Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/oo62nPsiMlz3UP9WMVDb0ESRvrs.cer
File:                     oo62nPsiMlz3UP9WMVDb0ESRvrs.cer (raw, json)
Hash identifier:          m2OjkQWk5l12TxRjRqCG1tEZimJ15xf2Re7MfbM71h8=
Subject key identifier:   A2:8E:B6:9C:FB:22:32:5C:F7:50:FF:56:31:50:DB:D0:44:91:BE:BB
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018CC26D3314085B1F2E9F97AD925BDD447A
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/f1/43c733-7519-42fd-ac5b-4e2da13594b8/1/oo62nPsiMlz3UP9WMVDb0ESRvrs.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/f1/43c733-7519-42fd-ac5b-4e2da13594b8/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 00:29:45 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    IP: 91.213.202.0/24

Validation:               Failed, certificate revoked on Fri 15 Nov 2024 09:26:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c2:6d:33:14:08:5b:1f:2e:9f:97:ad:92:5b:dd:44:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 00:29:45 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=a28eb69cfb22325cf750ff563150dbd04491bebb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:5a:63:a5:84:47:de:72:0c:00:df:35:f2:bc:
                    3c:aa:0a:6e:77:5f:a6:b8:50:d5:1f:c2:a0:85:48:
                    41:89:d0:c1:ee:50:2c:79:f9:40:ed:22:e2:39:00:
                    8c:9a:81:c1:54:29:f6:bf:c1:ff:2c:b8:e3:62:c1:
                    11:50:87:44:14:1d:10:12:59:7d:36:fb:c9:90:1e:
                    34:ae:84:c7:4a:9c:95:1d:a9:55:cd:cc:1e:d0:07:
                    a4:66:9f:af:df:fe:12:0e:09:9b:f0:ff:09:0c:8a:
                    bf:5a:d4:57:fe:e4:6c:3a:00:d3:63:b7:3d:03:c2:
                    aa:15:bc:8b:c9:ac:fa:b5:47:28:bb:bc:8a:6a:e9:
                    db:c5:a7:05:05:cc:cb:a9:cc:5f:77:78:50:06:e7:
                    39:92:36:9c:e4:09:15:89:64:5d:c5:0e:49:da:0f:
                    02:b5:21:b1:e6:96:f4:34:20:34:a0:fe:75:98:fc:
                    47:09:b7:87:78:ba:bf:22:3f:78:4f:13:f1:d2:3d:
                    68:83:56:b0:57:d7:4c:77:ca:f3:d7:21:7a:8a:22:
                    8c:f3:ca:fd:39:d6:a9:58:66:11:9f:f3:47:6b:b5:
                    71:65:d0:1c:d1:78:45:a9:6b:4c:8b:9d:49:36:da:
                    c9:b7:e7:22:66:0a:57:41:16:89:97:07:72:ec:b9:
                    09:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:8E:B6:9C:FB:22:32:5C:F7:50:FF:56:31:50:DB:D0:44:91:BE:BB
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/43c733-7519-42fd-ac5b-4e2da13594b8/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/43c733-7519-42fd-ac5b-4e2da13594b8/1/oo62nPsiMlz3UP9WMVDb0ESRvrs.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.213.202.0/24

    Signature Algorithm: sha256WithRSAEncryption
         15:c4:3e:38:9a:5f:d4:52:cb:c2:26:4d:4f:0b:b5:c0:9a:55:
         21:71:e3:17:d5:c2:9c:62:95:d6:41:3f:40:0a:8e:78:9a:3f:
         90:96:73:ef:13:38:97:0f:bc:c2:e3:18:2d:e2:78:9d:c0:be:
         f6:6f:9c:ef:e6:f7:ae:e6:25:13:52:ad:6a:db:04:f3:19:c4:
         fe:83:cb:d5:dd:16:dd:ea:df:2a:28:b9:e0:bf:4f:46:6b:cd:
         61:02:ea:94:ed:d7:e0:3f:b0:33:47:a1:0f:77:03:61:39:a4:
         13:28:51:86:21:7c:4f:d3:d5:c0:8f:86:26:18:64:69:7b:e4:
         31:d8:fd:b5:0b:90:17:6d:e1:7f:27:6e:c0:62:5e:41:54:3d:
         8c:65:a2:05:ec:a0:de:0a:85:c3:83:25:60:56:10:3b:81:d9:
         2d:ba:00:8f:bf:1c:1f:9b:e5:f6:23:2a:b2:d6:1c:71:a6:7c:
         30:0a:de:70:8d:12:eb:e0:81:09:77:48:8e:07:6f:35:2e:6e:
         27:ae:72:9c:92:4b:7e:ff:18:27:31:ac:09:87:7e:a7:1e:12:
         76:ed:04:82:1c:07:dd:34:ff:8d:0d:cc:8a:23:12:69:da:d8:
         e1:19:2a:ab:ed:78:9e:c7:50:74:aa:9b:37:b2:05:33:4e:34:
         f6:a7:f5:60
-----BEGIN CERTIFICATE-----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Generated at Fri Nov 15 12:16:45 2024 by rpki-client on console-fra.rpki-client.org