Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8SADbAA8k6wSA2gREoP3oGGQajs.cer
File:                     8SADbAA8k6wSA2gREoP3oGGQajs.cer (raw, json)
Hash identifier:          1+dJWXIVisC3qwL4wk9L62S6fjyoUGL/2lsOqleXQyQ=
Subject key identifier:   F1:20:03:6C:00:3C:93:AC:12:03:68:11:12:83:F7:A0:61:90:6A:3B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0189FED6124AA65ADC38D0D8A10A3F841856
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/f9/143392-d868-4a26-8543-3aa2227badfe/1/8SADbAA8k6wSA2gREoP3oGGQajs.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/f9/143392-d868-4a26-8543-3aa2227badfe/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 16 Aug 2023 14:53:09 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 2a0b:8440::/29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:fe:d6:12:4a:a6:5a:dc:38:d0:d8:a1:0a:3f:84:18:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Aug 16 14:53:09 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=f120036c003c93ac120368111283f7a061906a3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:57:0a:18:ff:cb:2e:24:cf:b0:02:70:9d:bf:
                    b7:04:6f:3a:48:a3:dd:40:28:a2:2f:7e:d5:2d:bd:
                    60:50:62:ac:4c:a8:4d:c9:7e:e8:c3:36:99:44:69:
                    61:a8:2d:dd:c4:ea:1d:33:6c:a2:35:d0:73:f0:fa:
                    a3:c1:a4:c0:e9:e8:dc:df:63:4e:f9:c7:d5:77:64:
                    a4:7b:be:b9:dd:fe:67:68:69:2b:d5:e3:6b:7a:58:
                    0d:2a:32:67:db:de:74:86:f9:85:12:78:49:53:ea:
                    a2:f1:1a:ed:58:9d:95:ef:30:e1:f8:16:f7:98:27:
                    1e:ca:69:55:fb:9c:a9:28:aa:5e:53:fb:2a:ad:e0:
                    ff:18:75:17:ed:5b:18:4f:b0:af:64:5a:2a:06:a7:
                    ef:58:7c:e5:a3:51:74:17:03:f2:06:9e:39:01:e7:
                    86:00:b6:8a:76:54:6d:5b:09:a2:b6:15:15:bb:01:
                    ba:f4:94:43:ee:7c:c7:61:e4:97:74:86:76:f4:98:
                    d3:be:11:35:1a:c8:ca:6e:e0:bb:3a:09:da:ef:b2:
                    7b:09:3d:bb:7c:02:0b:5d:bc:93:e5:03:ad:d6:46:
                    a2:d4:3f:8c:78:10:aa:e6:8a:22:c9:bb:62:aa:1a:
                    23:3b:36:6d:1d:94:7c:1e:6e:1f:12:9d:fe:a3:6b:
                    e3:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:20:03:6C:00:3C:93:AC:12:03:68:11:12:83:F7:A0:61:90:6A:3B
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/143392-d868-4a26-8543-3aa2227badfe/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/143392-d868-4a26-8543-3aa2227badfe/1/8SADbAA8k6wSA2gREoP3oGGQajs.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0b:8440::/29

    Signature Algorithm: sha256WithRSAEncryption
         1d:c9:28:ae:b6:16:8e:48:44:63:dd:c6:b0:ba:fe:47:b9:75:
         b0:59:03:ee:e7:cd:dc:4c:07:eb:2e:80:0d:94:be:eb:4e:19:
         16:db:ee:c5:a8:36:b7:c4:3a:c8:12:32:db:4e:df:1c:be:5d:
         68:ed:85:3d:f1:58:9c:90:1f:35:28:0f:bc:cd:71:88:bc:31:
         62:3e:13:14:9d:ac:ba:30:ce:a0:30:9b:02:64:2f:95:02:74:
         b2:94:e2:3f:5c:8c:37:dd:61:ee:3b:48:fd:e5:00:88:26:f5:
         e4:30:51:b7:35:df:54:83:ac:c5:c8:30:33:a4:7a:f9:bf:15:
         ae:85:34:3f:06:66:ad:e0:87:09:d4:3c:dc:66:2e:cc:25:7e:
         77:db:d3:28:6a:9d:32:61:e1:2c:fb:af:b9:04:cb:ce:1f:a5:
         53:34:42:73:7d:d4:ea:73:92:a9:da:04:09:b7:f9:1c:f6:8d:
         99:ef:ee:c4:41:d9:eb:47:8b:f8:ae:ee:05:1f:55:65:03:c4:
         ad:e5:38:e3:e6:04:40:47:6a:fe:10:24:18:79:8d:05:6a:fa:
         a1:4e:e9:14:6e:41:6c:45:92:6b:50:ed:fb:c6:3d:b6:75:48:
         a6:0c:03:99:48:5c:5f:f6:a4:cc:43:c8:fd:5a:8c:58:9c:83:
         f5:e3:fd:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----