Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ocdHG94YLbnCvBHWjl_1L0qsT24.cer
File:                     ocdHG94YLbnCvBHWjl_1L0qsT24.cer (raw, json)
Hash identifier:          uVtQXCjBfVlpAqVwT637pYl1GNqAFfV1IY4VaqssSVs=
Subject key identifier:   A1:C7:47:1B:DE:18:2D:B9:C2:BC:11:D6:8E:5F:F5:2F:4A:AC:4F:6E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856FB0AB595261CD8C687A17C6F45EFA48
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/3e/74d223-5db9-49b7-b921-b179e0b24a76/1/ocdHG94YLbnCvBHWjl_1L0qsT24.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/3e/74d223-5db9-49b7-b921-b179e0b24a76/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 23:35:27 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 158.255.76.0/24

Validation:               Failed, certificate revoked on Wed 01 Nov 2023 09:37:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:b0:ab:59:52:61:cd:8c:68:7a:17:c6:f4:5e:fa:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 23:35:27 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=a1c7471bde182db9c2bc11d68e5ff52f4aac4f6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:8e:f7:8e:39:fd:8d:ba:04:7e:21:c4:46:49:
                    7f:00:67:c6:26:51:ac:bd:ed:c1:2b:90:14:39:de:
                    aa:7c:f0:5a:15:11:01:e1:c2:50:6a:c4:b7:f4:98:
                    35:f2:7e:56:7c:79:1f:78:8b:f0:b2:7a:16:83:f3:
                    a3:c4:e9:3d:d1:91:5f:a4:d7:e4:c4:ff:92:01:8d:
                    f0:4c:bb:d8:2d:5a:c3:9b:d0:35:29:48:47:26:6c:
                    e2:3c:3f:ec:a5:7b:db:ee:f0:79:7d:ca:23:3f:14:
                    92:62:83:0a:27:ae:93:58:66:8f:56:a5:26:6a:1b:
                    80:6a:11:7c:6f:34:ba:28:d3:a8:64:a1:ec:7a:c8:
                    9a:47:68:dc:12:b8:29:fe:4e:ab:b7:75:7a:98:c8:
                    28:aa:e2:4e:fa:56:c4:b4:95:d1:3e:70:3a:7c:7f:
                    59:a6:2b:cd:f4:e6:99:96:06:a7:c0:a8:e0:35:e8:
                    09:2d:98:7a:7f:b3:23:d0:5b:2b:c9:33:16:e3:cb:
                    b7:ff:73:27:81:94:9b:06:e5:e5:18:f8:45:3f:cb:
                    ca:eb:12:be:70:3a:33:fc:1b:b0:cb:f5:3d:94:9b:
                    35:da:ee:c2:cb:42:bf:75:7c:98:a0:ab:1b:6d:cc:
                    d7:ca:1e:b5:e7:ba:ea:1e:76:08:f0:75:ae:7c:f0:
                    a3:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:C7:47:1B:DE:18:2D:B9:C2:BC:11:D6:8E:5F:F5:2F:4A:AC:4F:6E
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/74d223-5db9-49b7-b921-b179e0b24a76/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/74d223-5db9-49b7-b921-b179e0b24a76/1/ocdHG94YLbnCvBHWjl_1L0qsT24.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.255.76.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2c:2c:0d:0b:ad:55:25:a8:8b:ef:5e:b3:b4:2e:37:0f:f7:50:
         b8:83:9a:26:6d:0d:4e:de:8b:4c:71:51:24:97:ad:59:79:69:
         8a:bc:ff:35:ba:ee:31:04:41:9c:63:dc:27:93:18:de:2b:f7:
         a2:95:10:0a:4b:d6:5d:11:8d:2f:da:a6:0f:f8:84:ea:ba:35:
         d7:41:e2:b3:87:89:53:3b:32:9f:e0:27:e5:ab:e6:89:84:a8:
         8e:ce:f4:27:19:f0:9d:81:f7:1b:de:5b:ff:ff:3c:eb:06:bc:
         45:d3:f4:dc:ab:ab:d5:6f:ee:ae:5b:f0:4c:21:86:74:79:74:
         3e:11:91:ee:04:f7:db:b8:71:ca:9e:05:e8:da:8a:30:a4:6b:
         5d:59:90:ea:92:ec:26:e0:20:11:55:ee:65:4b:39:54:54:71:
         8b:d6:3b:de:19:08:3e:fe:35:6c:66:01:e4:fd:15:87:88:07:
         c6:e6:cd:b6:b9:d1:5b:5b:2c:80:52:f1:01:e4:a7:ac:13:ac:
         42:27:62:a6:3c:37:b8:91:31:86:9c:fe:30:d9:c2:36:9e:2f:
         6e:62:63:57:08:75:00:c0:ab:15:d6:0c:ae:e9:1e:44:4a:01:
         52:82:7c:7b:5c:a0:95:93:e8:92:b8:7b:50:b3:26:88:38:08:
         6e:46:59:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----