Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/etBjYUBeaxgXxywdasgbW84_8Ws.cer
File:                     etBjYUBeaxgXxywdasgbW84_8Ws.cer (raw, json)
Hash identifier:          vTsVdJPbplfXWIXrM+6TmaZyvhuDzd1V5yPLj6K+eDA=
Subject key identifier:   7A:D0:63:61:40:5E:6B:18:17:C7:2C:1D:6A:C8:1B:5B:CE:3F:F1:6B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856F41D05C6FBFB34E76FE0219F9D11459
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/39/3e1e68-972c-41c2-a16a-992f4b4cb9cc/1/etBjYUBeaxgXxywdasgbW84_8Ws.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/39/3e1e68-972c-41c2-a16a-992f4b4cb9cc/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 21:34:22 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 5.183.64.0/22

Validation:               Failed, certificate revoked on Thu 14 Sep 2023 08:52:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:41:d0:5c:6f:bf:b3:4e:76:fe:02:19:f9:d1:14:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 21:34:22 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=7ad06361405e6b1817c72c1d6ac81b5bce3ff16b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:7f:a9:7d:22:81:47:ce:99:2e:a4:a0:57:1a:
                    83:20:05:6b:51:9e:7b:d5:40:60:bb:b6:40:5e:b9:
                    74:2c:6a:3f:72:e5:58:13:77:65:31:1d:90:52:1e:
                    79:80:d5:be:fb:81:56:38:1b:44:d7:55:88:89:b4:
                    f4:77:f4:2b:ab:33:65:d5:bb:fb:10:4d:4d:25:94:
                    f3:95:32:c1:1c:69:38:11:2e:24:fd:82:f7:50:90:
                    09:60:07:17:52:a9:8a:42:45:6d:06:21:d5:1f:28:
                    25:6d:86:d6:89:f4:e9:79:db:0e:c5:55:eb:e2:3c:
                    d2:8d:d0:bd:08:d7:73:7d:95:db:7b:b5:4a:f8:2a:
                    0b:c7:84:09:4b:28:c9:a2:31:64:55:30:ce:2c:a3:
                    42:3f:d1:52:74:3e:23:5e:a3:02:81:d0:8c:c5:ef:
                    f2:00:b3:5a:46:11:94:40:5e:80:2d:87:e7:2f:09:
                    32:df:36:b0:22:96:8b:bf:c1:f8:d9:e1:18:0c:ab:
                    20:59:22:80:c6:97:e1:2d:b1:a5:b9:bc:33:3e:dc:
                    95:37:e2:df:93:08:a0:27:2b:e3:fc:79:59:c8:22:
                    f2:4c:ca:1a:93:a9:f3:cb:05:bf:1c:58:ed:0f:e0:
                    e6:98:d5:99:18:19:97:be:da:72:9b:32:be:83:ab:
                    6b:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:D0:63:61:40:5E:6B:18:17:C7:2C:1D:6A:C8:1B:5B:CE:3F:F1:6B
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/3e1e68-972c-41c2-a16a-992f4b4cb9cc/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/3e1e68-972c-41c2-a16a-992f4b4cb9cc/1/etBjYUBeaxgXxywdasgbW84_8Ws.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.183.64.0/22

    Signature Algorithm: sha256WithRSAEncryption
         95:56:3d:67:45:c7:9c:f0:f4:63:52:78:06:92:40:14:01:ce:
         02:93:24:65:73:5f:18:cb:47:2a:22:10:77:52:5b:29:c6:ef:
         a9:f8:57:26:26:95:5e:e6:7c:5c:5a:50:b6:dd:9c:e7:a1:56:
         ad:ea:91:d3:c3:70:f0:18:41:9a:fe:be:2e:79:d9:bf:9f:7b:
         1e:df:e7:d9:92:08:b6:b5:99:59:29:4a:6d:7f:99:b5:ff:63:
         b2:15:e5:35:49:23:f4:7c:47:06:cc:6f:1e:b5:53:11:b4:a8:
         74:24:ae:86:dd:7c:06:1d:d9:c5:58:28:28:0c:f2:f7:59:36:
         5a:7d:f9:17:89:e9:da:3d:7e:97:54:89:75:97:c4:2e:4d:1c:
         4d:f0:e6:ed:ba:88:14:09:1b:bb:a7:8a:ca:de:ee:bb:58:f7:
         f4:74:cb:18:2b:6c:01:3d:3e:b8:d0:f6:39:ca:de:3a:19:c5:
         6f:49:f5:b2:68:0d:09:12:c9:ee:2c:72:a3:fc:62:25:c5:c2:
         fb:61:ac:cf:0b:10:11:da:4b:35:d4:f3:b2:b3:40:3a:33:ea:
         4a:f6:9f:e5:c0:50:f8:88:d7:2e:59:e6:6d:b4:d5:a8:f2:5e:
         db:ea:b2:c5:6f:b9:97:aa:66:2e:ac:28:71:01:61:01:8e:ff:
         df:31:6b:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----