Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Tx43cOcebuaLThb07saxkJ8dZoY.cer
File:                     Tx43cOcebuaLThb07saxkJ8dZoY.cer (raw, json)
Hash identifier:          SK85Hudh0iLocfi8kVC9o7OJGYiMNdvxSQJyVIHOGx0=
Subject key identifier:   4F:1E:37:70:E7:1E:6E:E6:8B:4E:16:F4:EE:C6:B1:90:9F:1D:66:86
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018571D67260DE47E7DA203C6D51EC6BACD8
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/21/76d0d1-2b41-4118-9e60-f9288d80315b/1/Tx43cOcebuaLThb07saxkJ8dZoY.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/21/76d0d1-2b41-4118-9e60-f9288d80315b/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 02 Jan 2023 09:35:57 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 185.55.56.0/22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:71:d6:72:60:de:47:e7:da:20:3c:6d:51:ec:6b:ac:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 09:35:57 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=4f1e3770e71e6ee68b4e16f4eec6b1909f1d6686
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:ea:78:78:e7:b4:f7:33:f7:70:db:e2:f7:b0:
                    43:61:2d:fc:56:f4:ca:12:ff:8c:2a:3e:9b:d3:ed:
                    3d:9a:ad:f1:02:1f:3e:6c:f2:49:c3:00:97:5b:5c:
                    4d:df:48:a6:e0:86:c5:39:24:5b:a7:a2:a0:26:0a:
                    a2:59:97:ed:53:c2:95:2e:0f:9d:6f:53:db:00:ac:
                    8c:86:82:e3:a3:03:db:aa:05:49:36:1b:49:e7:64:
                    55:c0:bf:30:46:9f:b6:65:67:33:4e:24:c1:f8:e0:
                    44:e0:cf:a5:73:8f:af:ad:17:72:c8:9f:79:0b:5c:
                    c9:5c:51:9d:f5:c4:db:1f:ae:8d:9e:e8:25:28:99:
                    0b:ee:d2:f3:06:f4:c6:3f:e5:4b:00:2c:10:3a:f8:
                    46:2d:29:fd:00:fe:71:57:76:4b:53:70:d6:29:6b:
                    1f:93:11:a4:23:7f:4e:52:0e:a2:ac:c5:b6:b6:46:
                    2f:b7:26:3c:18:94:e2:2d:b1:93:e7:02:b8:5c:8b:
                    0c:c0:41:85:67:2f:f2:2e:2e:33:15:38:dc:c5:f6:
                    da:5e:e3:56:0f:8f:77:a9:33:d9:a7:81:0f:95:88:
                    89:a8:0d:df:34:cd:97:4b:05:31:d8:cd:e4:d4:61:
                    68:33:70:c9:e8:df:25:c3:a2:3e:ac:9e:97:15:81:
                    b7:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:1E:37:70:E7:1E:6E:E6:8B:4E:16:F4:EE:C6:B1:90:9F:1D:66:86
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/76d0d1-2b41-4118-9e60-f9288d80315b/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/76d0d1-2b41-4118-9e60-f9288d80315b/1/Tx43cOcebuaLThb07saxkJ8dZoY.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.55.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         27:32:9a:d7:55:19:cf:62:2d:11:41:fe:b6:17:ad:81:47:31:
         cf:24:f2:06:37:76:a0:8b:b1:2d:8b:07:56:01:51:77:0b:8d:
         32:ea:c0:fc:66:16:eb:5b:ce:ff:cb:c5:27:12:a6:3e:c7:0a:
         d0:03:71:9a:1a:a5:91:8c:e2:29:f7:49:53:08:b4:2f:2f:84:
         81:4f:3c:ca:38:f0:a6:b2:d5:86:eb:38:bb:e2:44:7b:a4:69:
         dd:06:2e:78:4d:49:d3:56:2b:7a:1c:83:4c:9c:6a:0a:25:75:
         cd:b6:2f:8d:c5:2e:6c:80:4f:5c:d0:bb:4e:97:3d:0f:c9:c8:
         8a:5a:da:bf:ae:11:27:2f:c3:12:b7:a6:b2:f4:b2:54:04:74:
         68:07:bd:5f:35:79:3a:ed:5a:70:ec:7e:58:a8:35:fc:07:4c:
         06:40:1f:02:6c:ab:20:7e:6e:cc:82:37:85:f0:75:f0:d6:fc:
         83:b8:f8:19:bc:f5:41:22:e7:83:c9:32:71:2d:e6:00:1d:85:
         63:84:52:71:88:c3:3f:8a:3a:6d:ec:55:28:79:b5:95:32:b8:
         2c:97:7e:7c:01:43:f7:89:7b:c7:bd:1f:f4:ee:ee:f7:73:94:
         e4:19:38:1d:65:49:cc:fb:9c:32:ef:7b:78:6d:ae:19:86:6d:
         02:e7:3d:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----