Certificate

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/821620585D145A1ED109B75A9CC91508C584F9F7.cer
File:                     821620585D145A1ED109B75A9CC91508C584F9F7.cer (raw, json)
Hash identifier:          fLH7oICzdeOqOT+Vmi6auLOT5K86/e1YzDkrzjVkzng=
Subject key identifier:   82:16:20:58:5D:14:5A:1E:D1:09:B7:5A:9C:C9:15:08:C5:84:F9:F7
Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9
Certificate issuer:       /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
Certificate serial:       0D7E5FECE37FB8C7E359DACE53D6BC7AF2EE0688
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
Manifest:                 rsync://rsync.paas.rpki.ripe.net/repository/40d6c6f5-aa32-49d7-abfa-e6084bc7fa44/1/821620585D145A1ED109B75A9CC91508C584F9F7.mft
caRepository:             rsync://rsync.paas.rpki.ripe.net/repository/40d6c6f5-aa32-49d7-abfa-e6084bc7fa44/1
Notify URL:               https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before:   Fri 21 Apr 2023 03:24:17 +0000
Certificate not after:    Fri 19 Apr 2024 03:29:17 +0000
Subordinate resources:    IP: 2a05:dfc1::/40
                          IP: 2a05:dfc1:1f00::/40
                          IP: 2a0a:6040::/40
                          IP: 2a0a:6040:1000::/40
                          IP: 2a0a:6040:5000::/40
                          IP: 2a0a:6040:6000::/40

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:7e:5f:ec:e3:7f:b8:c7:e3:59:da:ce:53:d6:bc:7a:f2:ee:06:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
        Validity
            Not Before: Apr 21 03:24:17 2023 GMT
            Not After : Apr 19 03:29:17 2024 GMT
        Subject: CN=821620585D145A1ED109B75A9CC91508C584F9F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:69:b5:77:2e:ae:03:e0:d2:94:a1:8a:86:aa:
                    b4:ac:3a:25:e8:fa:09:8b:9e:16:ab:a0:34:1b:d6:
                    c8:28:12:db:07:bb:68:71:75:bb:15:72:0b:8a:41:
                    2a:f0:ca:72:4c:fd:87:4d:93:77:1a:24:ec:6a:80:
                    61:63:d4:4c:f8:e8:46:62:88:df:b8:fb:fc:6a:6d:
                    ba:56:4c:e2:97:84:20:be:df:52:60:28:51:4d:8c:
                    24:37:63:1d:1d:a3:c6:84:3e:d6:e3:9e:6d:f6:29:
                    c2:89:1b:95:a1:62:a1:55:67:21:22:56:39:fd:ae:
                    04:11:b4:ea:e8:fb:2d:47:28:b6:b6:31:3b:80:7f:
                    b8:c7:ca:99:ed:21:af:5f:54:a8:3c:d7:dd:ec:e2:
                    76:95:7f:48:be:df:8e:98:65:37:6e:e9:fc:29:75:
                    23:1d:c8:6d:08:8a:d1:ec:67:64:06:9e:d9:b3:3d:
                    4b:dc:3a:d8:b8:74:94:70:28:a7:f0:28:ce:63:08:
                    42:06:9b:56:12:07:99:a0:c2:28:83:54:38:d5:df:
                    f8:ad:16:e2:ae:77:f6:bd:13:ad:f4:e4:74:5a:15:
                    dd:f9:3f:76:75:11:a8:5b:63:bf:03:83:59:ed:52:
                    2a:6a:8d:8b:a3:a0:33:1f:bd:df:4b:7b:32:54:84:
                    59:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                82:16:20:58:5D:14:5A:1E:D1:09:B7:5A:9C:C9:15:08:C5:84:F9:F7
            X509v3 Authority Key Identifier:
                keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer

            Subject Information Access:
                CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/40d6c6f5-aa32-49d7-abfa-e6084bc7fa44/1
                RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/40d6c6f5-aa32-49d7-abfa-e6084bc7fa44/1/821620585D145A1ED109B75A9CC91508C584F9F7.mft
                RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc1::/40
                  2a05:dfc1:1f00::/40
                  2a0a:6040::/40
                  2a0a:6040:1000::/40
                  2a0a:6040:5000::/40
                  2a0a:6040:6000::/40

    Signature Algorithm: sha256WithRSAEncryption
         9d:ed:75:ab:2c:a5:67:24:82:30:e9:bd:a6:be:43:ef:5c:23:
         20:1f:25:df:60:03:3e:df:9e:47:fe:21:7e:f0:cb:4a:85:ef:
         9d:f4:db:c0:3d:0f:2f:72:d7:ae:c8:f0:db:fb:7d:d6:d0:6d:
         67:95:ca:1d:26:6e:9e:c4:64:e8:d7:db:50:28:04:e5:fe:38:
         ab:79:63:06:1b:a9:97:e5:40:a7:f6:8a:d3:b7:93:8c:20:ea:
         ba:9b:63:87:57:65:e0:d3:96:b9:99:08:cd:91:65:e9:cf:4d:
         12:2e:84:2b:c9:5c:e8:ae:6a:44:59:1e:1e:78:6f:5d:ed:ad:
         96:04:32:6d:ee:e1:1a:52:29:6b:f6:8f:ec:39:3d:72:f6:d9:
         ab:c8:2a:3a:7a:1d:97:a7:9b:22:8a:3e:9a:bf:82:19:34:e0:
         bf:d4:c1:d6:c3:61:d3:1e:1a:b1:86:6f:e4:8d:a7:32:26:52:
         cf:bf:c3:56:de:74:ce:0d:e4:88:d0:a1:03:48:69:14:02:cb:
         fa:c0:3b:22:da:cc:dc:eb:ba:63:f7:7c:89:09:17:72:68:bf:
         14:8c:a2:42:50:97:1a:b6:3d:e4:99:bf:96:65:c4:eb:fe:8f:
         f9:64:96:ca:36:26:79:c1:32:15:6c:4e:ea:9f:3e:a1:f8:be:
         bb:a9:92:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----