Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-0g-9M32YGo-2pjO6PObj94QXhA.cer
File:                     1-0g-9M32YGo-2pjO6PObj94QXhA.cer (raw, json)
Hash identifier:          uv8/Ok2ZxXSn2lvIXwK80N6/Ersphv4r1nUt9SGvdUY=
Subject key identifier:   FB:48:3E:F4:CD:F6:60:6A:3E:DA:98:CE:E8:F3:9B:8F:DE:10:5E:10
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856BD11133EA9F2EEEEE30F117D3EC750D
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/fe/c1f898-91d2-46ab-8285-08904b7b5559/1/1-0g-9M32YGo-2pjO6PObj94QXhA.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/fe/c1f898-91d2-46ab-8285-08904b7b5559/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 05:32:21 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 185.232.47.0/24
                          IP: 2a11:ff80::/29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6b:d1:11:33:ea:9f:2e:ee:ee:30:f1:17:d3:ec:75:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 05:32:21 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=fb483ef4cdf6606a3eda98cee8f39b8fde105e10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:c1:40:95:da:b6:5d:9e:0e:05:bc:bf:62:f7:
                    da:bb:c2:5f:c0:15:0a:e5:2f:6d:4f:2e:29:15:bf:
                    80:8b:cd:ab:ae:9e:06:64:b1:87:e1:11:cb:b0:2d:
                    ac:7a:ec:56:59:56:cf:7f:3e:06:4e:1e:a1:bd:35:
                    fc:bd:fb:7e:5c:e6:0c:c9:cb:98:bd:ad:d5:a3:b3:
                    d7:af:23:75:d1:ae:8f:8b:90:55:04:6f:48:d8:46:
                    41:ef:b7:c4:be:53:88:c0:c2:11:fa:06:c6:81:5e:
                    68:09:3e:49:a5:3f:c6:01:26:42:c8:54:2c:3f:3c:
                    fc:dd:41:69:18:19:a6:f4:cb:bb:e2:a6:f6:77:07:
                    33:31:30:f6:eb:72:c3:67:ed:6f:93:a0:c4:30:7f:
                    b8:b6:56:7c:9c:a9:2d:b7:ff:4e:ab:d1:fb:08:08:
                    8a:16:74:89:16:c5:0e:2e:e1:a0:1a:6d:fa:ac:1b:
                    0c:8f:ce:85:4e:77:62:68:21:57:ed:cd:da:22:6e:
                    fa:b3:6c:b8:49:ae:0c:91:c9:0d:b1:72:eb:86:ff:
                    ef:8e:3c:4f:19:ed:e6:1c:c4:29:b4:f4:ba:12:ed:
                    9c:dd:07:f2:00:4d:49:ea:a4:d7:6f:3c:f8:a5:70:
                    1f:b0:5b:dd:91:a5:7e:53:f0:73:b6:29:d3:cf:44:
                    be:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:48:3E:F4:CD:F6:60:6A:3E:DA:98:CE:E8:F3:9B:8F:DE:10:5E:10
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/c1f898-91d2-46ab-8285-08904b7b5559/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/c1f898-91d2-46ab-8285-08904b7b5559/1/1-0g-9M32YGo-2pjO6PObj94QXhA.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.232.47.0/24
                IPv6:
                  2a11:ff80::/29

    Signature Algorithm: sha256WithRSAEncryption
         7d:96:1d:56:d2:23:89:ed:8d:a2:51:2f:9c:e6:c3:34:04:93:
         33:40:af:9a:a0:25:c6:18:b3:d0:4a:e5:1c:7c:f5:66:b2:bb:
         08:3a:ac:d7:6e:47:0c:71:1f:4c:0a:fa:44:48:c3:2b:02:22:
         c7:65:b2:82:3e:a9:ba:03:dd:26:6e:e9:c0:77:96:b7:a3:22:
         eb:ef:eb:d1:44:e0:20:62:9e:2b:16:9b:ae:df:e4:3e:73:8a:
         71:2c:b5:22:62:b8:93:86:fa:1a:dd:43:56:0a:78:96:3a:d4:
         35:b2:8d:9b:fc:d5:38:56:0e:e5:dd:65:a9:72:65:ca:fb:1c:
         79:27:fe:10:fd:ec:6f:3f:12:1d:9b:71:26:05:0b:ae:03:a7:
         f1:ef:8b:1c:6c:4c:3c:ff:a9:99:d8:f3:82:e5:76:2e:50:38:
         26:4f:cb:4c:ff:48:97:74:78:e4:04:81:fa:aa:21:71:50:bb:
         d9:fb:1e:13:92:bc:2b:4e:be:2c:1a:6b:38:7a:7b:52:e9:88:
         26:bc:83:63:90:44:51:a7:8a:b7:f6:c4:a6:30:bc:56:0b:70:
         85:05:6c:b0:2f:b0:68:7a:f3:91:b2:f5:ea:22:3e:25:90:34:
         3c:f1:67:8a:3a:e7:4f:1c:a6:8b:3b:a9:c7:22:46:aa:38:fa:
         ec:16:2a:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----