Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/mZKuwRpIXL047QKQdrMGPoQ7GWs.cer
File:                     mZKuwRpIXL047QKQdrMGPoQ7GWs.cer (raw, json)
Hash identifier:          WzNj5iXaQh7RiBqd1P+K+GyrOqq8XwVML4Jp+Ta6CPg=
Subject key identifier:   99:92:AE:C1:1A:48:5C:BD:38:ED:02:90:76:B3:06:3E:84:3B:19:6B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0187222C38098C857656BC0D55F55C881F94
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/216/9992AEC11A485CBD38ED029076B3063E843B196B.mft
caRepository:             rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/216
Notify URL:               https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before:   Mon 27 Mar 2023 08:25:36 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 62.3.8.0/24

Validation:               Failed, certificate revoked on Wed 27 Dec 2023 13:47:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:22:2c:38:09:8c:85:76:56:bc:0d:55:f5:5c:88:1f:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Mar 27 08:25:36 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=9992aec11a485cbd38ed029076b3063e843b196b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:1b:37:95:73:94:33:d3:11:5e:74:2f:42:8d:
                    d6:d3:72:26:74:ec:fe:6d:98:8e:ed:38:a7:3d:ef:
                    9d:61:67:dc:24:cd:6f:19:0f:14:1f:b0:df:3c:7c:
                    cd:6c:2f:f0:c1:ba:44:40:67:ee:2d:44:7d:13:c2:
                    6e:3c:3e:92:50:8a:23:27:3a:bb:74:05:87:52:80:
                    cb:66:1d:dd:94:42:b9:dd:24:82:de:ff:5e:6a:3f:
                    11:33:ca:b9:a7:35:ea:1e:e9:8c:7a:2f:e2:8a:e4:
                    6b:cc:75:ad:f4:1a:a6:cd:01:f3:73:af:58:28:cc:
                    6a:a0:a5:9d:da:5c:49:89:93:05:de:01:8c:3a:29:
                    99:c7:c9:a1:f7:9b:d8:8b:cc:d5:f4:d3:38:75:50:
                    15:7e:2a:08:20:f9:20:19:65:6a:48:97:f0:55:71:
                    fb:1b:e5:51:9b:05:f8:3c:1c:91:fa:74:fe:ad:37:
                    9c:d5:82:9d:eb:7a:50:cb:8c:08:0f:b7:58:01:7c:
                    1d:75:2f:b2:a7:44:42:36:13:e8:09:7e:ab:46:90:
                    a2:26:e4:19:aa:10:0a:26:08:b9:21:79:13:e6:4d:
                    29:09:54:45:f4:15:23:95:77:88:50:28:81:f3:78:
                    b9:bb:32:5e:4b:12:c8:a7:8e:96:c9:8c:66:d8:8f:
                    a8:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:92:AE:C1:1A:48:5C:BD:38:ED:02:90:76:B3:06:3E:84:3B:19:6B
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/216
                RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/216/9992AEC11A485CBD38ED029076B3063E843B196B.mft
                RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.3.8.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2d:7c:5d:b9:83:a8:7d:81:f2:cc:d1:af:ec:ab:68:ab:e9:e6:
         25:39:f0:7e:69:d8:a2:0c:b2:30:b2:b5:d5:ce:4a:80:d4:d2:
         30:33:d7:e9:59:ce:f1:10:e7:b6:9b:2f:1b:fa:b3:a8:51:86:
         95:84:2d:c0:f2:3a:a5:71:d5:62:1e:31:b1:52:68:af:7b:66:
         e8:35:3b:31:49:8c:ee:25:61:d6:b6:15:3f:94:b0:80:d2:2d:
         f8:ff:c3:4f:bd:04:0a:a0:a9:bb:35:0e:2b:55:4a:e7:6f:07:
         0f:d7:6a:5c:ca:9f:83:76:04:45:23:37:f0:63:aa:51:d6:5a:
         c5:1c:63:43:8a:85:34:66:29:85:a7:3b:51:a8:f8:14:cd:e3:
         68:2e:d5:3a:37:e8:2b:ed:25:e4:0c:15:f7:84:05:3a:3b:6e:
         0e:0f:21:b2:db:d5:55:54:45:14:cd:ac:15:d8:c8:b4:ea:bd:
         c3:57:ad:00:89:58:1f:aa:8f:72:4b:c5:f8:0e:c6:44:74:ab:
         1d:02:9f:c2:41:94:82:a3:11:2c:80:98:fe:92:1b:10:23:35:
         b7:8a:00:b0:bf:25:58:a9:bd:e9:98:17:30:4c:0d:07:7e:49:
         4d:66:4a:1e:02:16:af:1a:5d:d2:9b:dc:74:27:ce:08:50:5c:
         bf:a9:54:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----