Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/otvz3s6IL62KI3Ro4I_XvrHK-jk.cer
File:                     otvz3s6IL62KI3Ro4I_XvrHK-jk.cer (raw, json)
Hash identifier:          YRILH2aF8k3iSP4aicIp4nVP3tB8ejO8hVZzK7LluBg=
Subject key identifier:   A2:DB:F3:DE:CE:88:2F:AD:8A:23:74:68:E0:8F:D7:BE:B1:CA:FA:39
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01857244ACE03D6F88882A5C08362E2C4983
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/78/c87266-0d64-449c-ba46-0b617fe7c123/1/otvz3s6IL62KI3Ro4I_XvrHK-jk.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/78/c87266-0d64-449c-ba46-0b617fe7c123/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 02 Jan 2023 11:36:21 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 146.19.9.0/24

Validation:               Failed, certificate revoked on Mon 20 Nov 2023 08:28:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:72:44:ac:e0:3d:6f:88:88:2a:5c:08:36:2e:2c:49:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 11:36:21 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=a2dbf3dece882fad8a237468e08fd7beb1cafa39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:bf:c9:11:95:b3:82:f5:40:64:62:3f:fe:ac:
                    15:4d:ac:4e:d3:b9:08:ac:2d:e1:b4:ba:21:b8:6d:
                    ae:07:fc:e4:c6:81:49:5a:aa:05:69:24:05:51:0e:
                    d7:d9:f5:3d:15:3e:21:7d:30:62:c8:a1:34:d1:67:
                    b0:a0:8b:b7:85:9f:74:81:db:39:c7:a8:17:c7:50:
                    f1:39:26:1f:7e:dc:46:fb:7d:8d:95:65:e4:fa:e8:
                    c5:76:14:9a:1d:01:7c:fc:58:0f:bc:d6:4a:f1:0d:
                    4d:4b:c7:ad:50:37:d6:b8:bf:8b:8f:36:14:4f:22:
                    b2:eb:5b:aa:89:a8:7a:aa:68:c2:11:3a:8f:27:45:
                    b1:cf:82:df:6a:d8:ab:8e:68:40:15:85:74:23:83:
                    60:2b:d5:b0:28:bb:79:c9:98:31:e5:a6:8b:52:70:
                    d0:26:20:ff:7e:35:30:d1:40:ce:dc:ac:65:0c:32:
                    10:2d:4c:e3:bc:5d:98:47:99:68:d7:5d:f9:6f:53:
                    2e:c5:1b:ff:47:80:ce:2f:a4:b1:e9:1a:b2:b0:35:
                    d7:1e:00:7c:a0:d6:1a:b4:6c:11:6a:08:4e:fa:51:
                    df:be:86:e0:73:58:1c:6c:f1:7a:e2:6f:a3:80:6a:
                    c0:e0:f8:21:a6:89:ed:ce:0a:42:1d:5c:55:62:32:
                    a5:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:DB:F3:DE:CE:88:2F:AD:8A:23:74:68:E0:8F:D7:BE:B1:CA:FA:39
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/c87266-0d64-449c-ba46-0b617fe7c123/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/c87266-0d64-449c-ba46-0b617fe7c123/1/otvz3s6IL62KI3Ro4I_XvrHK-jk.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.19.9.0/24

    Signature Algorithm: sha256WithRSAEncryption
         39:4d:12:a9:a0:6a:6b:b8:7a:14:c9:8e:72:b8:4b:35:57:76:
         27:af:5f:7f:ab:96:f0:48:3c:41:26:6e:2c:6e:53:c7:df:42:
         9c:c3:56:0b:b8:7d:12:f9:26:d7:c5:f7:b7:b2:03:58:0b:42:
         55:9a:cc:b0:a9:2b:5f:ca:a6:55:11:c5:a3:e6:62:48:eb:cf:
         e7:0f:9d:3d:3a:74:ef:10:25:09:2f:c3:91:ee:e0:d1:e5:84:
         d2:a1:45:f8:67:5e:5e:5b:30:3b:dc:a7:24:b2:c5:5e:11:c5:
         57:ab:2d:ab:31:66:46:5e:e8:53:b4:d9:d0:16:85:49:51:ed:
         92:09:ad:62:2a:10:d7:b4:f3:64:5e:0b:f4:f1:a4:aa:48:53:
         2f:a4:7e:f5:27:f9:a8:27:5b:79:0f:c4:b9:cf:08:93:60:9f:
         bb:b4:f7:5e:a7:30:18:ab:6c:9c:dc:8b:64:eb:24:fd:a1:5f:
         2f:23:ad:24:a2:f8:59:b9:b7:c0:7a:1b:16:01:d4:df:59:3c:
         69:d2:2d:94:c0:5e:09:5f:cc:67:8f:01:4c:f8:6a:41:ea:10:
         8e:78:cd:e4:61:bf:96:62:75:17:d6:d5:a9:d0:45:13:76:de:
         fd:0b:b6:b1:95:07:c6:11:c0:62:ce:e4:e9:d2:98:08:4a:33:
         8e:99:d9:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----