Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-xG9XERMI5wZh3bzYODxAMm12AI.cer
File:                     1-xG9XERMI5wZh3bzYODxAMm12AI.cer (raw, json)
Hash identifier:          KaGzAXakORknfHg3HtWrj1w43BBDvOYUBZZ2dxtQnTY=
Subject key identifier:   FB:11:BD:5C:44:4C:23:9C:19:87:76:F3:60:E0:F1:00:C9:B5:D8:02
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856BD12C3509973EE9C545F55D0D150D2F
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/b3/2ac8a2-f1cc-4f85-90c9-4ebec011a288/1/1-xG9XERMI5wZh3bzYODxAMm12AI.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/b3/2ac8a2-f1cc-4f85-90c9-4ebec011a288/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 05:32:28 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 176.97.211.0/24
                          IP: 2a11:dc40::/29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6b:d1:2c:35:09:97:3e:e9:c5:45:f5:5d:0d:15:0d:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 05:32:28 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=fb11bd5c444c239c198776f360e0f100c9b5d802
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:1c:d7:b0:cf:96:bc:8c:d5:1d:f9:38:f2:cb:
                    c0:c3:06:aa:4d:78:15:86:f7:cc:a1:36:31:7f:6e:
                    ca:30:32:c8:a5:ed:4b:64:10:2e:28:5d:68:16:c7:
                    00:d8:dd:86:6b:23:bb:9c:85:9c:f0:41:eb:9f:ac:
                    be:64:09:f4:14:f5:64:16:57:89:d0:8a:f5:ae:19:
                    02:83:f6:03:bf:f5:cb:4a:90:ee:7b:10:b2:60:8f:
                    2e:ad:0a:d8:e8:5b:bd:4e:db:03:8a:71:cd:ee:09:
                    6c:c3:38:a9:e2:5d:0d:67:ca:20:31:e1:c6:cc:76:
                    c9:36:2b:28:0d:53:58:d0:d0:4d:36:d5:f0:8a:51:
                    cb:a8:c4:4a:97:58:85:28:09:db:92:e6:67:23:77:
                    0b:be:e5:4c:41:34:fa:63:59:6b:ea:68:16:fd:80:
                    f5:79:29:3a:a1:80:44:a8:a3:3e:49:b8:eb:18:c3:
                    f6:4a:fc:ff:ea:5c:7c:24:33:e8:91:35:d2:14:5d:
                    9f:da:9c:25:9d:a8:09:25:93:9c:fd:bf:5c:a3:a1:
                    e0:22:fc:77:b8:ff:a4:16:0f:b6:d7:94:ca:0b:5d:
                    a4:49:9c:40:e8:6c:6c:18:3e:14:f1:1e:3f:23:9c:
                    0b:2a:c1:ea:4a:03:ce:a6:86:0a:16:2f:f9:a3:e9:
                    59:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:11:BD:5C:44:4C:23:9C:19:87:76:F3:60:E0:F1:00:C9:B5:D8:02
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/2ac8a2-f1cc-4f85-90c9-4ebec011a288/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/2ac8a2-f1cc-4f85-90c9-4ebec011a288/1/1-xG9XERMI5wZh3bzYODxAMm12AI.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  176.97.211.0/24
                IPv6:
                  2a11:dc40::/29

    Signature Algorithm: sha256WithRSAEncryption
