Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/mo6mX2lhbvGMC2kfSbwl3TCFQps.cer
File:                     mo6mX2lhbvGMC2kfSbwl3TCFQps.cer (raw, json)
Hash identifier:          VpfuHj/H4rM5Xin2kIok/s4xx5CaU1bq925So9SzleU=
Subject key identifier:   9A:8E:A6:5F:69:61:6E:F1:8C:0B:69:1F:49:BC:25:DD:30:85:42:9B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856ED3E437E6C971B275AA3BCD409D5052
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/13/3af81c-e93a-40ee-9683-2d611a20d6d9/1/mo6mX2lhbvGMC2kfSbwl3TCFQps.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/13/3af81c-e93a-40ee-9683-2d611a20d6d9/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 19:34:18 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 62.233.60.0/24
                          IP: 2a11:a9c0::/29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6e:d3:e4:37:e6:c9:71:b2:75:aa:3b:cd:40:9d:50:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 19:34:18 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=9a8ea65f69616ef18c0b691f49bc25dd3085429b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:58:5b:21:c4:02:df:fb:1e:02:a6:dd:42:06:
                    e2:a8:61:b7:59:43:4b:b5:84:be:f7:09:f6:4f:29:
                    d3:bb:3e:bb:d3:bf:31:a7:78:6a:79:c0:41:a7:c1:
                    c1:f1:3a:33:5b:59:ab:7f:a1:90:eb:f6:f9:d8:13:
                    93:da:c2:39:24:e5:9b:0b:09:cc:d1:d8:d7:24:28:
                    3d:46:f3:90:40:8f:ea:08:ee:cc:3f:e0:ea:9a:66:
                    1e:3f:f5:47:7e:5f:48:69:45:72:41:c8:76:59:cc:
                    8e:6e:99:11:e4:3a:dd:c5:93:f7:09:f5:14:2f:0e:
                    bd:09:e0:48:60:8a:6d:2f:bb:b5:ef:4c:d7:cb:a6:
                    e9:16:58:f9:7d:87:e4:39:1e:d8:bc:78:d3:81:7f:
                    7e:02:7d:93:ae:15:90:28:14:c2:35:d8:94:2a:6e:
                    7a:41:b0:47:a9:5c:e9:48:f3:73:be:bd:81:71:c2:
                    80:d4:e0:71:fd:0d:2e:5e:31:71:ee:db:75:b0:64:
                    22:74:21:c5:16:93:27:41:a9:40:be:fd:cc:c6:d9:
                    4b:ad:05:2e:eb:0a:14:82:73:2c:62:20:fe:5c:26:
                    22:fd:42:36:11:3b:b6:7b:ae:ef:cc:d2:b6:2a:fc:
                    8f:2c:fd:dd:45:8e:df:5d:52:72:79:2a:78:0d:0d:
                    af:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:8E:A6:5F:69:61:6E:F1:8C:0B:69:1F:49:BC:25:DD:30:85:42:9B
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/3af81c-e93a-40ee-9683-2d611a20d6d9/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/3af81c-e93a-40ee-9683-2d611a20d6d9/1/mo6mX2lhbvGMC2kfSbwl3TCFQps.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.233.60.0/24
                IPv6:
                  2a11:a9c0::/29

    Signature Algorithm: sha256WithRSAEncryption
         55:04:7a:7a:f4:e4:41:59:0d:8d:b4:f6:c5:81:1a:d4:6a:b9:
         94:d2:e2:27:13:bb:cd:da:0f:17:c2:9c:8b:78:74:51:e3:85:
         a4:dc:70:13:9c:21:9c:51:3e:9a:ca:cb:1f:3f:fa:25:e2:0f:
         4e:87:a1:1f:d1:85:56:fa:e4:2b:0d:97:7f:22:9e:cd:64:eb:
         08:9e:1e:6e:ea:e8:b7:45:64:ad:3a:c3:17:05:bc:ec:97:f0:
         b4:e8:7a:a3:12:ff:d6:45:5c:d1:74:6c:e1:7d:22:b2:2d:45:
         ab:99:b5:c1:c1:e1:17:3d:08:e8:e5:5a:8e:7b:c3:a7:9b:31:
         94:a8:cc:09:5d:b2:34:cb:36:69:27:7f:4d:bc:1b:1c:11:a6:
         7f:99:42:4a:6c:2a:7d:78:be:6f:93:7b:da:bc:cd:f2:bf:39:
         eb:f0:0f:5b:72:d1:d6:86:f2:75:5b:8e:59:37:c4:cc:93:d6:
         11:74:87:ae:f3:99:2e:ea:92:94:70:26:41:cd:5b:a7:64:fb:
         38:49:a6:2a:c2:c1:bc:62:9e:63:61:a4:57:1a:e2:fc:63:4b:
         a0:a0:ea:d9:f6:09:15:0c:e3:c1:3f:a2:84:7f:f9:17:0f:3e:
         b4:8a:51:16:04:31:d1:6c:27:1a:9d:0d:f6:41:96:c7:43:b9:
         7d:0a:11:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 16 13:54:43 2023 by rpki-client on console-fra.rpki-client.org