Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/tsL_O1BzWAOGXVbVKttFzqTWn5Y.cer
File:                     tsL_O1BzWAOGXVbVKttFzqTWn5Y.cer (raw, json)
Hash identifier:          Z57z0g6rEBexNXJU+hu3U1xm4sFxt2q6oLbyG0pgypw=
Subject key identifier:   B6:C2:FF:3B:50:73:58:03:86:5D:56:D5:2A:DB:45:CE:A4:D6:9F:96
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018CC801192C6395CF7D07FA8343D7B28BF3
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/d1/d44702-4933-4309-9b03-6c52d108bcfa/1/tsL_O1BzWAOGXVbVKttFzqTWn5Y.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/d1/d44702-4933-4309-9b03-6c52d108bcfa/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Tue 02 Jan 2024 02:29:24 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    IP: 146.19.228.0/24

Validation:               Failed, certificate revoked on Tue 02 Jan 2024 12:36:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c8:01:19:2c:63:95:cf:7d:07:fa:83:43:d7:b2:8b:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 02:29:24 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=b6c2ff3b50735803865d56d52adb45cea4d69f96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:ab:57:f1:80:c4:2e:97:ca:a2:7e:d6:2e:b1:
                    14:11:7a:e6:ea:d0:f6:42:91:59:d5:3c:8e:dd:da:
                    1c:18:8f:fc:17:c8:e1:6b:e3:d7:c6:5c:ae:c6:b8:
                    ca:d2:22:dc:06:38:0f:5c:06:84:b4:ba:0e:a5:24:
                    2c:84:27:a0:42:8b:c4:7a:a4:3f:3d:32:6d:cf:92:
                    d4:29:ca:69:54:3d:47:07:fc:2d:09:42:6a:ee:d4:
                    47:1d:e6:f8:12:b5:4a:8e:a3:74:27:53:29:97:53:
                    86:92:14:2b:cb:ac:2d:8f:a4:86:7c:df:75:1d:b5:
                    fb:5f:b8:6c:29:c7:d6:b2:dd:97:fb:47:41:80:89:
                    e8:66:09:41:29:df:82:8f:72:73:d8:3c:b6:50:d0:
                    42:ba:e9:30:71:21:18:95:41:f7:74:59:c1:85:e3:
                    6e:ce:fc:00:8b:aa:7a:a1:2e:20:39:d4:01:24:85:
                    ad:aa:6d:e9:07:67:58:4b:97:ff:bb:a8:c1:de:a8:
                    23:37:9c:fa:6c:25:09:cc:48:d7:e8:c4:9b:e9:d2:
                    ee:29:7c:1a:f5:26:f5:e2:56:09:a7:6c:c5:ac:c7:
                    9b:22:f2:e8:21:f1:2e:07:4d:94:48:9c:fa:98:49:
                    54:0c:cb:cf:1a:1c:5f:f0:a9:e6:26:f1:10:30:5a:
                    d9:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:C2:FF:3B:50:73:58:03:86:5D:56:D5:2A:DB:45:CE:A4:D6:9F:96
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/d44702-4933-4309-9b03-6c52d108bcfa/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/d44702-4933-4309-9b03-6c52d108bcfa/1/tsL_O1BzWAOGXVbVKttFzqTWn5Y.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.19.228.0/24

    Signature Algorithm: sha256WithRSAEncryption
         55:33:55:d9:70:7e:ca:ae:3d:1b:0a:93:53:16:e9:97:90:b8:
         41:65:1b:53:47:14:8c:f6:d2:41:1c:c0:36:e5:d6:4a:87:0f:
         33:3f:1d:c2:e3:4f:57:12:9b:99:cf:d2:be:7b:f1:5c:3d:1f:
         2b:c2:25:90:ed:ca:e9:d7:9e:b5:42:79:24:ba:13:22:0a:31:
         3f:2f:60:6b:3a:d3:83:ec:02:94:74:1f:d9:39:73:f8:bf:8d:
         ae:65:c4:47:bb:6f:97:9e:cd:47:56:93:12:08:e0:ed:98:7c:
         bc:78:30:f4:31:a0:5f:51:c2:bc:c1:87:a8:ea:5b:2c:4a:78:
         9a:a6:a1:29:bf:51:bb:fd:89:a1:a6:3a:45:ae:f3:82:89:ef:
         19:62:7c:9a:98:0e:ce:ea:34:f3:d1:f8:50:70:a2:c5:63:76:
         fd:f5:7b:38:77:31:d8:3c:b4:a8:3b:3f:d5:7c:ec:d0:4b:a5:
         a2:d8:69:2c:db:eb:6f:09:2a:08:6c:ed:f7:0f:b6:e6:ec:ac:
         2e:21:e4:d5:60:95:2a:c9:3d:ce:d1:ba:4c:e0:7f:f4:b7:2b:
         e7:6f:a5:fd:f8:ec:a5:e4:2c:6c:1b:23:17:da:35:3d:88:9c:
         dd:dc:69:aa:d8:7a:8f:99:41:30:78:92:b4:4c:11:f5:6e:86:
         3a:e1:3d:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----