Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-BmI_Il_3VGpOCPcry4VtDIK9rY.cer
File:                     1-BmI_Il_3VGpOCPcry4VtDIK9rY.cer (raw, json)
Hash identifier:          GPXT28s2Q9pxxJq5vI33c2ubZP1jsXLNNiLpoytHIqM=
Subject key identifier:   F8:19:88:FC:89:7F:DD:51:A9:38:23:DC:AF:2E:15:B4:32:0A:F6:B6
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856E65EC6BC01796F9842F5C292BB12BED
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/0c/c9fd2a-ca2e-439b-8330-6c37b96c6b78/1/1-BmI_Il_3VGpOCPcry4VtDIK9rY.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/0c/c9fd2a-ca2e-439b-8330-6c37b96c6b78/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 17:34:11 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 46.36.200.0/22
                          IP: 2a03:b600::/29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6e:65:ec:6b:c0:17:96:f9:84:2f:5c:29:2b:b1:2b:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 17:34:11 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=f81988fc897fdd51a93823dcaf2e15b4320af6b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:ee:60:2d:e6:26:db:64:d4:9f:0a:3b:74:3c:
                    5d:22:ac:a8:c2:ab:e6:a2:b6:fd:1e:24:20:f1:df:
                    bc:b5:2d:8d:53:44:30:88:7e:ca:1a:6c:aa:0c:f5:
                    05:d2:86:7e:a4:b4:b1:17:4e:0f:77:00:64:b9:f7:
                    3f:e6:47:8f:4c:95:09:c3:1c:5f:51:04:91:df:c4:
                    bd:46:b3:89:bf:f0:53:74:27:6d:09:5f:41:de:17:
                    23:94:0b:fe:39:f3:4d:7f:da:16:67:e0:70:0e:c3:
                    65:54:c8:45:2e:69:65:5f:14:0d:3c:3c:e5:e7:5d:
                    36:e2:d9:ed:af:ef:49:f5:06:81:8c:c4:ff:7f:7b:
                    ee:90:23:79:52:07:8e:70:24:62:07:fa:dd:e0:8b:
                    08:1b:3a:23:d1:51:bd:bc:e2:22:f9:d9:0e:f1:d1:
                    73:35:92:ef:6b:c7:56:b3:44:c7:53:87:44:a9:6a:
                    cf:d8:c1:21:66:71:ed:96:63:8b:c7:71:99:e9:bf:
                    c2:3f:23:39:01:48:12:66:71:b1:ef:97:0d:17:59:
                    74:de:21:a0:ba:08:86:4c:37:5d:88:fd:6d:fe:a7:
                    37:80:cc:b5:1c:20:41:e6:c6:65:f6:73:7a:a5:8d:
                    17:35:bc:af:c2:80:12:9b:a1:b5:d0:25:c7:d0:8f:
                    af:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:19:88:FC:89:7F:DD:51:A9:38:23:DC:AF:2E:15:B4:32:0A:F6:B6
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/c9fd2a-ca2e-439b-8330-6c37b96c6b78/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/c9fd2a-ca2e-439b-8330-6c37b96c6b78/1/1-BmI_Il_3VGpOCPcry4VtDIK9rY.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.36.200.0/22
                IPv6:
                  2a03:b600::/29

    Signature Algorithm: sha256WithRSAEncryption
         23:68:6e:ed:82:48:6e:02:3f:c0:fa:66:8f:45:d0:77:86:eb:
         54:0a:c9:4c:0d:f2:36:1a:62:fb:bc:99:b4:e8:1a:9b:c8:fa:
         1a:63:62:a8:d8:b1:d0:c7:a1:c4:dd:b3:af:95:7a:c9:c1:6d:
         c6:ae:2e:ca:dd:fe:16:72:f1:24:b0:75:35:50:91:e5:90:95:
         b8:91:e1:52:45:fe:df:bf:f6:4e:65:f6:d1:c5:f6:4c:fe:76:
         54:61:b2:7a:42:ed:94:12:29:61:03:dc:67:9d:78:c5:2a:93:
         7f:57:30:d2:ee:51:83:46:f8:ca:1b:d6:5a:93:48:8c:7b:db:
         f9:4e:8a:e6:0f:af:ad:fe:e9:17:19:56:89:3e:59:22:3a:f9:
         9a:16:e0:23:dd:c6:31:ae:41:bd:b8:f6:2e:9b:18:bd:05:be:
         7c:8d:24:d2:95:74:27:61:de:45:06:e5:a1:4d:78:66:66:67:
         9c:25:82:44:41:61:b8:52:a3:44:6c:1b:b3:d2:e9:79:5c:b5:
         ea:0a:d9:3a:22:3a:fe:32:81:c4:a8:80:d0:3a:70:ac:7d:3a:
         70:32:98:43:cf:6c:cd:47:d5:bc:14:e9:15:cc:59:4d:94:31:
         da:a6:b5:f3:d0:1e:be:ba:46:f6:5a:23:e5:fe:0b:a3:1b:e3:
         67:02:c5:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----