Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/j4sV00wItfH8_0-edMlbx2oLar4.cer
File:                     j4sV00wItfH8_0-edMlbx2oLar4.cer (raw, json)
Hash identifier:          SgBDVBk+OHti6uoLqtcPhc7ZxzDT/391XES9MCjOYSA=
Subject key identifier:   8F:8B:15:D3:4C:08:B5:F1:FC:FF:4F:9E:74:C9:5B:C7:6A:0B:6A:BE
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018692EB40981A587F9387266F2C7A41C897
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/55/78c103-89da-4b84-8f34-aeb6d2cf2de2/1/j4sV00wItfH8_0-edMlbx2oLar4.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/55/78c103-89da-4b84-8f34-aeb6d2cf2de2/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 27 Feb 2023 12:48:56 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 185.249.54.0/24

Validation:               Failed, certificate revoked on Wed 16 Aug 2023 08:43:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:92:eb:40:98:1a:58:7f:93:87:26:6f:2c:7a:41:c8:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Feb 27 12:48:56 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=8f8b15d34c08b5f1fcff4f9e74c95bc76a0b6abe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:9f:7d:f9:dc:11:6b:b8:03:14:28:bd:e0:8d:
                    d3:a5:c1:06:64:eb:5d:66:dd:6b:0a:eb:e9:17:a6:
                    a2:ea:ea:0a:20:42:66:43:ed:1f:e6:e6:4d:3c:40:
                    cc:19:5d:08:c4:5b:9a:18:28:a4:99:f9:62:c9:40:
                    df:51:fc:01:bf:8f:76:96:97:b4:18:30:4d:12:4e:
                    f7:d0:5c:ad:b0:10:c0:06:1b:b6:e0:e0:49:22:66:
                    06:06:17:63:1b:32:9f:c6:44:66:3b:7b:a8:91:92:
                    ed:a2:fc:04:c4:c9:24:0b:bc:aa:71:c8:69:a8:ea:
                    ac:4f:e7:29:41:43:ad:76:2a:6f:65:26:5b:64:7d:
                    9a:1e:c3:fe:64:56:72:83:b7:68:11:ba:f0:60:c3:
                    8c:75:c3:c9:ba:ca:dc:cc:08:66:86:c0:01:77:ba:
                    9e:a3:3c:e6:8c:54:12:52:55:62:e1:fa:64:02:bd:
                    8f:f6:c8:cd:e8:12:50:d1:33:85:cb:0b:1c:49:47:
                    ab:1d:ca:d8:ec:49:57:ce:a7:77:8d:12:2a:10:b1:
                    dd:5c:9c:06:44:5a:ab:b6:a4:9d:35:de:1a:e7:86:
                    12:5e:5b:90:cb:d0:fa:de:45:bb:d7:e3:83:60:3e:
                    40:b9:34:4a:f4:bb:bc:3e:fb:c6:56:fa:23:00:fd:
                    de:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:8B:15:D3:4C:08:B5:F1:FC:FF:4F:9E:74:C9:5B:C7:6A:0B:6A:BE
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/78c103-89da-4b84-8f34-aeb6d2cf2de2/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/78c103-89da-4b84-8f34-aeb6d2cf2de2/1/j4sV00wItfH8_0-edMlbx2oLar4.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.249.54.0/24

    Signature Algorithm: sha256WithRSAEncryption
         92:bf:fb:5e:ce:db:f1:75:4e:50:a2:9c:b6:21:45:3a:df:8f:
         60:c6:1b:c0:ef:4a:2a:f4:a6:8e:cf:cc:9d:24:12:f2:37:6f:
         88:a7:75:ca:68:48:3c:f5:0e:20:3f:6d:47:b7:ea:8e:ec:70:
         7f:ce:fc:db:4e:bd:2c:2e:35:17:02:69:e9:9d:06:05:63:d4:
         94:ee:d6:b1:79:30:65:3d:3c:9f:35:9a:a4:01:6d:97:82:03:
         a6:29:18:d1:2b:2e:04:64:bf:ef:90:63:df:86:78:27:3d:ac:
         72:d5:c9:92:0b:a3:77:cc:79:13:3f:ed:d3:75:9b:e5:e8:eb:
         39:29:75:1b:57:06:5b:63:e4:39:b4:d8:d4:64:07:e9:68:95:
         a8:f2:9d:16:2f:5c:37:4b:4c:8f:36:b3:26:39:bf:85:a3:23:
         18:f8:0d:6b:e0:d2:3c:2d:e0:c3:77:a5:a6:22:9e:97:77:57:
         92:4a:26:8a:4f:45:2c:68:c6:f3:bb:03:ba:35:26:19:ee:51:
         31:89:25:48:8b:b8:10:28:9d:72:db:75:cf:4c:df:d6:85:8f:
         17:45:21:64:14:7a:59:df:dc:2f:4f:c7:80:63:21:26:d2:cd:
         04:88:87:25:da:58:c0:60:1e:05:17:93:5f:01:87:1b:98:f5:
         fb:fd:39:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----