Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/nPTlLrBqolGhsTSwimJKDy5jP8M.cer
File:                     nPTlLrBqolGhsTSwimJKDy5jP8M.cer (raw, json)
Hash identifier:          w+SULMhGj2LqtfT6TsHZKvgCTpIxi9X8QwJzLi4DuzY=
Subject key identifier:   9C:F4:E5:2E:B0:6A:A2:51:A1:B1:34:B0:8A:62:4A:0F:2E:63:3F:C3
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0185701DE6217F715E4F8E05D0F411F674D3
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/c1/30a68c-da4a-4a40-baf9-4eb175f07d21/1/nPTlLrBqolGhsTSwimJKDy5jP8M.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/c1/30a68c-da4a-4a40-baf9-4eb175f07d21/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 02 Jan 2023 01:34:45 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 185.231.136.0/22

Validation:               Failed, certificate revoked on Thu 26 Jan 2023 14:55:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:1d:e6:21:7f:71:5e:4f:8e:05:d0:f4:11:f6:74:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 01:34:45 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=9cf4e52eb06aa251a1b134b08a624a0f2e633fc3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:fd:e0:ac:36:e1:2d:a7:16:47:38:f2:47:83:
                    84:23:fc:cf:5d:63:93:6e:cb:3f:f1:9c:fd:eb:a2:
                    2d:2c:80:e6:a9:bc:b8:ba:33:54:89:57:a7:28:33:
                    97:2e:60:90:a6:32:44:fe:b6:64:c3:c9:82:96:94:
                    f3:b9:7e:79:21:09:8d:c5:7a:a5:ac:46:47:bc:aa:
                    b9:a7:5f:f0:2d:d3:8b:d7:3b:af:e6:2e:14:53:be:
                    de:85:56:09:10:d8:9c:74:7b:93:88:ed:81:7b:ab:
                    55:c2:dd:eb:15:bc:81:d1:81:3d:06:c6:06:59:5f:
                    f2:94:6c:04:2a:65:46:8a:27:24:ac:6a:54:84:e8:
                    9d:fb:85:56:b6:61:84:6f:a2:10:1e:e4:d9:87:28:
                    e1:41:af:b5:ce:ac:36:72:f3:03:19:4e:25:94:0b:
                    5d:7a:27:0a:4c:7a:c7:d0:51:59:ca:c6:fc:7b:87:
                    b2:55:a4:61:be:c2:33:bf:7a:5e:7c:01:52:5c:45:
                    2e:bf:14:8b:91:d5:aa:62:5b:5a:17:8a:be:e9:29:
                    5d:4f:8d:60:93:2a:62:45:fd:55:38:cf:d5:3b:2f:
                    d4:ca:e2:98:27:21:bf:90:03:65:a1:a4:f7:66:72:
                    44:f1:fb:f7:34:24:db:72:55:88:b3:3a:d5:f2:0e:
                    bd:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:F4:E5:2E:B0:6A:A2:51:A1:B1:34:B0:8A:62:4A:0F:2E:63:3F:C3
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/30a68c-da4a-4a40-baf9-4eb175f07d21/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/30a68c-da4a-4a40-baf9-4eb175f07d21/1/nPTlLrBqolGhsTSwimJKDy5jP8M.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.231.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3d:a0:54:84:a8:4e:c0:f2:0c:87:f0:76:3e:8b:74:82:38:f4:
         0b:34:c4:25:dc:06:ec:5d:e6:a7:fc:d5:f8:1a:73:f5:b7:e0:
         b5:c1:3b:51:10:02:ff:29:b4:6c:b4:26:30:99:83:d1:78:7e:
         e1:f1:b9:9e:1d:f1:aa:47:dc:6d:34:0b:42:c9:d5:8d:1e:c3:
         25:67:4f:eb:4e:8e:74:38:60:9d:3a:6a:31:fd:54:1b:cb:ec:
         9e:b0:ac:f0:32:ba:44:94:a1:0f:8c:13:4b:7b:57:b7:5f:20:
         f0:61:d1:1a:1c:27:87:9e:02:02:e8:cd:86:76:83:ec:ed:5b:
         fb:0d:37:6a:16:27:c6:51:42:16:6f:ee:7d:49:cc:e9:dd:11:
         e2:d3:15:68:ff:e6:d3:8f:fd:b4:7e:0e:de:b4:fe:18:a0:ab:
         d7:fd:e4:d2:4f:65:ef:b3:5a:68:8e:8f:81:a8:2b:cd:39:a6:
         5d:90:2d:58:e8:1e:0e:a6:2e:5f:52:b6:6b:54:66:65:f2:91:
         18:64:f7:49:30:e6:d1:d1:f7:d7:bc:7d:43:47:10:f5:8c:ea:
         68:e7:29:93:d4:49:20:ca:94:63:f2:9c:3e:8f:2f:25:d1:50:
         16:a1:99:2b:03:be:fc:73:df:a5:5a:0b:4f:3a:7c:1b:bf:3e:
         17:fe:55:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----