Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-ZgDWJX5VUnCzarD8AVEbL3RHAI.cer
File:                     1-ZgDWJX5VUnCzarD8AVEbL3RHAI.cer (raw, json)
Hash identifier:          HhLhmFaDlvxPFOTrYYSA0A+XJWmW+VzbG8ebZJbiE7g=
Subject key identifier:   F9:98:03:58:95:F9:55:49:C2:CD:AA:C3:F0:05:44:6C:BD:D1:1C:02
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018570FA92FE7B701EA25255BA15823AB507
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/04/87c3ee-d086-4559-90d4-f3ba9e7ec78f/1/1-ZgDWJX5VUnCzarD8AVEbL3RHAI.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/04/87c3ee-d086-4559-90d4-f3ba9e7ec78f/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 02 Jan 2023 05:35:47 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    AS: 201963
                          IP: 185.250.40.0/22
                          IP: 2a02:d800::/29
                          IP: 2a04:de00::/29
                          IP: 2a0b:fb80::/29
                          IP: 2a0e:2f40::/29
                          IP: 2a0e:3cc0::/29
                          IP: 2a0e:7140::/29
                          IP: 2a0e:b180::/29
                          IP: 2a0e:e480::/29
                          IP: 2a0e:fcc0::/29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:fa:92:fe:7b:70:1e:a2:52:55:ba:15:82:3a:b5:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 05:35:47 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=f998035895f95549c2cdaac3f005446cbdd11c02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:74:b1:bc:7f:06:87:9a:e2:a1:78:2f:aa:39:
                    64:84:ea:fe:54:ae:40:aa:2d:3b:5b:29:c7:3b:d3:
                    81:8c:79:d0:e0:ce:ce:38:03:8f:d9:be:e1:0e:c4:
                    21:df:56:67:f3:26:97:fc:80:69:27:d1:94:40:d7:
                    40:3f:cd:23:2d:7d:e9:ce:80:4c:12:b1:2f:bf:fc:
                    1f:90:03:27:52:db:1e:c6:a9:fb:9c:d7:b3:09:95:
                    dd:44:e6:82:c0:b7:11:e1:12:9b:04:2c:ef:33:0a:
                    5c:76:8a:72:d7:23:3f:2c:9c:3a:d6:63:07:06:76:
                    4a:39:b9:bc:4d:f2:cf:a1:65:45:fa:2a:e4:46:d4:
                    16:23:0b:a6:77:63:6c:7e:7b:e6:a6:11:e8:be:80:
                    06:f8:7f:ea:d9:4a:73:5c:6c:92:f2:88:cd:9b:47:
                    64:e9:5e:ea:20:b5:b1:58:08:89:d6:a3:9f:12:5d:
                    a2:dc:9d:a3:10:98:9a:cf:f0:c3:5f:4b:ff:e0:23:
                    e9:dd:3a:78:12:e6:aa:06:83:76:aa:db:55:cf:c3:
                    13:2d:17:da:6d:1c:3c:df:e6:50:9e:95:81:13:c8:
                    fb:10:d6:b6:20:07:2d:b5:a8:77:b8:4b:a9:b2:2b:
                    51:8b:6a:51:7c:b4:77:45:6e:f4:31:2e:46:f3:29:
                    04:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:98:03:58:95:F9:55:49:C2:CD:AA:C3:F0:05:44:6C:BD:D1:1C:02
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/87c3ee-d086-4559-90d4-f3ba9e7ec78f/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/87c3ee-d086-4559-90d4-f3ba9e7ec78f/1/1-ZgDWJX5VUnCzarD8AVEbL3RHAI.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.250.40.0/22
                IPv6:
                  2a02:d800::/29
                  2a04:de00::/29
                  2a0b:fb80::/29
                  2a0e:2f40::/29
