Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-OdngUhC2i3UiswqzkUu8XmoE-Q.cer
File:                     1-OdngUhC2i3UiswqzkUu8XmoE-Q.cer (raw, json)
Hash identifier:          lRgQXA5DX6GVxVSbuBGjDDgPw3LlTgF/Zvehbt0shWM=
Subject key identifier:   F8:E7:67:81:48:42:DA:2D:D4:8A:CC:2A:CE:45:2E:F1:79:A8:13:E4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018571D65CA5B52000D3B457E2B7754F9381
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/23/c04958-6b43-4092-b321-7e29b74db4e4/1/1-OdngUhC2i3UiswqzkUu8XmoE-Q.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/23/c04958-6b43-4092-b321-7e29b74db4e4/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 02 Jan 2023 09:35:51 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    AS: 206151
                          IP: 185.195.20.0/22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:71:d6:5c:a5:b5:20:00:d3:b4:57:e2:b7:75:4f:93:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 09:35:51 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=f8e767814842da2dd48acc2ace452ef179a813e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:9d:06:fa:45:14:99:75:37:6e:66:d9:d9:48:
                    92:c4:81:75:fc:b4:f3:cb:0b:fe:b5:04:b6:0c:3b:
                    08:62:bd:23:a8:aa:fe:4c:6f:29:85:1f:cd:23:fd:
                    63:2e:8e:3d:0c:ea:46:da:ab:9f:c5:fa:9d:d2:78:
                    dd:7a:2c:1a:1c:84:ea:d0:3a:e3:ca:51:41:bd:12:
                    6e:d1:8e:9d:fd:fb:64:ee:cf:88:13:98:36:9b:a6:
                    d5:f0:bc:3a:4d:6b:9c:a1:fa:68:5e:1c:9f:e9:6d:
                    2f:8f:eb:be:1e:ff:ba:ed:c8:2c:52:4f:70:b6:05:
                    b4:09:76:ba:49:25:b2:ef:4b:02:48:25:66:de:bb:
                    66:4b:6a:ad:10:2a:ba:3d:c8:76:78:cf:d3:bb:ff:
                    2f:df:3a:f0:41:ab:6e:a4:13:a0:5f:cb:84:61:4a:
                    d7:69:d2:3c:c7:c5:89:07:e2:33:93:80:60:13:fe:
                    b9:eb:c3:68:ee:da:3f:87:8e:0e:a5:ee:34:f1:c6:
                    fb:fc:87:2f:9e:20:54:e4:d2:98:e9:6b:38:4b:fc:
                    30:e4:ca:a7:f6:e1:16:d1:3e:09:04:38:57:89:28:
                    5d:60:d3:d6:32:f8:6b:cb:97:1e:fb:06:6b:17:c9:
                    6a:29:11:86:ad:ed:89:ec:e8:77:5c:10:d3:58:ef:
                    f1:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:E7:67:81:48:42:DA:2D:D4:8A:CC:2A:CE:45:2E:F1:79:A8:13:E4
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/c04958-6b43-4092-b321-7e29b74db4e4/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/c04958-6b43-4092-b321-7e29b74db4e4/1/1-OdngUhC2i3UiswqzkUu8XmoE-Q.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.195.20.0/22

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  206151

    Signature Algorithm: sha256WithRSAEncryption
         86:21:df:d0:00:18:df:70:1e:32:c8:ba:1d:79:3e:ae:e4:e4:
         d4:18:72:0f:bf:ab:a3:8f:32:20:5e:31:ad:77:41:92:9a:de:
         89:10:94:51:36:57:19:cd:61:cd:8a:ab:3b:45:22:fe:0e:26:
         ce:8b:21:4b:ac:86:2e:db:56:6d:53:07:4a:3b:f1:f3:16:dc:
         ce:8e:c9:d1:15:43:1b:bd:23:5c:46:ee:65:4d:bb:dc:33:a5:
         f2:46:b0:50:0d:20:f4:e0:18:17:f4:d5:99:97:26:f8:c6:34:
         45:a0:09:2f:0b:87:79:e1:06:b9:b1:00:a1:ed:08:ed:4d:c0:
         66:b4:6f:ed:6c:25:7d:87:e9:60:b2:db:ca:56:10:c6:e5:d9:
         68:84:cf:b3:94:5f:94:a0:2c:7d:eb:85:07:e1:bc:24:4e:c0:
         18:30:16:be:11:e0:5a:4d:cd:c4:90:ce:a9:f4:98:66:35:fd:
         8c:de:21:77:53:60:af:1e:96:3c:fb:8c:07:a3:78:7d:2e:d9:
         7e:86:e3:b5:3f:cc:92:3b:df:65:57:29:13:e2:56:5b:f8:ef:
         28:8d:57:13:ae:36:55:af:1e:21:64:4d:bf:72:78:20:87:8e:
         7b:d2:ea:12:fa:57:0b:6d:58:6c:f6:35:e9:9b:04:4c:a5:65:
         ad:20:2b:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----