Certificate

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/C075D17CAABFFA0D204320EAAACD35E6C2DEC9B1.cer
File:                     C075D17CAABFFA0D204320EAAACD35E6C2DEC9B1.cer (raw, json)
Hash identifier:          LACaPvVoRmQT0QY59ENeh4YWuImnzhFjkC64fkjPqng=
Subject key identifier:   C0:75:D1:7C:AA:BF:FA:0D:20:43:20:EA:AA:CD:35:E6:C2:DE:C9:B1
Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9
Certificate issuer:       /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
Certificate serial:       48F2FFB9B393833669201001F1059C7C8D83B5AF
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
Manifest:                 rsync://rsync.paas.rpki.ripe.net/repository/bc90f4f6-f2c4-4882-91cf-9b8f0b38d7da/3/C075D17CAABFFA0D204320EAAACD35E6C2DEC9B1.mft
caRepository:             rsync://rsync.paas.rpki.ripe.net/repository/bc90f4f6-f2c4-4882-91cf-9b8f0b38d7da/3/
Notify URL:               https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before:   Sun 24 Sep 2023 09:55:41 +0000
Certificate not after:    Sun 22 Sep 2024 10:00:41 +0000
Subordinate resources:    IP: 2a05:dfc1:9100:: -- 2a05:dfc1:92ff:ffff:ffff:ffff:ffff:ffff

Validation:               Failed, certificate revoked on Sat 25 Nov 2023 08:23:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:f2:ff:b9:b3:93:83:36:69:20:10:01:f1:05:9c:7c:8d:83:b5:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
        Validity
            Not Before: Sep 24 09:55:41 2023 GMT
            Not After : Sep 22 10:00:41 2024 GMT
        Subject: CN=C075D17CAABFFA0D204320EAAACD35E6C2DEC9B1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:c2:57:74:52:37:3a:06:ae:e7:76:18:c8:1a:
                    11:ab:fd:2b:96:75:b0:c5:03:73:71:35:ca:10:22:
                    91:99:c8:6e:f2:18:46:a7:f9:53:b3:26:98:b8:01:
                    85:6e:de:30:3e:bb:9f:ea:c3:88:5c:b2:3c:f7:6a:
                    ac:a4:fb:cb:bd:38:09:65:35:0b:d1:06:39:ef:8f:
                    fe:b1:5e:78:4e:b7:f8:9c:e6:ba:cc:81:2f:a5:d4:
                    8d:8e:60:23:1c:89:9d:76:1a:75:e6:d4:76:36:f7:
                    c6:78:e0:d9:b0:2e:ce:8c:ee:8f:c7:f3:13:a1:92:
                    4d:2e:79:4b:53:76:e9:12:48:f5:e0:c8:61:99:fa:
                    d3:74:a9:50:a2:91:af:ba:f1:b6:de:40:31:52:61:
                    0e:0e:30:b3:e6:8d:8f:72:06:24:7c:86:97:11:0c:
                    87:95:0c:4e:68:b1:c8:80:d6:02:d0:2a:3a:c7:7b:
                    eb:f2:39:1b:93:b4:5a:b2:43:a8:eb:d6:eb:97:ce:
                    54:47:50:89:c4:e8:b7:0b:b1:10:82:6b:dd:21:89:
                    b1:c3:9b:d3:d9:30:a2:af:78:43:f1:6c:f9:05:5e:
                    31:09:6e:73:f4:c1:c7:90:12:a4:20:1e:04:cb:d1:
                    55:fb:53:eb:a7:36:26:32:80:ce:e4:6c:de:0d:20:
                    d5:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                C0:75:D1:7C:AA:BF:FA:0D:20:43:20:EA:AA:CD:35:E6:C2:DE:C9:B1
            X509v3 Authority Key Identifier:
                keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer

