Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-IMBwukKuq41kP_E_6aU1iIFnj4.cer
File:                     1-IMBwukKuq41kP_E_6aU1iIFnj4.cer (raw, json)
Hash identifier:          G9CawDnMGAaU17Z7lHNxoZdEu/2qLk8Ilm35IZU+tjk=
Subject key identifier:   F8:83:01:C2:E9:0A:BA:AE:35:90:FF:C4:FF:A6:94:D6:22:05:9E:3E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856ED3FB4119832DBBDCA50FE1469DDEB0
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/50/7467f6-9c48-4f6f-a98c-46c32ca20fdf/1/1-IMBwukKuq41kP_E_6aU1iIFnj4.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/50/7467f6-9c48-4f6f-a98c-46c32ca20fdf/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 19:34:24 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    AS: 209306

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6e:d3:fb:41:19:83:2d:bb:dc:a5:0f:e1:46:9d:de:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 19:34:24 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=f88301c2e90abaae3590ffc4ffa694d622059e3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:3a:f7:e4:af:aa:29:7f:b6:5b:e6:58:5e:a3:
                    87:fc:e2:4f:97:ad:91:29:d2:94:cf:16:95:4a:c6:
                    57:a4:08:de:35:12:77:be:86:14:e6:02:94:a2:82:
                    89:76:6a:4e:46:d8:17:08:f6:57:9d:73:71:9e:a0:
                    bd:50:37:aa:9a:69:ca:44:a3:46:4d:1b:da:8a:32:
                    15:92:8c:97:98:af:1d:de:64:3b:d6:ba:ce:b5:52:
                    32:da:7c:df:aa:7f:f4:3e:2a:43:37:65:5a:a7:6e:
                    be:c6:56:f1:9e:04:97:c1:11:ee:91:13:3b:68:1c:
                    61:cc:c5:d7:78:89:8e:6a:40:d8:e5:29:c4:5d:77:
                    38:50:2f:8c:34:41:e4:38:3f:37:95:1b:ea:4d:5f:
                    2e:4b:ad:a1:0f:66:f5:1a:3b:73:2a:ae:cf:ae:75:
                    a6:3e:de:35:a8:6f:0c:f8:f6:b6:26:89:46:8a:ed:
                    2c:39:4d:d2:f6:a4:4c:d9:9b:7b:45:62:bf:3b:88:
                    9e:48:bd:19:e5:ec:32:dc:a8:57:50:5f:d7:03:41:
                    47:45:dd:94:38:8e:c5:65:b6:d7:7d:aa:92:b8:6e:
                    97:89:ab:83:d6:ce:1c:d4:a4:44:a1:69:4f:da:27:
                    0f:ba:40:6c:c0:4e:a6:ab:cc:91:24:39:b0:4c:5b:
                    6f:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:83:01:C2:E9:0A:BA:AE:35:90:FF:C4:FF:A6:94:D6:22:05:9E:3E
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/7467f6-9c48-4f6f-a98c-46c32ca20fdf/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/7467f6-9c48-4f6f-a98c-46c32ca20fdf/1/1-IMBwukKuq41kP_E_6aU1iIFnj4.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  209306

    Signature Algorithm: sha256WithRSAEncryption
         15:66:6d:0a:f1:08:b0:b5:bc:5c:ea:62:07:57:f9:92:23:e1:
