Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/z0n505etj8sDuEMxgUAmelwhTbw.cer
File:                     z0n505etj8sDuEMxgUAmelwhTbw.cer (raw, json)
Hash identifier:          Lxcm6aZ5kmmKcKmaXmlITEKoirfNHtRhNRmtWuJ5kGo=
Subject key identifier:   CF:49:F9:D3:97:AD:8F:CB:03:B8:43:31:81:40:26:7A:5C:21:4D:BC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0186366646AC1239D0C9DBECE224E36BE58F
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/ee/3a8bad-97b7-456a-b74b-82f9528c41bc/1/z0n505etj8sDuEMxgUAmelwhTbw.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/ee/3a8bad-97b7-456a-b74b-82f9528c41bc/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 09 Feb 2023 13:38:37 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 193.202.126.0/24

Validation:               Failed, certificate revoked on Mon 13 Nov 2023 10:35:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:36:66:46:ac:12:39:d0:c9:db:ec:e2:24:e3:6b:e5:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Feb  9 13:38:37 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=cf49f9d397ad8fcb03b843318140267a5c214dbc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:e1:eb:6a:6a:63:cc:2d:1f:dc:89:93:54:a4:
                    4b:5b:07:5c:5b:93:06:36:34:08:b1:4b:a7:76:00:
                    02:5b:be:5e:64:19:b3:5c:0d:3c:fc:f3:31:b7:91:
                    33:cd:18:2c:58:6d:18:4c:28:da:9c:68:6e:ae:66:
                    e1:a6:cb:f7:54:65:38:c2:3e:05:3b:3c:ec:e2:e7:
                    b3:2a:f7:0d:e6:84:63:27:af:c1:74:b5:9a:02:01:
                    03:c4:c1:77:c0:9a:c6:57:82:dc:10:e1:af:14:1f:
                    4b:47:71:70:49:07:66:ec:0b:2e:a4:57:52:22:ac:
                    34:ca:52:19:f2:39:3c:89:41:0d:43:ba:0d:fa:04:
                    33:db:65:40:9b:9b:12:b2:cf:33:5b:9f:17:50:bf:
                    9a:f3:30:08:4e:3a:d2:3c:4d:34:59:a3:80:97:6b:
                    be:cf:42:92:69:17:f5:c0:0b:3d:99:d0:83:55:73:
                    7e:15:69:de:32:ac:5e:70:97:c6:da:c7:d1:c3:52:
                    90:8e:a3:81:60:d7:69:1f:41:7b:6e:7c:4f:c6:6e:
                    52:29:a0:37:01:61:c8:ef:b7:37:d8:a8:b4:31:0f:
                    7e:e6:75:14:d4:2d:4f:de:e3:46:a2:72:81:e6:16:
                    1f:5d:c4:f7:db:bc:f2:ea:22:ba:f3:d6:ed:6d:9a:
                    11:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:49:F9:D3:97:AD:8F:CB:03:B8:43:31:81:40:26:7A:5C:21:4D:BC
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/3a8bad-97b7-456a-b74b-82f9528c41bc/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/3a8bad-97b7-456a-b74b-82f9528c41bc/1/z0n505etj8sDuEMxgUAmelwhTbw.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.202.126.0/24

    Signature Algorithm: sha256WithRSAEncryption
         79:89:ae:2d:a6:41:6b:10:d7:43:e4:e4:25:bc:29:8a:aa:fa:
         63:b7:46:55:37:fd:ba:81:b6:68:c3:c8:a5:78:47:5c:52:cf:
         19:5f:a1:62:a2:fb:8d:b5:41:dc:c6:f0:0d:02:d8:95:b3:8d:
         75:a0:c5:90:45:78:a0:3b:c4:c9:2c:df:fc:2f:dc:3a:04:5c:
         0c:91:c8:85:8f:0a:27:fa:da:16:f0:5d:be:3e:36:21:bc:5f:
         93:02:82:36:fc:09:7c:5f:c1:43:02:63:7e:b5:c5:f2:00:b0:
         6d:11:71:21:2d:f5:6a:27:e4:7b:57:c3:2a:0a:f7:2f:21:cc:
         84:b4:e6:c4:fc:af:ba:d5:1b:39:17:6c:8a:43:54:4a:59:42:
         6c:21:a4:d4:c8:05:73:fe:9d:a0:48:44:aa:dd:4d:e4:ca:06:
         be:e4:a0:69:95:f8:fa:f1:99:3b:ba:a8:e7:2d:b6:6a:a8:37:
         b3:80:c9:8b:12:e4:07:d9:d2:01:7e:13:37:4e:79:b9:d3:fb:
         69:5f:c7:68:db:c5:07:7a:0f:e8:8d:55:96:9e:ae:9c:4e:7d:
         08:df:21:ac:80:56:b9:12:66:75:72:73:fc:20:94:03:cf:ad:
         7e:c8:79:f5:4b:60:54:bf:43:c3:78:4f:78:d4:c0:4c:e0:c5:
         c3:c8:a9:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----