Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/se5RigAr9Ktz_4kjJlDwUpiX2e4.cer
File:                     se5RigAr9Ktz_4kjJlDwUpiX2e4.cer (raw, json)
Hash identifier:          RG12Oo57tqNKeFP0ha66QgcY3DWnVVtku17Ebgg9JsI=
Subject key identifier:   B1:EE:51:8A:00:2B:F4:AB:73:FF:89:23:26:50:F0:52:98:97:D9:EE
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0185701E5789A28896FAE88707B01E98E3A4
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/24/4c2d86-df24-4340-8301-4a0074c72d29/1/se5RigAr9Ktz_4kjJlDwUpiX2e4.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/24/4c2d86-df24-4340-8301-4a0074c72d29/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 02 Jan 2023 01:35:14 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 80.254.224.0/22

Validation:               Failed, certificate revoked on Thu 21 Dec 2023 09:47:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:1e:57:89:a2:88:96:fa:e8:87:07:b0:1e:98:e3:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 01:35:14 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=b1ee518a002bf4ab73ff89232650f0529897d9ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:e0:3c:88:de:ba:95:c1:90:97:ec:64:18:3a:
                    ca:46:b9:48:77:f4:64:aa:74:1d:a9:c4:a5:2c:60:
                    54:57:f2:e8:90:54:ef:9f:b7:65:4d:77:e3:03:90:
                    93:2d:5b:0c:c4:50:92:0f:66:8e:11:0e:12:dd:32:
                    ee:c6:02:a5:94:19:ba:96:ac:98:c0:ba:c1:74:ca:
                    bc:0c:16:0b:7c:11:43:eb:cc:bb:3a:31:db:be:31:
                    ea:fb:f3:c4:80:bb:1b:f8:07:9e:56:8e:12:2f:0a:
                    b4:58:1c:dd:95:ce:63:ff:44:a9:a0:d2:03:00:37:
                    86:b7:3b:0b:da:92:f0:b5:e4:a3:b7:23:85:5d:28:
                    28:d1:0f:36:04:73:3f:34:4e:1b:bc:1c:3c:e0:20:
                    ed:f2:31:70:a8:2e:80:f7:33:fc:ac:36:68:6b:5b:
                    a5:77:c7:0f:80:ea:bb:52:d0:3f:64:6d:73:5c:a3:
                    23:45:36:31:dd:b2:a2:b8:d1:0b:33:b2:9a:ca:0f:
                    5c:f8:59:7f:13:8b:45:63:02:e0:3e:76:e1:e4:af:
                    17:f4:40:e6:ef:39:8d:ae:4c:fb:20:11:04:ab:bc:
                    f6:85:64:1e:f9:a0:e5:a1:1c:80:30:01:3d:12:b8:
                    aa:25:7b:34:24:69:81:df:01:ac:e4:e2:6c:e9:4b:
                    57:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:EE:51:8A:00:2B:F4:AB:73:FF:89:23:26:50:F0:52:98:97:D9:EE
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/4c2d86-df24-4340-8301-4a0074c72d29/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/4c2d86-df24-4340-8301-4a0074c72d29/1/se5RigAr9Ktz_4kjJlDwUpiX2e4.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.254.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4a:f1:b2:84:dd:f6:1e:ce:96:14:5e:00:99:88:1a:45:c3:4c:
         16:96:73:23:24:74:34:24:c7:74:bc:bf:bb:64:10:17:4b:ed:
         85:d4:cf:08:1a:fe:a0:18:19:99:c8:de:5d:d8:ee:2e:ca:72:
         12:f2:91:a8:b1:73:fe:d8:84:02:ad:7d:fb:7a:47:c6:03:0f:
         2f:46:d2:72:e1:3d:85:4f:f2:2a:2d:fe:9b:d9:08:b4:95:56:
         26:86:a0:d2:40:f5:97:a9:82:2d:4d:b8:1c:6b:5a:d0:99:31:
         8b:20:d9:77:e4:0e:d6:bc:3b:bd:44:f1:7a:81:2f:d9:66:39:
         ae:a3:96:bd:f0:4a:b5:52:2d:0d:7c:80:55:7d:f3:9b:df:8a:
         fa:1c:91:36:d9:2d:47:bd:57:65:14:e3:df:e3:e5:41:ef:b2:
         a7:cb:99:d6:1c:9c:96:2b:b2:71:9b:5d:1f:45:df:f2:73:a0:
         3d:0e:ad:c4:70:6d:db:f1:86:eb:77:ab:31:e0:20:bf:3e:6c:
         30:c6:d0:1b:bf:45:55:da:d0:29:e3:8d:d1:a5:30:0b:3d:29:
         07:9a:87:25:c6:ed:4f:f1:48:da:db:83:c5:46:f1:c5:38:15:
         4a:49:f6:ab:61:cd:94:ff:86:a1:7a:5f:60:b6:4a:ec:e5:87:
         9a:29:c7:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----