Certificate

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/3065BD7B3029FB9B4990D695C6176778CC637436.cer
File:                     3065BD7B3029FB9B4990D695C6176778CC637436.cer (raw, json)
Hash identifier:          RKPFO7UB3yzm1k9TEFPQMzYN49EwBYElIdrmBEE2GYA=
Subject key identifier:   30:65:BD:7B:30:29:FB:9B:49:90:D6:95:C6:17:67:78:CC:63:74:36
Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9
Certificate issuer:       /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
Certificate serial:       434904A2037F07693AA00E7ACA60A71E01CCA34C
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
Manifest:                 rsync://rsync.paas.rpki.ripe.net/repository/980bebee-85fd-4060-b392-00aa32ab1562/1/3065BD7B3029FB9B4990D695C6176778CC637436.mft
caRepository:             rsync://rsync.paas.rpki.ripe.net/repository/980bebee-85fd-4060-b392-00aa32ab1562/1
Notify URL:               https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before:   Mon 06 Mar 2023 07:59:28 +0000
Certificate not after:    Mon 04 Mar 2024 08:04:28 +0000
Subordinate resources:    IP: 2a0a:6040:2f00::/40
                          IP: 2a0a:6040:3100::/40
                          IP: 2a0a:6040:3d00::/40
                          IP: 2a0a:6040:c800::/40

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:49:04:a2:03:7f:07:69:3a:a0:0e:7a:ca:60:a7:1e:01:cc:a3:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
        Validity
            Not Before: Mar  6 07:59:28 2023 GMT
            Not After : Mar  4 08:04:28 2024 GMT
        Subject: CN=3065BD7B3029FB9B4990D695C6176778CC637436
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:db:3b:40:b4:67:47:c1:c2:90:96:43:b6:28:
                    1b:81:21:ea:7c:8a:f9:4b:6a:9d:28:f4:8a:8b:1e:
                    a0:71:9d:f0:cc:26:05:17:ce:f1:d7:2b:d9:11:2a:
                    da:b5:b5:08:9a:b2:59:a1:63:e7:dc:9f:73:7b:84:
                    a7:f8:bd:9f:55:56:09:d1:7a:24:8b:b2:b3:c5:bd:
                    70:14:a6:4b:fa:20:4e:e7:0f:54:52:f5:58:8e:d4:
                    0e:0a:12:44:ff:ea:7d:62:42:11:e6:7e:22:ab:72:
                    e1:4c:a6:96:43:2e:47:0d:bc:9f:c8:c7:d4:5e:10:
                    5c:f1:09:51:e8:fb:80:14:75:ac:0f:bb:c5:b4:7e:
                    9c:b4:d8:59:e9:0f:db:10:a4:62:51:4c:f2:56:8a:
                    e7:68:72:55:8b:1c:c1:0e:24:4f:35:d6:2c:e4:1d:
                    a4:b5:96:7f:0e:cb:50:8f:60:3b:9d:6a:20:e1:6a:
                    48:ac:41:b1:98:d7:72:cc:22:62:cc:d9:78:0d:e0:
                    90:e4:e5:92:cc:6d:84:c0:fb:6d:5e:3f:0f:e1:59:
                    77:a6:f8:8c:c4:1b:1a:b3:79:f0:33:c2:02:8d:14:
                    8d:16:1a:3d:12:70:2b:ed:60:a6:8b:06:d9:11:18:
                    1e:3e:51:c0:d4:a9:d2:19:92:5a:ab:97:b3:80:4a:
                    eb:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                30:65:BD:7B:30:29:FB:9B:49:90:D6:95:C6:17:67:78:CC:63:74:36
            X509v3 Authority Key Identifier:
                keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer

            Subject Information Access:
                CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/980bebee-85fd-4060-b392-00aa32ab1562/1
                RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/980bebee-85fd-4060-b392-00aa32ab1562/1/3065BD7B3029FB9B4990D695C6176778CC637436.mft
                RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:2f00::/40
                  2a0a:6040:3100::/40
                  2a0a:6040:3d00::/40
                  2a0a:6040:c800::/40

    Signature Algorithm: sha256WithRSAEncryption
         a8:39:0a:8c:91:e0:4a:9d:d2:68:e0:24:1d:fa:0c:ac:59:5f:
         7c:b4:14:5a:73:f2:64:22:51:9e:98:36:22:b8:73:58:07:7b:
         40:80:b2:f0:07:54:a1:d3:3c:b5:0f:ad:69:f4:56:57:0f:52:
         4a:4d:8c:92:e5:4f:aa:56:a5:11:9c:f1:ce:5a:f0:13:dd:20:
         02:a2:90:3a:fa:bd:c5:8e:4b:bc:d8:03:61:fd:5c:b3:72:3b:
         bc:59:a4:62:70:9c:35:85:93:99:a7:c4:fb:fd:3a:f5:d9:18:
         6e:2e:3d:12:81:e1:14:8b:aa:3c:b8:70:bb:fa:ee:0d:1d:1a:
         19:c1:b1:06:74:45:88:24:14:10:56:bf:f5:c5:7e:60:99:05:
         0f:66:ce:96:3e:e0:cc:e5:d9:31:4f:e1:4c:24:d9:70:49:d3:
         94:b0:f8:e6:bc:3e:60:98:eb:29:f3:28:c1:0b:67:8c:d3:18:
         d0:ed:ca:92:92:35:83:73:70:39:09:94:b8:e4:4b:19:fa:fa:
         6b:c6:c0:31:2c:04:2d:23:f8:17:a2:80:74:3e:5a:99:36:26:
         08:fb:cc:05:4d:e8:1e:e4:88:48:10:a8:63:77:1d:f2:2a:69:
         d1:ad:ee:26:73:21:79:da:5d:a4:3b:2f:72:00:d0:28:7c:c4:
         b5:fc:0c:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----