         20:38:3f:a5:27:48:f7:fb:36:73:76:d9:7f:38:8f:58:62:c9:
         7a:d4:07:9d:4e:c2:ff:4a:fe:67:81:33:47:2f:01:55:98:34:
         dd:4a:75:ac:cf:cf:66:33:ef:82:51:b0:20:93:5c:98:9b:76:
         f7:d4:b6:4f:81:78:99:52:d5:ca:af:c2:a4:28:c9:8d:26:91:
         af:a0:4f:b3:3f:2a:d0:4f:82:01:b9:7a:d8:f7:b9:3f:d5:5a:
         32:f8:f2:b3:66:1e:bf:73:6a:3f:d7:f7:64:01:bc:7c:d7:13:
         6b:f1:45:42:a5:31:57:6c:94:85:78:e3:2e:85:10:66:cf:06:
         7d:23:e9:4f:cb:4c:fc:73:09:5e:92:82:b6:d0:8b:82:89:ba:
         74:6b:38:af:8e:70:a7:23:22:c3:76:48:25:15:88:28:cc:68:
         54:3d:e5:64:3e:9b:1e:86:99:97:10:8d:d1:d0:8b:bd:14:0f:
         68:57:b8:c6:67:7b:53:11:5c:fc:bd:cc:fd:80:84:53:08:cc:
         c9:d5:b1:46:31:a7:b1:8d:3c:a6:70:c2:db:25:55:83:32:88:
         e0:0c:fb:8a:b3:e2:d9:2e:7f:53:06:2c:1b:1b:b0:64:c6:71:
         65:7f:47:b3
-----BEGIN CERTIFICATE-----
MIIFdDCCBFygAwIBAgISAYVu0/tBGYMtu9ylD+FGnd6wMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjMwMTAxMTkzNDI0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmODgzMDFjMmU5MGFiYWFlMzU5MGZmYzRmZmE2OTRkNjIyMDU5ZTNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9Dr35K+qKX+2W+ZYXqOH/OJPl62R
KdKUzxaVSsZXpAjeNRJ3voYU5gKUooKJdmpORtgXCPZXnXNxnqC9UDeqmmnKRKNG
TRvaijIVkoyXmK8d3mQ71rrOtVIy2nzfqn/0PipDN2Vap26+xlbxngSXwRHukRM7
aBxhzMXXeImOakDY5SnEXXc4UC+MNEHkOD83lRvqTV8uS62hD2b1GjtzKq7PrnWm
Pt41qG8M+Pa2JolGiu0sOU3S9qRM2Zt7RWK/O4ieSL0Z5ewy3KhXUF/XA0FHRd2U
OI7FZbbXfaqSuG6XiauD1s4c1KREoWlP2icPukBswE6mq8yRJDmwTFtvxwIDAQAB
o4ICgDCCAnwwHQYDVR0OBBYEFPiDAcLpCrquNZD/xP+mlNYiBZ4+MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEkBggrBgEFBQcBCwSCARYwggESMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzUwLzc0Njdm
Ni05YzQ4LTRmNmYtYTk4Yy00NmMzMmNhMjBmZGYvMS8wfQYIKwYBBQUHMAqGcXJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTAvNzQ2N2Y2
LTljNDgtNGY2Zi1hOThjLTQ2YzMyY2EyMGZkZi8xLzEtSU1Cd3VrS3VxNDFrUF9F
XzZhVTFpSUZuajQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAucmlwZS5u
ZXQvbm90aWZpY2F0aW9uLnhtbDBZBgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jw
a2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhD
MlFIVlYzZDVtay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAaBggrBgEF
BQcBCAEB/wQLMAmgBzAFAgMDMZowDQYJKoZIhvcNAQELBQADggEBABVmbQrxCLC1
vFzqYgdX+ZIj4SA4P6UnSPf7NnN22X84j1hiyXrUB51Owv9K/meBM0cvAVWYNN1K
dazPz2Yz74JRsCCTXJibdvfUtk+BeJlS1cqvwqQoyY0mka+gT7M/KtBPggG5etj3
uT/VWjL48rNmHr9zaj/X92QBvHzXE2vxRUKlMVdslIV44y6FEGbPBn0j6U/LTPxz
CV6SgrbQi4KJunRrOK+OcKcjIsN2SCUViCjMaFQ95WQ+mx6GmZcQjdHQi70UD2hX
uMZne1MRXPy9zP2AhFMIzMnVsUYxp7GNPKZwwtslVYMyiOAM+4qz4tkuf1MGLBsb
sGTGcWV/R7M=
-----END CERTIFICATE-----