Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/yd6HwTyh0b-_CWdskCHQsjhqmPU.cer
File:                     yd6HwTyh0b-_CWdskCHQsjhqmPU.cer (raw, json)
Hash identifier:          5a51oBBCZhlAgAQAy4hqMqgvP1Jr9E7y5Vg2D85axEo=
Subject key identifier:   C9:DE:87:C1:3C:A1:D1:BF:BF:09:67:6C:90:21:D0:B2:38:6A:98:F5
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0185708B9027199DCDE1A62186E158AB1623
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/c2/e2d003-2a0b-4bad-84c9-f976b1400b0b/1/yd6HwTyh0b-_CWdskCHQsjhqmPU.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/c2/e2d003-2a0b-4bad-84c9-f976b1400b0b/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 02 Jan 2023 03:34:32 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 185.210.192.0/22

Validation:               Failed, certificate revoked on Wed 06 Dec 2023 15:13:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:8b:90:27:19:9d:cd:e1:a6:21:86:e1:58:ab:16:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 03:34:32 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=c9de87c13ca1d1bfbf09676c9021d0b2386a98f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:2f:3d:f1:6f:59:c6:0a:e9:ab:0b:93:4e:16:
                    75:51:b8:a7:e3:7f:40:70:91:a7:c2:8b:b5:0d:d8:
                    e8:4f:11:2d:4a:d9:e7:e9:83:a3:97:28:19:ab:73:
                    eb:61:74:3d:11:85:10:0f:37:55:ef:e0:c4:d4:ab:
                    db:05:af:9c:50:25:d9:f5:db:d8:d0:c4:c0:a5:de:
                    1a:82:7b:d6:8e:55:bd:bd:da:00:5c:b6:90:fa:cd:
                    41:0c:ad:61:47:5e:dd:dd:90:0e:05:b9:1b:12:20:
                    64:c0:73:92:fb:eb:03:c7:7b:82:e4:f7:21:9b:da:
                    42:8e:ee:61:f9:ec:90:99:da:d8:ab:f1:39:12:67:
                    de:a8:f0:44:2b:2e:c1:92:e6:c3:cc:20:ea:6a:fc:
                    f9:fb:2a:8e:60:19:e8:9e:70:fb:61:b9:e2:ba:31:
                    f4:8c:77:5d:15:a7:0d:5c:7e:53:91:90:19:8e:08:
                    8e:d3:c0:65:60:44:39:24:97:1e:88:20:2e:5e:b6:
                    50:f3:3b:60:7d:33:82:12:4c:b0:85:73:82:ec:03:
                    4b:64:05:fc:74:46:ef:e8:ff:f8:1a:76:7c:54:20:
                    3a:80:28:ff:dc:ec:fc:73:66:fe:cc:a7:76:0e:0e:
                    28:f1:57:1d:74:8b:44:78:9c:b2:06:90:29:f5:13:
                    a8:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:DE:87:C1:3C:A1:D1:BF:BF:09:67:6C:90:21:D0:B2:38:6A:98:F5
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/e2d003-2a0b-4bad-84c9-f976b1400b0b/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/e2d003-2a0b-4bad-84c9-f976b1400b0b/1/yd6HwTyh0b-_CWdskCHQsjhqmPU.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.210.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         35:b7:73:10:ea:1d:ab:a6:13:b0:41:0a:73:81:0b:8e:19:85:
         3f:3d:8d:6d:32:c3:8d:fa:18:c1:c6:48:e4:04:8f:a2:2e:c2:
         9e:04:e7:89:b6:cd:35:79:78:91:dc:5d:b7:47:ad:2e:63:41:
         02:bb:4a:ba:da:6f:ee:02:7e:c7:32:38:59:08:0c:12:44:59:
         76:5e:eb:9d:7a:37:95:e4:c3:23:ca:b5:25:b8:b4:a0:aa:ee:
         13:62:28:13:1d:ff:d5:24:47:33:39:13:39:cd:53:12:da:76:
         15:ef:34:a1:08:a4:89:04:97:8e:49:2f:db:eb:e1:b3:32:46:
         62:b7:33:d9:8c:30:e8:3d:f3:02:90:f1:a5:86:1c:83:7d:95:
         71:cd:e0:8c:00:05:cb:19:89:bc:9a:b4:23:8a:7a:7f:08:0b:
         48:94:db:25:38:d5:6e:78:22:74:59:3e:b8:6a:96:0a:16:15:
         49:2f:89:9e:14:13:79:36:9c:43:c6:45:95:f3:b6:52:02:1c:
         f0:98:e9:1a:ad:cb:1f:25:96:b3:ae:76:45:15:e4:14:50:f8:
         e9:9f:50:e8:63:c7:3b:bc:4b:52:73:07:54:35:5b:7e:e5:a8:
         b2:56:47:25:db:c9:a8:a5:96:16:c6:b8:e0:aa:3a:bb:5b:30:
         df:65:ee:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----