:62:
                    65:bc:49:97:a9:3d:95:05:79:4f:bc:f0:11:94:69:
                    f3:1d:9e:d7:4b:2b:53:96:5f:9f:aa:7f:5f:15:f2:
                    c4:dd:ad:65:7c:df:f4:63:b9:47:bb:92:ec:af:50:
                    44:a2:fe:32:c0:37:4b:74:38:fd:4d:c8:92:53:51:
                    37:ba:4c:f3:70:36:81:b9:8d:30:79:0e:b2:5a:7b:
                    19:fd:e8:16:a1:43:0a:14:d0:64:82:25:40:58:3b:
                    32:6c:9c:3a:5d:74:05:04:4e:0b:b7:2e:a6:e0:89:
                    59:ef:78:e4:a9:9c:07:27:fb:6a:af:54:4d:47:96:
                    10:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:95:17:25:82:36:A0:22:58:2F:34:6E:88:15:20:75:84:06:17:CD
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/5fa8ef-845f-42e8-8c3a-84c85a9009ed/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/5fa8ef-845f-42e8-8c3a-84c85a9009ed/1/eJUXJYI2oCJYLzRuiBUgdYQGF80.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.243.189.0/24

    Signature Algorithm: sha256WithRSAEncryption
         64:37:f0:5a:33:74:43:d8:31:f7:6c:04:86:28:f7:23:cf:57:
         c8:a5:f5:3e:5e:4b:02:57:18:df:26:b2:fe:3b:a8:e9:f5:a9:
         99:40:87:4f:fe:56:72:4e:da:52:9a:b5:10:36:40:e5:b8:4d:
         3d:52:6f:f4:0e:77:ab:6a:32:3c:ed:6c:15:93:0d:fe:18:cc:
         1b:7d:b3:7a:d9:d5:2d:8e:ca:78:d1:43:95:41:75:62:19:ef:
         53:3e:04:ef:52:48:de:5f:4f:9f:75:cc:a7:70:34:14:35:08:
         c1:4b:4d:a2:53:71:08:46:ef:b7:b9:7d:4b:de:56:3b:0b:28:
         46:28:b8:9d:78:9a:03:6d:8d:72:79:32:d4:8b:05:76:91:90:
         24:00:1f:2e:53:fe:7e:c7:dd:30:21:90:91:26:6f:fa:61:87:
         58:10:b6:94:ac:dc:fe:e3:26:e8:06:b8:52:3c:3b:f0:ca:16:
         78:bb:bc:fe:49:59:3b:a9:43:08:09:47:b0:b0:28:cb:84:38:
         13:e8:19:2a:f8:5e:0b:6d:cb:a3:7f:f4:db:a4:71:47:2b:eb:
         51:91:86:24:d6:26:27:8b:75:eb:a0:3e:5b:6c:96:6f:9c:63:
         21:f5:46:cf:59:f5:7d:ce:ac:72:19:96:07:b2:cb:56:c4:10:
         c8:5a:90:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----