Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1Ix1EFoTEp1S6ifiUVlcvrD4pko.cer
File:                     1Ix1EFoTEp1S6ifiUVlcvrD4pko.cer (raw, json)
Hash identifier:          tmCjc/k1mvYzjwgVvuKz+ATWFbcu2kgTMQrWpe9qs/o=
Subject key identifier:   D4:8C:75:10:5A:13:12:9D:52:EA:27:E2:51:59:5C:BE:B0:F8:A6:4A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856FAF0CFA0CE268CC2B8D84D168948B9B
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/03/a370c1-b2f6-4048-ae6c-8abcc15a999a/1/1Ix1EFoTEp1S6ifiUVlcvrD4pko.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/03/a370c1-b2f6-4048-ae6c-8abcc15a999a/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 23:33:41 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 91.195.138.0/23

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:af:0c:fa:0c:e2:68:cc:2b:8d:84:d1:68:94:8b:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 23:33:41 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=d48c75105a13129d52ea27e251595cbeb0f8a64a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:b8:6e:cc:5e:86:d6:86:3b:d2:56:9e:98:98:
                    24:14:78:28:b4:28:62:b7:d7:fd:db:9e:d0:32:84:
                    6a:6f:b0:4d:9f:83:df:10:97:20:31:da:2c:99:9b:
                    a6:0a:0a:15:b5:cb:2a:7e:cd:76:fe:c4:92:c0:32:
                    6e:de:6e:47:c5:ef:60:1f:c7:4f:18:68:45:80:8b:
                    58:81:5c:43:c3:21:54:10:dd:c8:d2:a7:73:48:28:
                    b2:76:01:55:72:1f:c7:79:57:13:0b:39:9a:d5:ba:
                    6d:76:b9:71:88:28:08:5c:be:f2:0e:bc:61:50:6f:
                    16:d7:0e:db:00:e8:90:61:b8:87:d1:9e:5f:00:d8:
                    20:64:09:ee:38:9e:48:f8:4e:17:a2:4b:22:87:29:
                    ec:0d:34:fd:ce:53:a1:1d:e1:19:14:b4:36:73:11:
                    7e:2b:0e:0e:af:c5:f6:c5:f8:7a:62:5d:15:66:49:
                    d8:38:49:86:a8:3d:57:5e:ed:7c:be:d5:a8:31:73:
                    dd:6d:fa:8f:01:fb:bf:9c:ca:65:b8:67:83:84:9b:
                    53:3d:38:85:cd:3b:22:40:fb:12:94:6b:a4:d6:b6:
                    7e:a4:0b:a3:e5:3a:c2:79:a6:b8:46:c0:28:ff:94:
                    c8:11:eb:91:c0:25:2f:5b:1d:36:23:a7:be:6d:dd:
                    99:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:8C:75:10:5A:13:12:9D:52:EA:27:E2:51:59:5C:BE:B0:F8:A6:4A
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/a370c1-b2f6-4048-ae6c-8abcc15a999a/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/a370c1-b2f6-4048-ae6c-8abcc15a999a/1/1Ix1EFoTEp1S6ifiUVlcvrD4pko.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.195.138.0/23

    Signature Algorithm: sha256WithRSAEncryption
         80:f4:7f:dd:84:7c:28:15:4c:96:bb:fa:a5:a5:e6:04:aa:9f:
         78:c9:26:5f:66:d8:98:f6:9e:d2:0e:83:b6:ab:f1:e5:4c:bd:
         ee:f8:22:0a:4d:a4:97:f8:cb:fd:08:9a:8d:76:c5:d5:ba:22:
         82:49:2f:05:3a:3a:53:10:fe:eb:b7:d3:69:83:79:38:24:d8:
         d9:7b:e2:5f:31:9b:3d:c3:dd:e8:df:1a:a3:90:97:a7:74:cb:
         cf:c3:e3:c9:6c:72:f9:15:41:6d:c8:e2:11:ee:a7:4d:11:4f:
         27:7e:6e:f7:a3:3b:f1:e0:57:e0:0f:1c:4b:b2:c5:9c:d5:61:
         91:5a:ab:97:3f:0d:e8:bd:47:c9:72:62:3b:2e:4f:f7:29:84:
         c1:56:a6:d7:93:c5:6b:7d:31:84:a2:90:e0:1f:c2:10:cd:ce:
         f1:74:05:04:79:39:fd:41:af:b3:a7:62:a5:66:65:c8:d5:51:
         4a:5b:c4:e6:9d:a3:a8:ad:3d:b6:ef:7d:60:4b:aa:2a:cc:13:
         eb:6b:92:4e:35:2e:06:59:a9:85:62:51:a8:8f:da:16:16:38:
         3c:06:ed:5d:86:39:03:0f:32:9d:a8:ce:38:4a:f6:2a:8b:72:
         e1:df:34:01:86:38:71:a3:4e:1d:60:97:b2:9e:00:06:11:f4:
         8b:13:02:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----