Certificate

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/9EB8A31DC6107F41BF3F7A14A13D9F81AF4F0838.cer
File:                     9EB8A31DC6107F41BF3F7A14A13D9F81AF4F0838.cer (raw, json)
Hash identifier:          ON6pbsZypFHFZQX6ZsQ9fW58ZvfEP95i6ybOWs8Ds7Y=
Subject key identifier:   9E:B8:A3:1D:C6:10:7F:41:BF:3F:7A:14:A1:3D:9F:81:AF:4F:08:38
Authority key identifier: 08:39:A9:3D:AB:54:4C:29:6F:FA:14:34:56:84:4A:8B:28:18:B1:D0
Certificate issuer:       /CN=0839a93dab544c296ffa143456844a8b2818b1d0
Certificate serial:       23C5BEFE5A246CD6969346BF527593B07468AC18
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
Manifest:                 rsync://rpki-repo.as207960.net/repo/rpki_ca_6fe1c4540d0347798f6b381e72aaf43c/0/9EB8A31DC6107F41BF3F7A14A13D9F81AF4F0838.mft
caRepository:             rsync://rpki-repo.as207960.net/repo/rpki_ca_6fe1c4540d0347798f6b381e72aaf43c/0/
Notify URL:               https://rpki.as207960.net/rrdp/notification.xml
Certificate not before:   Sun 30 Jun 2024 13:51:24 +0000
Certificate not after:    Sun 29 Jun 2025 13:56:24 +0000
Subordinate resources:    IP: 2a11:f2c0:b100::/40

Validation:               Failed, certificate revoked on Sun 07 Jul 2024 17:16:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:c5:be:fe:5a:24:6c:d6:96:93:46:bf:52:75:93:b0:74:68:ac:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0839a93dab544c296ffa143456844a8b2818b1d0
        Validity
            Not Before: Jun 30 13:51:24 2024 GMT
            Not After : Jun 29 13:56:24 2025 GMT
        Subject: CN=9EB8A31DC6107F41BF3F7A14A13D9F81AF4F0838
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:f4:d8:0a:8f:82:cb:10:fa:6d:48:6c:79:74:
                    44:e7:78:49:d4:52:36:ef:98:d3:5c:a1:ee:56:b0:
                    0b:85:35:a1:cb:42:af:8d:61:b7:9d:1c:95:60:2e:
                    c7:e0:12:d2:42:42:e0:9a:af:e6:2e:d4:a8:dd:8f:
                    da:14:61:f5:0b:bd:39:03:aa:8a:fe:6f:cf:a4:c0:
                    52:99:98:06:51:79:17:df:6b:e9:6e:51:52:18:bf:
                    59:63:a8:62:75:f3:06:93:e8:d0:b6:4d:fe:89:58:
                    44:0f:ea:27:16:96:7f:cb:b8:dc:19:30:c9:5a:cd:
                    00:02:c1:2c:1a:65:1f:6d:b2:61:b9:00:0e:8d:78:
                    14:3a:8d:1a:51:3f:fe:3d:94:d6:d9:c8:09:55:4e:
                    16:35:83:86:33:38:52:a0:c9:25:c4:50:73:e3:8d:
                    11:c8:90:60:f8:75:a4:31:99:f3:29:c5:e9:a0:5c:
                    40:bd:0d:a6:16:3f:85:8d:ed:5c:17:09:9f:d3:a3:
                    77:f2:3d:dc:15:0a:0f:20:e8:ec:aa:38:5f:d0:5a:
                    0d:9a:1b:f2:80:ec:86:56:6f:07:01:bb:28:01:f9:
                    9f:fc:5d:55:7e:2c:52:cf:de:45:69:34:d5:ad:19:
                    ca:22:8a:52:c2:d1:27:31:7b:98:f6:3f:4b:11:1b:
                    71:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                9E:B8:A3:1D:C6:10:7F:41:BF:3F:7A:14:A1:3D:9F:81:AF:4F:08:38
            X509v3 Authority Key Identifier:
                keyid:08:39:A9:3D:AB:54:4C:29:6F:FA:14:34:56:84:4A:8B:28:18:B1:D0

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_6fe1c4540d0347798f6b381e72aaf43c/0/
                RPKI Manifest - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_6fe1c4540d0347798f6b381e72aaf43c/0/9EB8A31DC6107F41BF3F7A14A13D9F81AF4F0838.mft
                RPKI Notify - URI:https://rpki.as207960.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a11:f2c0:b100::/40

    Signature Algorithm: sha256WithRSAEncryption
         be:c7:69:4e:b3:bb:c0:be:3e:22:53:0a:ab:51:83:cb:c1:c6:
         64:7e:d6:b6:f7:c2:39:d0:37:47:52:d5:98:77:dc:d6:71:58:
         5c:68:30:55:59:3f:d4:26:bf:d1:12:44:05:00:ea:4f:6a:41:
         31:4b:18:2e:2f:d0:c9:5f:46:2b:fa:8a:74:d7:7f:10:dc:b9:
         ea:76:e0:5e:09:10:e7:93:4f:b1:f2:24:e0:1f:fe:92:2d:d8:
         f6:47:cb:c5:63:62:39:86:6a:dc:38:b9:3f:5f:7b:f5:3d:75:
         70:76:27:94:62:57:49:ab:63:a2:93:1e:e6:cf:27:1b:7f:5a:
         18:09:4c:84:a8:3f:06:c6:61:92:f4:cb:e6:a7:a1:fe:9b:eb:
         4d:07:fc:5c:46:f4:bc:5f:8b:45:e5:71:4c:6f:50:bb:72:dd:
         83:66:e6:0b:19:a9:02:14:30:1c:61:39:d7:da:5c:5a:ee:ca:
         ad:87:5f:55:9e:a1:19:e1:6e:ca:45:04:0b:d1:c7:24:40:df:
         3a:f9:15:28:6b:cc:77:e6:bb:e0:08:b7:81:ae:4a:38:76:e8:
         4b:b0:eb:dc:20:e7:9f:25:6d:24:a0:cc:bf:82:7a:de:22:10:
         75:33:f4:08:67:6e:9f:85:64:fd:00:a9:c0:b0:88:7e:fb:aa:
         de:31:28:4c
-----BEGIN CERTIFICATE-----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