Certificate

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/81D53098D8D1E28A32AA34A9397BC06E8F754640.cer
File:                     81D53098D8D1E28A32AA34A9397BC06E8F754640.cer (raw, json)
Hash identifier:          GIUkLOyd7thnAvp/rc9wpxMXTtcqaCxAVIOwBIKO82M=
Subject key identifier:   81:D5:30:98:D8:D1:E2:8A:32:AA:34:A9:39:7B:C0:6E:8F:75:46:40
Authority key identifier: 5A:E4:43:70:29:65:95:39:F5:4F:90:0B:35:E4:3B:E0:6A:94:B3:7B
Certificate issuer:       /CN=5ae4437029659539f54f900b35e43be06a94b37b
Certificate serial:       0F9F32F0F31CBA1311638D0B4EEB07C005633142
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WuRDcClllTn1T5ALNeQ74GqUs3s.cer
Manifest:                 rsync://rsync.paas.rpki.ripe.net/repository/da9f215d-a978-402c-9064-4de4fd4943af/1/81D53098D8D1E28A32AA34A9397BC06E8F754640.mft
caRepository:             rsync://rsync.paas.rpki.ripe.net/repository/da9f215d-a978-402c-9064-4de4fd4943af/1/
Notify URL:               https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before:   Fri 14 Jun 2024 02:29:08 +0000
Certificate not after:    Fri 13 Jun 2025 02:34:08 +0000
Subordinate resources:    IP: 2a0f:85c1:331::/48

Validation:               Failed, certificate revoked on Wed 26 Jun 2024 01:39:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:9f:32:f0:f3:1c:ba:13:11:63:8d:0b:4e:eb:07:c0:05:63:31:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ae4437029659539f54f900b35e43be06a94b37b
        Validity
            Not Before: Jun 14 02:29:08 2024 GMT
            Not After : Jun 13 02:34:08 2025 GMT
        Subject: CN=81D53098D8D1E28A32AA34A9397BC06E8F754640
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:85:3f:04:d0:d3:1d:10:bc:2a:0d:89:58:be:
                    5a:74:65:18:71:63:ac:73:09:82:f8:6b:6b:3d:f1:
                    41:b8:75:9f:6f:b5:f4:45:39:59:53:a1:da:e7:ee:
                    bc:51:1a:43:3c:7f:23:b9:95:48:7e:59:47:77:61:
                    69:3a:78:2c:8b:e0:54:0c:93:ba:26:db:28:8f:6c:
                    06:68:ff:09:12:58:16:25:80:26:c3:cd:f9:13:03:
                    23:6f:6a:ed:c8:9c:6c:a9:50:f2:31:f7:9a:2e:2b:
                    f4:f2:74:e2:16:47:28:61:5a:1f:02:60:44:36:5f:
                    97:e0:c4:0f:43:28:00:e4:88:56:66:22:2a:12:aa:
                    d4:21:96:55:fe:df:02:2f:8e:09:bf:26:b4:4e:21:
                    80:79:15:0b:b5:49:79:b7:c0:5e:d9:0e:6c:e7:9e:
                    1e:2a:ff:60:72:72:00:90:07:83:c4:e6:f8:f8:66:
                    11:fc:ea:b4:4a:68:c4:7a:4f:a4:a8:91:e1:03:72:
                    7f:6c:71:99:86:8e:99:a8:df:bc:c8:61:ac:54:2b:
                    8d:27:25:4b:8e:a2:1d:f8:d6:58:f8:ff:8d:29:5c:
                    b1:aa:25:b8:28:05:77:88:60:3a:66:5f:5e:71:52:
                    81:13:0b:51:3f:bf:af:e8:0f:6e:dd:b5:2e:34:9f:
                    5f:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                81:D5:30:98:D8:D1:E2:8A:32:AA:34:A9:39:7B:C0:6E:8F:75:46:40
            X509v3 Authority Key Identifier:
                keyid:5A:E4:43:70:29:65:95:39:F5:4F:90:0B:35:E4:3B:E0:6A:94:B3:7B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/5AE4437029659539F54F900B35E43BE06A94B37B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WuRDcClllTn1T5ALNeQ74GqUs3s.cer

            Subject Information Access:
                CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/da9f215d-a978-402c-9064-4de4fd4943af/1/
                RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/da9f215d-a978-402c-9064-4de4fd4943af/1/81D53098D8D1E28A32AA34A9397BC06E8F754640.mft
                RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:85c1:331::/48

    Signature Algorithm: sha256WithRSAEncryption
         33:37:dc:e0:97:71:35:bc:43:c6:7d:68:8d:b9:a9:1a:55:71:
         d0:df:1c:f7:8d:9e:92:a1:56:89:8a:7f:3d:ae:84:cc:f2:48:
         f9:a4:8b:90:e3:95:a3:c4:0a:a3:b7:d0:ac:89:b0:ae:18:bc:
         5b:8c:82:6b:70:0b:eb:43:29:c5:5c:d4:79:9d:8c:45:1b:4b:
         e3:31:e8:2c:e9:57:43:c5:bf:d2:c3:dd:64:65:95:bc:4e:1d:
         c4:c9:8b:97:bb:69:a5:24:f8:49:b0:f2:8f:9e:82:e0:3b:e8:
         e7:ae:85:5f:89:8d:9c:0a:23:87:ad:d9:ab:3f:87:77:89:05:
         10:84:cd:6e:ec:d5:3b:f9:32:9a:62:0e:12:e8:8d:88:4b:ae:
         f7:6f:ee:62:0f:20:83:8b:e9:b8:61:a0:3c:2f:87:06:ed:07:
         23:9d:df:22:53:bf:ef:40:d1:e9:8d:2f:49:38:3d:46:af:f4:
         2a:32:4f:74:6f:54:10:a1:bf:cf:e7:e8:44:60:d8:52:51:bd:
         fa:4e:67:1d:ba:37:2a:90:d4:2e:71:f8:32:80:41:8b:21:8c:
         7c:f9:20:63:64:44:cb:ac:a7:38:ac:65:53:e9:43:c3:25:88:
         96:0d:a0:1b:12:50:36:b9:3a:59:b1:fd:34:88:b5:a1:7a:4a:
         8e:aa:e9:21
-----BEGIN CERTIFICATE-----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