Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fQDM9h-mM2dbx8ZSx5Rr4JwsRl8.cer
File:                     fQDM9h-mM2dbx8ZSx5Rr4JwsRl8.cer (raw, json)
Hash identifier:          e3/yzmQwn8yzAiqUqqRFJCGUMvZaSxMbS0D/NlphgvI=
Subject key identifier:   7D:00:CC:F6:1F:A6:33:67:5B:C7:C6:52:C7:94:6B:E0:9C:2C:46:5F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018692F8F846A96EAE8C89A37BF3C8B02D13
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/27/dbecfc-1fde-4c46-834c-19be17db55f9/1/fQDM9h-mM2dbx8ZSx5Rr4JwsRl8.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/27/dbecfc-1fde-4c46-834c-19be17db55f9/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 27 Feb 2023 13:03:55 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 194.26.131.0/24

Validation:               Failed, certificate revoked on Wed 04 Oct 2023 07:16:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:92:f8:f8:46:a9:6e:ae:8c:89:a3:7b:f3:c8:b0:2d:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Feb 27 13:03:55 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=7d00ccf61fa633675bc7c652c7946be09c2c465f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:cb:31:90:4e:17:56:d2:71:af:c6:1b:4a:43:
                    c1:fd:c4:a7:1f:67:53:8a:b0:a9:6a:67:6c:8a:89:
                    cd:c3:8b:95:8b:50:2d:3a:63:10:1f:bb:ab:06:7c:
                    94:e6:ce:ea:d2:3a:c3:a2:61:65:d9:bd:86:cd:f7:
                    3d:b6:d3:2d:3f:99:21:4c:a3:c8:b5:72:8c:d1:a4:
                    e9:a5:7d:af:32:9d:26:c1:b6:b6:d3:9d:7b:db:c6:
                    37:92:ac:81:99:bb:ce:26:f9:a3:07:9f:39:9e:f2:
                    2c:0d:45:f0:d2:80:60:71:d9:e3:52:e5:d0:35:a6:
                    e8:dc:1d:8d:50:08:65:24:a7:98:b9:39:74:02:c0:
                    f0:ba:0e:c9:6b:43:52:92:5e:17:8a:1b:d3:28:5d:
                    b4:1b:c9:39:5c:ff:6a:fd:48:fa:fc:4f:7c:ea:8d:
                    3b:06:f3:17:70:e3:0a:be:4b:d1:6c:9b:e9:01:44:
                    6d:1f:9b:88:f1:df:7a:95:2a:61:9c:0f:f9:d4:43:
                    5b:27:66:38:6f:92:0d:52:59:50:cb:03:90:d4:aa:
                    99:c9:1b:38:32:07:57:3c:a7:01:11:09:2b:bc:6a:
                    a6:86:c6:c2:69:59:c3:a1:a5:13:3a:5d:56:e0:b2:
                    67:75:23:d3:c1:52:0e:cd:6b:29:e4:3c:9a:79:24:
                    d0:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:00:CC:F6:1F:A6:33:67:5B:C7:C6:52:C7:94:6B:E0:9C:2C:46:5F
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/dbecfc-1fde-4c46-834c-19be17db55f9/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/dbecfc-1fde-4c46-834c-19be17db55f9/1/fQDM9h-mM2dbx8ZSx5Rr4JwsRl8.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.26.131.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3a:97:f0:20:06:39:76:ae:10:22:79:bc:e8:ce:5f:12:e0:4d:
         45:54:5d:7f:9d:38:ed:f9:27:6b:c7:b1:69:c1:b6:f7:97:ea:
         1e:02:d9:dd:65:88:24:a7:c0:8b:48:86:f2:3f:e2:ad:92:e6:
         64:fe:7c:a4:f1:e0:49:f1:7f:74:ed:35:23:b8:98:bb:0a:da:
         4f:25:9e:62:41:72:2f:c0:d4:ce:71:b0:13:77:ab:44:9e:b4:
         43:79:16:1a:53:93:70:79:4a:79:5c:ef:19:3b:0e:ef:54:36:
         60:63:28:ea:43:03:4f:56:4d:89:57:6b:a3:e3:eb:a4:8c:3b:
         83:41:22:de:80:b9:db:27:96:ff:0d:37:3f:7c:61:b6:19:90:
         7c:ca:bb:92:0e:62:76:ef:d6:a0:e9:6e:36:0e:fa:44:b1:4d:
         a8:63:f5:f8:1a:c0:5d:5c:9a:89:8f:0b:eb:ab:f5:84:05:a4:
         9c:06:27:f4:3f:39:45:32:c5:62:e9:08:ad:4b:d3:6d:02:4f:
         ce:ea:20:fe:c4:bc:99:81:98:95:dc:40:c0:12:62:7e:ca:df:
         49:84:92:10:f6:c3:a1:71:52:2e:e9:a6:a6:a9:f9:3f:53:48:
         ca:9b:f8:48:56:44:f7:4e:04:86:03:6c:55:fd:fc:39:20:46:
         0e:c6:a7:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----