Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/otIJQ2BBB_arGBOenTB1-XwHHOM.cer
File:                     otIJQ2BBB_arGBOenTB1-XwHHOM.cer (raw, json)
Hash identifier:          m1Y3nlauGm2HwBOoiVqOfpvu1pz+HccDTaF8gV4/gQM=
Subject key identifier:   A2:D2:09:43:60:41:07:F6:AB:18:13:9E:9D:30:75:F9:7C:07:1C:E3
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0191559E18B721C5AE10FD873A506379250D
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/b1/028fa2-4a3c-4107-aff3-b08dfc118ccc/1/otIJQ2BBB_arGBOenTB1-XwHHOM.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/b1/028fa2-4a3c-4107-aff3-b08dfc118ccc/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 15 Aug 2024 10:38:30 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    IP: 193.43.105.0/24
                          IP: 2001:3d80::/29

Validation:               Failed, certificate revoked on Tue 22 Oct 2024 07:43:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:55:9e:18:b7:21:c5:ae:10:fd:87:3a:50:63:79:25:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Aug 15 10:38:30 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=a2d20943604107f6ab18139e9d3075f97c071ce3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:8c:93:28:6c:4f:af:4a:c4:c3:9b:1f:a3:a2:
                    cb:4d:3f:d2:4b:57:f9:ef:85:05:11:5f:45:3a:ea:
                    7e:0c:ca:1c:95:71:72:f2:1f:22:39:64:fd:6f:34:
                    b6:97:27:24:c8:e0:3d:02:cc:fb:fb:23:e7:46:49:
                    e1:e4:44:81:d3:1a:50:b4:60:02:9f:58:3d:89:bc:
                    8a:dc:9d:85:86:57:c8:ca:15:8f:8a:ce:b2:29:dc:
                    57:a7:67:d1:bc:73:90:a0:13:35:23:0d:f8:55:fd:
                    c5:0f:93:5a:e6:b0:c7:9e:7d:3b:2b:00:bf:41:16:
                    32:31:0b:57:f8:50:8a:33:a9:d1:f3:22:a3:a8:a3:
                    ad:39:37:49:7a:90:e0:87:17:42:06:c5:a9:b7:99:
                    f4:99:79:57:b9:b5:e2:47:3b:24:77:f8:d3:b2:7f:
                    c5:9f:73:ce:f5:4a:13:61:1e:c1:18:51:7b:37:9e:
                    8b:fc:fc:eb:83:c3:9c:8e:72:82:67:fe:58:f3:7e:
                    a1:0b:c1:15:4f:18:2d:b8:4d:3e:e1:a4:33:dc:dd:
                    01:ba:52:95:e0:cd:e3:fb:ac:e7:2f:b8:33:3a:72:
                    6a:b3:ce:6f:29:44:d0:79:22:72:88:13:86:fe:77:
                    44:13:8c:de:12:ea:02:03:39:d2:20:cf:00:7a:65:
                    a4:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:D2:09:43:60:41:07:F6:AB:18:13:9E:9D:30:75:F9:7C:07:1C:E3
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/028fa2-4a3c-4107-aff3-b08dfc118ccc/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/028fa2-4a3c-4107-aff3-b08dfc118ccc/1/otIJQ2BBB_arGBOenTB1-XwHHOM.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.43.105.0/24
                IPv6:
                  2001:3d80::/29

    Signature Algorithm: sha256WithRSAEncryption
         1d:96:db:9a:c4:46:06:b5:ac:76:04:5e:4c:b2:b2:c5:bb:40:
         3e:55:b9:6f:7b:4a:a5:a5:5c:c3:be:93:6c:53:66:f2:2a:2c:
         ea:9a:78:71:dd:e4:4f:d4:16:80:89:b5:ed:4b:9b:53:04:f5:
         54:0e:39:bd:2a:87:3b:68:90:1b:2f:16:e3:af:a9:62:e1:01:
         51:c2:09:2a:c3:fa:db:8e:ac:01:8b:13:80:85:1b:50:ea:82:
         43:a5:a0:db:78:e2:2e:c1:7e:5a:99:e8:f8:09:da:c7:49:d1:
         c2:38:5c:4c:9e:da:fb:f8:07:ec:3c:97:16:b6:47:d8:e5:d5:
         7c:dd:56:84:16:5c:ff:fd:bf:56:20:b3:97:0b:63:e8:bb:df:
         cd:28:eb:97:45:c8:3f:80:d4:b7:b9:4a:4f:3c:37:7d:59:d8:
         66:91:0f:95:e5:74:39:8f:af:76:eb:aa:91:c0:62:e4:df:b0:
         60:65:fc:2d:98:1e:86:18:bb:ee:2b:5e:c8:5e:ad:6e:29:3a:
         fc:9b:3c:64:34:c7:1b:56:24:f1:fa:35:fa:2d:d0:83:64:b5:
         5e:47:21:d7:b2:4d:df:1c:2d:af:3c:9c:cd:4f:5f:99:06:0a:
         2f:78:2c:0c:81:55:7e:71:8a:ed:ba:60:f0:9c:f1:06:9e:bf:
         05:87:2f:5c
-----BEGIN CERTIFICATE-----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