         97:46:64:01:e1:d4:1b:fe:41:aa:28:cf:66:b1:dc:c9:96:34:
         06:84:bd:e3:14:18:c2:21:2d:df:90:7b:7c:b9:97:cd:da:97:
         60:5e:cd:c7:7f:49:1c:f7:8a:76:46:11:c1:a8:c1:b7:a2:07:
         bb:34:64:cd:d5:88:90:7e:b4:57:b6:23:20:3b:73:bf:4f:a2:
         a2:b4:3d:1e:2e:ad:0b:ca:31:e5:0f:23:5c:ad:1b:5c:c1:e1:
         3d:6a:94:b7:d5:ad:5e:4a:8b:82:89:ac:f2:94:a1:36:55:80:
         02:94:0d:11:81:8b:05:c5:e0:08:23:b6:6c:53:85:ef:38:55:
         f0:54:59:0b:ce:8c:ed:96:36:2d:4c:86:c4:cd:1c:75:06:b8:
         7b:9d:6f:91:a0:a6:22:1e:17:cf:5d:a3:a8:c1:ef:9a:99:de:
         2a:fb:3f:6f:d4:15:49:31:66:73:f8:71:8a:f2:2c:c8:03:a8:
         8c:0b:df:67:71:6f:18:18:b7:66:0f:2c:70:0a:37:d8:e1:a8:
         87:83:e5:c5:88:30:05:a4:fd:74:ca:85:44:a9:cd:d6:3c:8d:
         4e:e7:c7:8f:3d:3a:c7:9b:49:3f:72:45:a8:ef:1a:83:ab:36:
         b6:72:0d:e3:6c:8e:fa:d2:15:fc:ad:66:ab:3a:cc:7c:17:b2:
         23:59:de:d1
-----BEGIN CERTIFICATE-----
MIIFiDCCBHCgAwIBAgISAYVr0Sw1CZc+6cVF9V0NFQ0vMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjMwMTAxMDUzMjI4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYjExYmQ1YzQ0NGMyMzljMTk4Nzc2ZjM2MGUwZjEwMGM5YjVkODAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAthzXsM+WvIzVHfk48svAwwaqTXgV
hvfMoTYxf27KMDLIpe1LZBAuKF1oFscA2N2GayO7nIWc8EHrn6y+ZAn0FPVkFleJ
0Ir1rhkCg/YDv/XLSpDuexCyYI8urQrY6Fu9TtsDinHN7glswzip4l0NZ8ogMeHG
zHbJNisoDVNY0NBNNtXwilHLqMRKl1iFKAnbkuZnI3cLvuVMQTT6Y1lr6mgW/YD1
eSk6oYBEqKM+SbjrGMP2Svz/6lx8JDPokTXSFF2f2pwlnagJJZOc/b9co6HgIvx3
uP+kFg+215TKC12kSZxA6GxsGD4U8R4/I5wLKsHqSgPOpoYKFi/5o+lZEQIDAQAB
o4IClDCCApAwHQYDVR0OBBYEFPsRvVxETCOcGYd282Dg8QDJtdgCMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEkBggrBgEFBQcBCwSCARYwggESMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2IzLzJhYzhh
Mi1mMWNjLTRmODUtOTBjOS00ZWJlYzAxMWEyODgvMS8wfQYIKwYBBQUHMAqGcXJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjMvMmFjOGEy
LWYxY2MtNGY4NS05MGM5LTRlYmVjMDExYTI4OC8xLzEteEc5WEVSTUk1d1poM2J6
WU9EeEFNbTEyQUkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAucmlwZS5u
ZXQvbm90aWZpY2F0aW9uLnhtbDBZBgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jw
a2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhD
MlFIVlYzZDVtay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEF
BQcBBwEB/wQfMB0wDAQCAAEwBgMEALBh0zANBAIAAjAHAwUDKhHcQDANBgkqhkiG
9w0BAQsFAAOCAQEAl0ZkAeHUG/5BqijPZrHcyZY0BoS94xQYwiEt35B7fLmXzdqX
YF7Nx39JHPeKdkYRwajBt6IHuzRkzdWIkH60V7YjIDtzv0+iorQ9Hi6tC8ox5Q8j
XK0bXMHhPWqUt9WtXkqLgoms8pShNlWAApQNEYGLBcXgCCO2bFOF7zhV8FRZC86M
7ZY2LUyGxM0cdQa4e51vkaCmIh4Xz12jqMHvmpneKvs/b9QVSTFmc/hxivIsyAOo
jAvfZ3FvGBi3Zg8scAo32OGoh4PlxYgwBaT9dMqFRKnN1jyNTufHjz06x5tJP3JF
qO8ag6s2tnIN42yO+tIV/K1mqzrMfBeyI1ne0Q==
-----END CERTIFICATE-----