Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/kXOnu43UBf0BvCyNw8LBMmf6BuU.cer
File:                     kXOnu43UBf0BvCyNw8LBMmf6BuU.cer (raw, json)
Hash identifier:          m1rbvlApGjfLOdPE/KWZCEcfyw7sg+FRyV/I8TRyad0=
Subject key identifier:   91:73:A7:BB:8D:D4:05:FD:01:BC:2C:8D:C3:C2:C1:32:67:FA:06:E5
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856BD0CD693F27DB2A9A7B0D5BBBC4A92E
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/da/bec681-7ecf-4fd3-bf91-cb7bf5cb5139/1/kXOnu43UBf0BvCyNw8LBMmf6BuU.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/da/bec681-7ecf-4fd3-bf91-cb7bf5cb5139/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 05:32:04 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 31.222.234.0/24

Validation:               Failed, certificate revoked on Mon 20 Nov 2023 10:28:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6b:d0:cd:69:3f:27:db:2a:9a:7b:0d:5b:bb:c4:a9:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 05:32:04 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=9173a7bb8dd405fd01bc2c8dc3c2c13267fa06e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:44:92:27:b6:5f:01:ac:0b:5f:f4:f5:96:56:
                    e6:49:74:b4:ac:d5:94:3c:6d:c0:71:5c:ba:0f:ab:
                    aa:16:eb:07:4c:eb:78:92:dc:a3:df:27:76:8c:40:
                    aa:98:32:cf:2b:8c:4a:64:cf:6c:af:7a:a5:cb:02:
                    df:55:ca:f0:d7:3f:12:1b:17:6e:d8:ed:ec:49:7c:
                    10:7e:df:2f:18:73:0f:0d:26:a8:ae:45:7d:44:53:
                    cb:a5:dc:57:6b:db:bb:8c:5d:f8:64:08:43:f1:fa:
                    0c:c7:d4:f7:06:48:a9:e0:69:d5:3c:90:a9:b6:a4:
                    84:c7:4b:31:18:63:43:90:6b:d4:50:d6:a4:78:7f:
                    3b:7f:62:8c:09:d3:06:e9:17:33:47:5e:d7:68:20:
                    3c:7a:17:b0:dc:1e:34:d8:b7:c4:fe:1a:8a:72:ee:
                    69:74:ed:ef:63:35:fa:f2:95:ee:99:b3:b1:c9:ce:
                    c9:4b:74:27:3e:68:73:13:9e:5d:ed:7b:d8:5e:2a:
                    52:2b:79:c8:2c:7d:c3:d1:2e:9b:35:1b:94:ac:04:
                    12:27:23:2e:9e:62:58:01:3f:2e:d0:fd:92:f5:db:
                    03:d0:56:07:14:ff:63:63:f4:40:95:36:e2:83:ba:
                    d0:06:22:37:4d:17:aa:07:e2:03:e0:fc:b7:96:13:
                    4f:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:73:A7:BB:8D:D4:05:FD:01:BC:2C:8D:C3:C2:C1:32:67:FA:06:E5
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/bec681-7ecf-4fd3-bf91-cb7bf5cb5139/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/bec681-7ecf-4fd3-bf91-cb7bf5cb5139/1/kXOnu43UBf0BvCyNw8LBMmf6BuU.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.222.234.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5d:37:51:fb:cd:8e:b0:79:e6:9c:49:c0:b7:65:dc:4c:6e:07:
         16:4b:b1:46:16:e4:6d:02:02:c0:bf:e0:2f:6b:a8:4c:b6:98:
         14:30:bd:3b:0d:e7:31:ce:dd:d4:9a:b9:98:3a:2a:6a:84:19:
         ea:39:3d:0d:d1:9e:c3:cc:bb:40:9f:60:de:b7:4b:ca:e1:6d:
         ef:76:b0:e8:ec:47:8b:3c:89:0a:e1:c8:cb:2c:22:b0:ef:7c:
         6e:0d:34:f8:e4:1d:30:fc:dc:80:b6:5a:94:b0:36:ef:eb:53:
         52:a7:3b:7e:3a:9f:48:7d:aa:c5:07:d3:09:e4:71:c9:ec:cf:
         7e:7c:aa:0a:d0:0f:c2:c9:8d:21:c6:dc:12:17:44:07:ad:1b:
         7b:a8:50:9f:05:f1:48:21:29:d8:3d:77:d4:a0:1f:e7:b8:37:
         06:2f:90:5d:6e:84:a3:c6:7f:cd:73:6b:a7:af:3c:0a:ea:d7:
         60:2c:b4:ff:99:b5:68:e5:bf:cd:5a:0b:d9:77:fa:41:c3:41:
         f4:43:f6:fb:1b:f4:8e:79:7e:92:f1:5a:35:04:94:08:06:a6:
         a2:0c:e1:2b:4e:dc:70:df:fb:d0:0a:3c:29:a1:7d:2f:67:b4:
         3f:51:89:59:8e:7b:89:d5:26:2e:d1:5b:a2:71:d7:f6:a3:6b:
         d0:46:a3:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----