Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/rjtanCwUBLhzLO62S_-3Pc-ncWk.cer
File:                     rjtanCwUBLhzLO62S_-3Pc-ncWk.cer (raw, json)
Hash identifier:          Od352dxQTCHOLDWeusMDdgMc8Zr9jnYG/0dBdoNlTRQ=
Subject key identifier:   AE:3B:5A:9C:2C:14:04:B8:73:2C:EE:B6:4B:FF:B7:3D:CF:A7:71:69
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856D1A18FE9F3A15B49CAC41A9ACF71B50
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/42/c3510e-b642-40df-bae9-f453aecc7b33/1/rjtanCwUBLhzLO62S_-3Pc-ncWk.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/42/c3510e-b642-40df-bae9-f453aecc7b33/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 11:31:45 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 185.235.231.0/24

Validation:               Failed, certificate revoked on Mon 06 Nov 2023 10:52:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6d:1a:18:fe:9f:3a:15:b4:9c:ac:41:a9:ac:f7:1b:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 11:31:45 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=ae3b5a9c2c1404b8732ceeb64bffb73dcfa77169
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:85:1d:31:79:c3:5e:30:5c:d1:6b:66:56:a2:
                    f4:f7:39:d9:b4:6a:1f:97:a4:8f:3f:cf:72:a5:5e:
                    a6:cc:76:b1:49:ba:54:28:df:a0:eb:c6:51:71:76:
                    41:22:77:43:2e:79:a8:39:ad:90:3e:10:c9:d0:b8:
                    c9:ee:e0:e1:5d:cc:4d:fd:00:82:c6:15:a0:5c:93:
                    d3:ae:2c:46:07:e2:44:5e:3e:8a:a7:cd:1e:f6:bb:
                    d9:5a:7c:1e:dc:1d:54:9f:08:55:9d:c1:f5:b2:87:
                    01:44:99:51:df:74:6c:a7:e7:5a:ca:7d:14:a5:65:
                    00:3f:31:6c:e0:41:f7:12:89:3a:c2:f1:71:65:51:
                    45:a2:4f:8f:bb:aa:23:cf:f5:21:b3:d2:f6:80:ea:
                    2a:93:06:71:56:ab:51:3e:c6:f7:8d:eb:5c:45:f5:
                    c9:b6:84:0e:98:cb:44:1c:0a:60:a5:00:f8:c9:c7:
                    99:1f:88:f5:0d:92:25:68:b8:f7:3c:ff:fa:9a:b0:
                    02:42:e9:60:ae:49:d5:6f:06:42:44:73:61:f8:bd:
                    e7:25:12:91:8d:f7:8e:3d:fc:3c:ac:e4:a8:fa:3c:
                    5d:45:6c:60:a1:f9:3c:55:c7:ba:6d:e0:b2:14:8e:
                    65:bd:25:72:9d:ed:b6:df:8f:4d:e9:95:77:b4:1c:
                    0e:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:3B:5A:9C:2C:14:04:B8:73:2C:EE:B6:4B:FF:B7:3D:CF:A7:71:69
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/c3510e-b642-40df-bae9-f453aecc7b33/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/c3510e-b642-40df-bae9-f453aecc7b33/1/rjtanCwUBLhzLO62S_-3Pc-ncWk.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.235.231.0/24

    Signature Algorithm: sha256WithRSAEncryption
         29:73:5b:05:f9:b5:de:ff:07:86:85:6b:20:84:dc:5a:0e:c5:
         2d:e6:c2:40:c4:aa:60:ab:ff:d9:3f:04:51:1c:07:83:43:54:
         ca:a0:68:07:6b:e5:6f:d4:c0:02:2f:7b:ac:f3:91:26:d9:bc:
         45:ea:35:68:74:4c:54:57:96:f5:69:39:63:73:1b:7d:2f:1c:
         ed:2e:0a:5c:02:82:94:b2:81:98:43:7a:82:f8:77:99:07:b9:
         5d:4c:06:8c:e1:7f:5e:14:c8:5b:4f:72:dd:de:75:50:0d:d5:
         35:8d:17:a7:ce:04:c4:63:0b:de:e1:df:9c:68:37:39:b2:d6:
         59:91:15:da:a9:85:cc:6b:6a:2b:a8:36:1d:4a:7b:3d:6c:bb:
         fc:1b:06:55:7d:1d:47:88:ef:c4:2e:9f:55:b6:d8:90:91:36:
         83:b5:7c:fd:41:aa:cd:2e:57:ec:71:ea:8c:b4:cc:9c:90:17:
         d6:97:7d:d2:11:f3:6c:eb:fe:00:d7:1a:2e:56:5b:18:63:4b:
         73:b6:cc:d6:51:06:d3:b4:ad:80:cd:45:16:37:58:02:5f:dd:
         8e:2c:15:8f:d7:cb:bb:41:e9:f5:34:a7:fb:78:46:93:33:c5:
         8d:42:e9:c5:6a:e9:00:7b:86:dc:67:b6:44:3f:c9:14:c4:38:
         39:af:7c:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----