Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/_IVpUg4Np9h6poISSid01jZmteg.cer
File:                     _IVpUg4Np9h6poISSid01jZmteg.cer (raw, json)
Hash identifier:          DxMLHf2K4VuDkiyeqhW5F5/ZlOrwYjPUnTaotx3hHPw=
Subject key identifier:   FC:85:69:52:0E:0D:A7:D8:7A:A6:82:12:4A:27:74:D6:36:66:B5:E8
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0189BFD939CB35D712EBB41152E4EC35E014
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/35/3b1313-72e2-4c45-8568-ba2d1a0ac42d/1/_IVpUg4Np9h6poISSid01jZmteg.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/35/3b1313-72e2-4c45-8568-ba2d1a0ac42d/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 04 Aug 2023 09:20:31 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 192.144.28.0/22
                          IP: 194.5.8.0/22
                          IP: 212.81.32.0/22
                          IP: 2a0a:f8c0::/29
                          IP: 2a0b:2d80::/29
                          IP: 2a0c:7b80::/29
                          IP: 2a0c:c180::/29
                          IP: 2a0d:81c0::/29
                          IP: 2a0d:9ac0::/29
                          IP: 2a0d:cb40::/29
                          IP: 2a0d:e3c0::/29
                          IP: 2a0e:9fc0::/29
                          IP: 2a0f:8440::/29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:bf:d9:39:cb:35:d7:12:eb:b4:11:52:e4:ec:35:e0:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Aug  4 09:20:31 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=fc8569520e0da7d87aa682124a2774d63666b5e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:6e:94:5b:3b:17:8d:fc:ce:29:db:64:1c:64:
                    9d:f5:37:cc:5e:5a:85:a6:3b:28:9e:b6:17:a9:71:
                    29:45:7e:87:4e:a1:7c:66:4a:c3:cc:b3:e9:ab:30:
                    0d:aa:c5:56:72:1d:f4:89:95:f9:b6:d5:ae:42:a0:
                    95:85:d1:69:3d:2d:65:78:9c:c6:bc:ba:32:f6:04:
                    8f:fc:90:3b:2c:43:bb:f6:34:71:dc:46:a1:7f:5b:
                    5b:0d:aa:2c:e8:1f:1f:d0:8b:47:66:0e:c3:ca:f3:
                    d9:04:93:2f:fb:4a:c6:3c:70:c2:2f:e0:6a:1e:db:
                    5a:c4:d3:0c:d9:0c:97:68:6a:44:96:61:07:15:b6:
                    fe:7e:b9:03:40:ad:7f:36:8a:0a:29:70:7b:42:93:
                    b6:2d:90:9b:6d:f3:dd:10:e4:fb:d0:ea:1b:3e:e8:
                    ba:96:8a:6c:d3:64:4a:c5:56:38:b9:fb:5f:45:05:
                    11:b1:29:54:96:44:a4:95:4c:07:17:b7:5b:65:b7:
                    7a:f7:81:b9:b2:7c:e8:52:1f:28:d6:fa:5a:fa:9b:
                    d8:e7:ef:93:09:02:ff:27:3b:46:2a:e1:b7:11:13:
                    79:74:89:d1:10:93:27:10:5e:56:f9:1a:76:45:e7:
                    90:fe:4a:5b:51:90:4d:dc:1c:d5:b8:58:f4:52:b0:
                    bb:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:85:69:52:0E:0D:A7:D8:7A:A6:82:12:4A:27:74:D6:36:66:B5:E8
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3b1313-72e2-4c45-8568-ba2d1a0ac42d/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3b1313-72e2-4c45-8568-ba2d1a0ac42d/1/_IVpUg4Np9h6poISSid01jZmteg.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.144.28.0/22
                  194.5.8.0/22
                  212.81.32.0/22
                IPv6:
                  2a0a:f8c0::/29
                  2a0b:2d80::/29
                  2a0c:7b80::/29
                  2a0c:c180::/29
                  2a0d:81c0::/29
                  2a0d:9ac0::/29
                  2a0d:cb40::/29
                  2a0d:e3c0::/29
                  2a0e:9fc0::/29
                  2a0f:8440::/29

    Signature Algorithm: sha256WithRSAEncryption
         09:74:b2:02:54:a3:35:09:65:ce:73:be:7d:0c:10:6d:f3:ae:
         28:43:79:61:10:bb:8d:b0:a3:82:4e:14:e8:66:35:9d:57:25:
         89:d5:d6:28:71:eb:98:82:58:54:90:bf:b3:b5:00:bc:20:78:
         e3:28:21:fc:48:9d:05:fb:c6:34:d9:52:c1:be:b0:a9:16:a8:
         2d:64:6b:5c:69:14:a1:a5:a3:96:2f:51:ef:df:b6:2a:77:0f:
         1c:94:91:90:0f:06:8a:c0:50:07:4b:d0:1d:84:a1:ea:32:8f:
         39:8d:34:51:a1:eb:19:32:c3:4a:e9:92:28:10:23:6d:d9:eb:
         a4:ef:4b:56:41:4b:97:8c:ea:38:05:7e:55:3f:cf:83:06:5e:
         87:92:70:d0:e8:1e:dc:c7:b6:21:a7:18:b4:ef:7a:c4:4c:bf:
         6f:05:03:03:8b:e0:52:44:dd:5a:de:46:de:70:3a:3c:92:7a:
         c1:44:15:bb:55:94:ce:43:ac:08:c9:8a:cb:f2:3a:6e:66:cb:
         35:53:bb:e9:89:c9:fd:c3:d4:ed:14:f3:77:c4:52:e8:90:a1:
         77:d3:74:b7:a2:c3:6f:ff:d2:71:bc:40:f0:0d:61:7f:81:96:
         60:00:e8:53:32:6f:f7:87:42:11:8a:67:64:7f:96:a4:89:ec:
         77:c2:7c:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:44:28 2023 by rpki-client on console.sobornost.net