Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/gUq6-7CP9HIB2bHtYzOTtr2SWB4.cer
File:                     gUq6-7CP9HIB2bHtYzOTtr2SWB4.cer (raw, json)
Hash identifier:          748og1XbGp+1QydsIyfvkET9/7VjF6A05lfqJtLvha4=
Subject key identifier:   81:4A:BA:FB:B0:8F:F4:72:01:D9:B1:ED:63:33:93:B6:BD:92:58:1E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018CC3B6A623E055BB0D6EC7A254B9421C7C
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/67/a23fec-0474-4345-8073-85f8152916dc/1/gUq6-7CP9HIB2bHtYzOTtr2SWB4.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/67/a23fec-0474-4345-8073-85f8152916dc/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 06:29:36 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    IP: 80.68.159.0/24

Validation:               Failed, certificate revoked on Mon 28 Oct 2024 07:28:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c3:b6:a6:23:e0:55:bb:0d:6e:c7:a2:54:b9:42:1c:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 06:29:36 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=814abafbb08ff47201d9b1ed633393b6bd92581e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:b7:5a:cd:a6:d8:64:2c:67:ff:d9:ac:41:3b:
                    0d:9f:80:1b:61:47:7b:60:9e:55:e5:d7:bd:57:a3:
                    9f:d1:69:27:e2:72:ed:d9:81:61:2c:55:04:e8:a8:
                    bb:14:28:ae:01:9c:66:e6:ac:80:e0:66:74:1f:0c:
                    0d:2c:0c:bc:06:fa:77:4d:3e:3c:6b:dc:d7:0d:80:
                    54:ac:b6:82:9a:e4:2b:9f:6c:2e:1b:0a:ef:80:64:
                    ef:c2:11:3d:e5:6a:48:a0:83:d0:5d:2f:f5:24:9a:
                    97:23:e9:dd:af:9d:08:8a:38:b7:05:02:11:2c:e5:
                    cb:62:b7:26:98:f4:c3:4f:30:1c:f9:c8:a4:fb:a5:
                    0d:28:fc:26:2d:61:5b:e9:72:25:e1:50:08:0e:5a:
                    29:5b:ce:e0:31:5c:f5:fa:55:6f:6b:de:dc:b7:66:
                    7a:c5:18:3a:8e:84:d5:26:70:25:65:08:d7:82:9f:
                    a3:3a:e6:2f:59:52:4f:e8:d4:69:e0:f2:63:2d:b2:
                    20:aa:e2:ca:9f:6b:65:91:bf:84:01:e4:e4:ae:85:
                    0c:bf:65:3c:1b:f3:97:02:69:93:44:59:e0:ef:3e:
                    a4:43:2b:69:00:37:64:07:00:cd:af:2d:f2:d8:0c:
                    7f:d2:08:30:0c:73:4c:04:1d:7e:82:dd:ad:c8:9b:
                    a0:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:4A:BA:FB:B0:8F:F4:72:01:D9:B1:ED:63:33:93:B6:BD:92:58:1E
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/a23fec-0474-4345-8073-85f8152916dc/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/a23fec-0474-4345-8073-85f8152916dc/1/gUq6-7CP9HIB2bHtYzOTtr2SWB4.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.68.159.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:ae:35:6c:48:6c:1f:13:80:30:5b:e6:3f:4c:9d:8c:38:46:
         fb:07:8c:ef:e9:b3:39:79:aa:6b:37:25:5a:46:91:9b:64:29:
         ec:cd:6f:5a:3f:b3:77:71:71:45:b6:e3:9c:ad:fc:df:f9:7b:
         b2:3c:47:f8:27:51:74:ea:4d:a1:45:72:ca:a6:b4:7f:40:97:
         47:44:3e:6e:f3:4d:50:e5:56:2a:3d:12:ea:cd:e8:fd:f4:84:
         55:cb:0e:c1:e1:58:4c:e1:d7:82:1b:a1:c3:ff:48:76:1f:a0:
         1c:96:19:de:9d:d4:c3:7d:4f:32:e7:bc:cc:5a:b2:ff:e8:79:
         52:83:f8:c9:42:1a:dd:14:a8:cc:c7:51:d2:0c:d9:02:f9:20:
         94:67:ba:26:41:b1:ac:7c:8f:e7:b9:50:0b:43:85:b8:f3:e6:
         0e:6a:56:68:72:df:ce:ea:b0:2a:6a:5c:f6:be:66:48:3e:69:
         6d:3c:f2:94:52:5f:a4:cc:a3:e7:af:38:c4:b2:0d:73:6d:b1:
         c9:b4:07:fa:21:98:da:e0:d4:41:ea:ac:20:c5:09:38:0d:38:
         ad:86:7a:65:32:6e:b0:bf:9a:85:cb:6d:83:56:ba:73:91:a7:
         d1:84:91:0b:0a:5b:93:17:e9:74:f1:be:be:4d:e8:ea:49:19:
         58:18:16:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----