Certificate

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/21a797f9-3c10-4536-aa64-09ca2d9545c8/0/4933E82359A31E92233CED54CD674AE9D68FB569.cer
File:                     4933E82359A31E92233CED54CD674AE9D68FB569.cer (raw, json)
Hash identifier:          asp93qBrXq4mfnkKpaXJS6WN0GFSsc4D0+m4MiUQPvE=
Subject key identifier:   49:33:E8:23:59:A3:1E:92:23:3C:ED:54:CD:67:4A:E9:D6:8F:B5:69
Authority key identifier: 07:D3:62:BD:D7:CA:6E:80:E2:C2:44:43:75:97:BD:47:EF:7A:4F:DE
Certificate issuer:       /CN=07d362bdd7ca6e80e2c244437597bd47ef7a4fde
Certificate serial:       17FE1AC60BB8EEF8DC025102C75C4D673C6F7104
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B9NivdfKboDiwkRDdZe9R-96T94.cer
Manifest:                 rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/2/4933E82359A31E92233CED54CD674AE9D68FB569.mft
caRepository:             rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/2/
Notify URL:               https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before:   Sat 30 Mar 2024 15:46:22 +0000
Certificate not after:    Sat 29 Mar 2025 15:51:22 +0000
Subordinate resources:    IP: 2a07:2487::/32

Validation:               Failed, certificate revoked on Sat 13 Apr 2024 12:30:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:fe:1a:c6:0b:b8:ee:f8:dc:02:51:02:c7:5c:4d:67:3c:6f:71:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07d362bdd7ca6e80e2c244437597bd47ef7a4fde
        Validity
            Not Before: Mar 30 15:46:22 2024 GMT
            Not After : Mar 29 15:51:22 2025 GMT
        Subject: CN=4933E82359A31E92233CED54CD674AE9D68FB569
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:40:a0:7f:4e:1d:ca:4b:5c:bb:8a:10:c4:c7:
                    c8:fa:39:f6:70:a4:b5:86:f6:ed:c4:2c:ba:27:97:
                    4b:f7:59:69:0d:83:b5:e8:bb:25:d1:ba:bd:b6:4e:
                    7c:e7:84:86:02:73:ad:21:35:57:8b:02:1d:ad:db:
                    02:d2:8e:55:ec:81:0c:dd:2c:be:1e:56:7c:5f:6c:
                    16:00:fe:5f:af:9a:e3:d6:c8:56:28:d6:e6:d0:c7:
                    e0:31:f1:90:70:ec:52:b5:06:d1:3b:1c:3b:42:a9:
                    6d:e6:46:12:de:03:06:54:db:2f:28:b4:ae:ad:69:
                    42:af:bf:40:4b:84:bb:0a:de:2d:e0:c3:08:b5:98:
                    35:43:9e:88:e0:ea:ec:c4:a3:d7:87:03:ba:a1:ca:
                    ac:39:b1:73:bf:89:20:b4:82:24:91:db:8d:42:54:
                    d8:aa:53:3c:af:33:99:ce:54:7c:ef:d3:46:03:89:
                    62:9a:5b:c8:7f:6b:d5:b6:ac:7f:68:61:6c:80:46:
                    c6:6c:85:9d:a9:e4:70:38:68:b3:ef:a7:bf:c5:f7:
                    07:0d:4d:db:cf:ce:ce:e6:9e:c1:5a:4b:2a:a9:7e:
                    09:55:22:97:c9:e7:ae:a4:aa:68:cf:63:86:61:24:
                    55:e4:56:3a:eb:8d:3f:2d:f6:9b:47:de:81:3e:e2:
                    1a:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                49:33:E8:23:59:A3:1E:92:23:3C:ED:54:CD:67:4A:E9:D6:8F:B5:69
            X509v3 Authority Key Identifier:
                keyid:07:D3:62:BD:D7:CA:6E:80:E2:C2:44:43:75:97:BD:47:EF:7A:4F:DE

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/21a797f9-3c10-4536-aa64-09ca2d9545c8/0/07D362BDD7CA6E80E2C244437597BD47EF7A4FDE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B9NivdfKboDiwkRDdZe9R-96T94.cer

            Subject Information Access:
                CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/2/
                RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/2/4933E82359A31E92233CED54CD674AE9D68FB569.mft
                RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:2487::/32

    Signature Algorithm: sha256WithRSAEncryption
         61:4b:77:62:a1:e5:19:dc:59:72:82:35:4c:41:62:b6:42:bd:
         93:21:85:bf:c7:39:53:39:b9:50:f8:b3:3d:f8:96:c7:c6:4e:
         d2:5e:c6:e7:aa:8a:16:e3:7a:e0:79:5e:9d:02:ac:aa:f0:a2:
         c8:06:ad:53:bb:4e:56:32:b2:28:03:7b:4a:8c:9a:c4:fc:6e:
         f9:fb:66:ce:a2:0e:f1:ef:fc:6c:24:83:49:2e:fc:cc:e6:30:
         07:f3:ce:73:3f:21:52:43:64:12:91:48:67:8f:af:99:0c:13:
         2c:8a:48:1d:59:e9:88:f7:c7:f1:72:3c:bf:98:9f:34:98:8c:
         94:07:9a:80:9c:fa:03:74:f3:c6:09:42:f0:28:51:da:6d:d3:
         01:fe:f7:ae:66:0c:c2:56:46:b3:c6:17:fe:8d:56:78:9b:19:
         91:f8:0a:33:7b:59:4e:3b:7d:07:3e:96:c7:31:1c:a5:4c:f7:
         c9:ca:0f:a3:99:a5:7c:e7:3f:0a:5a:42:a3:17:9a:48:69:50:
         9a:82:f1:dd:2f:8b:5f:38:7f:35:02:45:5e:a2:68:b9:74:d4:
         a7:33:b2:18:09:06:96:06:a1:47:51:bb:05:b6:70:6c:1a:bb:
         d7:b4:8a:34:7a:df:de:45:4b:10:6d:c6:ab:35:78:53:f0:24:
         86:9a:d9:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----