            Subject Information Access:
                CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/bc90f4f6-f2c4-4882-91cf-9b8f0b38d7da/3/
                RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/bc90f4f6-f2c4-4882-91cf-9b8f0b38d7da/3/C075D17CAABFFA0D204320EAAACD35E6C2DEC9B1.mft
                RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc1:9100::-2a05:dfc1:92ff:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         70:46:f6:62:59:61:7a:7b:9c:02:0d:28:97:cf:6c:29:b3:27:
         ba:4a:4b:9e:57:d2:58:2f:be:f4:76:03:c6:85:3d:19:45:f0:
         a8:6a:1f:a0:49:65:6f:cd:7c:06:65:eb:fe:44:68:55:8d:79:
         a9:d3:b3:f7:5c:23:dd:54:a7:4d:0f:e1:fa:94:57:11:6b:d7:
         e6:0b:7c:7a:28:ae:bf:58:18:7a:69:71:39:4c:9d:a0:71:27:
         11:e5:70:b6:72:14:2b:15:27:7a:f9:aa:5a:90:11:9f:56:94:
         f0:71:6d:1c:21:90:16:d7:5e:a9:a8:33:e8:11:37:38:57:d0:
         ff:d4:16:a2:c8:8f:ee:70:29:ca:60:ea:74:35:33:43:c1:2f:
         47:fe:cd:7b:7d:c3:bc:e5:d5:9b:de:bc:9d:d0:c5:52:2b:3f:
         6b:3a:1d:d4:2e:da:bb:43:90:be:cb:f3:6a:75:37:3b:74:f7:
         0c:ab:10:82:ba:cd:03:c8:0e:d1:88:8f:89:e8:88:75:99:46:
         cc:c8:3b:2a:7b:fd:40:9c:b9:40:82:7c:52:d0:c8:14:cc:43:
         fd:ac:e2:a9:ec:b2:bd:d4:0b:45:09:ad:91:09:2a:1e:ce:39:
         3e:fd:1f:ff:2b:9d:3b:ef:77:fb:6d:71:53:f2:02:0a:fd:60:
         8e:d3:7b:bd
-----BEGIN CERTIFICATE-----
MIIF7DCCBNSgAwIBAgIUSPL/ubOTgzZpIBAB8QWcfI2Dta8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3
NkQ4NUFGOTAeFw0yMzA5MjQwOTU1NDFaFw0yNDA5MjIxMDAwNDFaMDMxMTAvBgNV
BAMTKEMwNzVEMTdDQUFCRkZBMEQyMDQzMjBFQUFBQ0QzNUU2QzJERUM5QjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8wld0Ujc6Bq7ndhjIGhGr/SuW
dbDFA3NxNcoQIpGZyG7yGEan+VOzJpi4AYVu3jA+u5/qw4hcsjz3aqyk+8u9OAll
NQvRBjnvj/6xXnhOt/ic5rrMgS+l1I2OYCMciZ12GnXm1HY298Z44NmwLs6M7o/H
8xOhkk0ueUtTdukSSPXgyGGZ+tN0qVCika+68bbeQDFSYQ4OMLPmjY9yBiR8hpcR
DIeVDE5osciA1gLQKjrHe+vyORuTtFqyQ6jr1uuXzlRHUInE6LcLsRCCa90hibHD
m9PZMKKveEPxbPkFXjEJbnP0wceQEqQgHgTL0VX7U+unNiYygM7kbN4NINXtAgMB
AAGjggL2MIIC8jAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTAddF8qr/6DSBD
IOqqzTXmwt7JsTAfBgNVHSMEGDAWgBQONX3aBLgQdiYST1LPwkObdtha+TAOBgNV
HQ8BAf8EBAMCAQYwbwYDVR0fBGgwZjBkoGKgYIZecnN5bmM6Ly9jbG91ZGllLXJl
cG8ucnBraS5hcHAvcmVwby9DTE9VRElFLVJQS0kvMC8wRTM1N0REQTA0QjgxMDc2
MjYxMjRGNTJDRkMyNDM5Qjc2RDg1QUY5LmNybDCBkwYIKwYBBQUHAQEEgYYwgYMw
gYAGCCsGAQUFBzAChnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvMi8wRTM1N0REQTA0
QjgxMDc2MjYxMjRGNTJDRkMyNDM5Qjc2RDg1QUY5LmNlcjCCAT8GCCsGAQUFBwEL
BIIBMTCCAS0wXwYIKwYBBQUHMAWGU3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJp
cGUubmV0L3JlcG9zaXRvcnkvYmM5MGY0ZjYtZjJjNC00ODgyLTkxY2YtOWI4ZjBi
MzhkN2RhLzMvMIGLBggrBgEFBQcwCoZ/cnN5bmM6Ly9yc3luYy5wYWFzLnJwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS9iYzkwZjRmNi1mMmM0LTQ4ODItOTFjZi05Yjhm
MGIzOGQ3ZGEvMy9DMDc1RDE3Q0FBQkZGQTBEMjA0MzIwRUFBQUNEMzVFNkMyREVD
OUIxLm1mdDA8BggrBgEFBQcwDYYwaHR0cHM6Ly9ycmRwLnBhYXMucnBraS5yaXBl
Lm5ldC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
KwYIKwYBBQUHAQcBAf8EHDAaMBgEAgACMBIwEAMGACoF38GRAwYAKgXfwZIwDQYJ
KoZIhvcNAQELBQADggEBAHBG9mJZYXp7nAINKJfPbCmzJ7pKS55X0lgvvvR2A8aF
PRlF8KhqH6BJZW/NfAZl6/5EaFWNeanTs/dcI91Up00P4fqUVxFr1+YLfHoorr9Y
GHppcTlMnaBxJxHlcLZyFCsVJ3r5qlqQEZ9WlPBxbRwhkBbXXqmoM+gRNzhX0P/U
FqLIj+5wKcpg6nQ1M0PBL0f+zXt9w7zl1ZvevJ3QxVIrP2s6HdQu2rtDkL7L82p1
Nzt09wyrEIK6zQPIDtGIj4noiHWZRszIOyp7/UCcuUCCfFLQyBTMQ/2s4qnssr3U
C0UJrZEJKh7OOT79H/8rnTvvd/ttcVPyAgr9YI7Te70=
-----END CERTIFICATE-----