                  2a0e:3cc0::/29
                  2a0e:7140::/29
                  2a0e:b180::/29
                  2a0e:e480::/29
                  2a0e:fcc0::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  201963

    Signature Algorithm: sha256WithRSAEncryption
         7c:2e:37:8e:43:65:0b:54:b4:bc:e6:a8:2f:a0:2a:8f:b0:a9:
         0a:f2:f3:2e:bd:8b:85:c2:08:f4:d9:56:24:10:19:76:f1:48:
         84:ce:7d:02:9a:42:d6:75:e6:44:20:9d:3f:a1:c5:40:23:7a:
         b8:a1:f4:f3:72:d4:6d:56:91:cd:0b:c9:64:00:9d:d5:64:fe:
         8d:35:84:45:a8:68:49:c4:cf:58:33:ea:3a:31:67:5c:12:49:
         ae:2b:e3:17:df:96:ca:9a:e4:ef:54:9b:04:26:24:b7:8b:92:
         d3:b8:45:0e:ca:1b:49:53:f9:46:9a:fe:bb:64:78:de:71:f2:
         ca:3c:30:5a:76:f9:1f:63:80:8c:aa:c0:5d:f1:3c:22:ba:19:
         03:d1:30:a2:5b:0d:38:d1:8e:97:e4:31:51:60:9b:cd:e2:b4:
         73:f6:85:8f:72:a8:aa:cb:8c:7c:26:53:5c:eb:e1:90:82:27:
         af:1b:1d:c8:1b:49:70:59:3f:cf:9e:0c:b9:da:33:ca:c1:ab:
         c8:75:42:dd:74:42:fd:c2:3c:27:0b:f5:3f:8f:0c:7d:9f:dd:
         10:d1:38:48:ac:88:59:e2:ff:00:68:72:e6:c1:dc:41:da:26:
         4d:4c:18:fe:0d:7e:39:8c:f8:9e:45:ac:43:01:fe:4e:17:45:
         0d:16:a7:40
-----BEGIN CERTIFICATE-----
MIIF3DCCBMSgAwIBAgISAYVw+pL+e3AeolJVuhWCOrUHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjMwMTAyMDUzNTQ3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmOTk4MDM1ODk1Zjk1NTQ5YzJjZGFhYzNmMDA1NDQ2Y2JkZDExYzAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApHSxvH8Gh5rioXgvqjlkhOr+VK5A
qi07WynHO9OBjHnQ4M7OOAOP2b7hDsQh31Zn8yaX/IBpJ9GUQNdAP80jLX3pzoBM
ErEvv/wfkAMnUtsexqn7nNezCZXdROaCwLcR4RKbBCzvMwpcdopy1yM/LJw61mMH
BnZKObm8TfLPoWVF+irkRtQWIwumd2NsfnvmphHovoAG+H/q2UpzXGyS8ojNm0dk
6V7qILWxWAiJ1qOfEl2i3J2jEJiaz/DDX0v/4CPp3Tp4EuaqBoN2qttVz8MTLRfa
bRw83+ZQnpWBE8j7ENa2IActtah3uEupsitRi2pRfLR3RW70MS5G8ykEnQIDAQAB
o4IC6DCCAuQwHQYDVR0OBBYEFPmYA1iV+VVJws2qw/AFRGy90RwCMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEkBggrBgEFBQcBCwSCARYwggESMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzA0Lzg3YzNl
ZS1kMDg2LTQ1NTktOTBkNC1mM2JhOWU3ZWM3OGYvMS8wfQYIKwYBBQUHMAqGcXJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDQvODdjM2Vl
LWQwODYtNDU1OS05MGQ0LWYzYmE5ZTdlYzc4Zi8xLzEtWmdEV0pYNVZVbkN6YXJE
OEFWRWJMM1JIQUkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAucmlwZS5u
ZXQvbm90aWZpY2F0aW9uLnhtbDBZBgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jw
a2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhD
MlFIVlYzZDVtay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBggrBgEF
BQcBBwEB/wRXMFUwDAQCAAEwBgMEArn6KDBFBAIAAjA/AwUDKgLYAAMFAyoE3gAD
BQMqC/uAAwUDKg4vQAMFAyoOPMADBQMqDnFAAwUDKg6xgAMFAyoO5IADBQMqDvzA
MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwMU6zANBgkqhkiG9w0BAQsFAAOCAQEA
fC43jkNlC1S0vOaoL6Aqj7CpCvLzLr2LhcII9NlWJBAZdvFIhM59AppC1nXmRCCd
P6HFQCN6uKH083LUbVaRzQvJZACd1WT+jTWERahoScTPWDPqOjFnXBJJrivjF9+W
yprk71SbBCYkt4uS07hFDsobSVP5Rpr+u2R43nHyyjwwWnb5H2OAjKrAXfE8IroZ
A9EwolsNONGOl+QxUWCbzeK0c/aFj3KoqsuMfCZTXOvhkIInrxsdyBtJcFk/z54M
udozysGryHVC3XRC/cI8Jwv1P48MfZ/dENE4SKyIWeL/AGhy5sHcQdomTUwY/g1+
OYz4nkWsQwH+ThdFDRanQA==
-----END CERTIFICATE-----
Generated at Sat Sep 23 09:34:28 2023 by rpki-client on console-fra.rpki-client.org