Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/vKXoztU5UgpGHcgnLvl8gHyXr9Y.cer
File:                     vKXoztU5UgpGHcgnLvl8gHyXr9Y.cer (raw, json)
Hash identifier:          tnHAuQ3hOukzwr+L5qFqTtuZSjYX2j4HAGOs/l45Z9k=
Subject key identifier:   BC:A5:E8:CE:D5:39:52:0A:46:1D:C8:27:2E:F9:7C:80:7C:97:AF:D6
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856CAD21838D8113DC8F60419FC80A4E19
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/4c/2e5665-996c-4748-b27d-c920b000f4e6/1/vKXoztU5UgpGHcgnLvl8gHyXr9Y.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/4c/2e5665-996c-4748-b27d-c920b000f4e6/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 09:32:43 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 185.184.219.0/24
                          IP: 2a03:cc40::/29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6c:ad:21:83:8d:81:13:dc:8f:60:41:9f:c8:0a:4e:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 09:32:43 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=bca5e8ced539520a461dc8272ef97c807c97afd6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:07:a5:1a:02:32:cf:d2:2e:94:95:43:a9:d0:
                    af:4e:e8:08:cf:f7:60:2f:91:3d:2e:5e:5f:93:0d:
                    93:5f:2b:be:ae:4c:f9:63:b0:6e:4c:85:53:0d:aa:
                    ee:7e:fc:e3:de:0d:f8:96:cf:2b:69:fc:89:ac:d2:
                    dd:cb:1a:9f:07:cb:58:ae:8b:30:48:90:48:88:97:
                    bf:84:41:6c:0c:30:0f:4e:3f:0c:82:12:cf:67:10:
                    ea:dd:1e:64:92:73:63:30:8a:56:e1:d7:be:ed:c4:
                    b1:8b:6f:a3:7f:03:7a:60:45:dc:d3:10:54:f0:06:
                    55:16:64:17:d2:b0:fc:39:71:f8:aa:99:1d:1b:16:
                    37:74:3f:94:2c:b2:a6:38:d3:2e:d6:25:35:bd:c6:
                    79:80:6f:2f:39:07:6f:34:c7:7a:9a:0c:8e:76:03:
                    11:78:4b:bf:84:44:dd:f4:41:d7:f7:22:ee:e7:a1:
                    e9:9b:93:8c:68:56:89:4a:b2:91:ae:46:aa:a2:c5:
                    a8:b5:89:ef:77:c4:58:36:e0:e0:bc:e9:ed:f8:a5:
                    2c:16:fc:b5:bf:8f:51:66:84:6d:d7:db:62:3f:66:
                    78:64:c3:00:7a:f7:c8:30:38:36:65:bd:05:f5:5b:
                    24:4b:1b:9e:df:39:f9:ae:84:6d:b1:ad:6b:ac:f5:
                    52:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:A5:E8:CE:D5:39:52:0A:46:1D:C8:27:2E:F9:7C:80:7C:97:AF:D6
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2e5665-996c-4748-b27d-c920b000f4e6/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2e5665-996c-4748-b27d-c920b000f4e6/1/vKXoztU5UgpGHcgnLvl8gHyXr9Y.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.184.219.0/24
                IPv6:
                  2a03:cc40::/29

    Signature Algorithm: sha256WithRSAEncryption
         9f:28:8b:b9:bc:03:30:47:45:eb:cd:a5:e5:8d:4f:2a:f9:61:
         b4:86:8f:a8:48:0d:6b:bb:f1:a4:e4:0e:45:23:f1:1f:76:cd:
         be:43:6e:81:35:5f:16:96:c4:07:60:24:63:92:47:24:d9:53:
         fb:68:71:c0:b4:bb:18:b8:b7:89:f9:70:25:18:5c:de:68:e6:
         86:e3:43:5c:72:73:95:32:57:42:3b:37:71:8c:a7:88:75:e2:
         2f:a1:b5:95:e1:ae:7c:4d:53:4b:f1:3a:17:df:5b:20:f3:98:
         f5:4b:ba:0a:69:21:7a:91:1e:d7:ed:fe:8e:83:40:a8:4b:a6:
         f4:8a:25:53:d0:da:fc:96:48:42:92:5b:f2:45:2c:df:77:4f:
         bb:d4:8b:d9:ed:4d:bc:be:9a:64:3a:de:0f:7e:2f:b2:f1:75:
         c4:e6:4d:17:63:99:aa:c4:1d:32:5d:18:38:7e:15:b3:9a:6a:
         7b:84:30:1f:ea:ac:0b:1d:41:3e:81:b7:29:b3:f3:95:7e:8c:
         f7:a7:3f:41:bd:88:eb:7e:c6:95:d1:9f:2a:ac:89:24:da:94:
         95:3d:68:1d:95:42:9b:a6:57:b8:57:5c:d7:56:1f:23:07:62:
         60:17:d0:a2:0c:a6:06:97:ef:07:d9:42:34:5b:57:b1:51:58:
         ea:a0:0c:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:32 2023 by rpki-client on console-fra.rpki-client.org