Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1MrY0G329CvIonvbqr9sc2zDJOY.cer
File:                     1MrY0G329CvIonvbqr9sc2zDJOY.cer (raw, json)
Hash identifier:          geX9MBrFg/8Ga5YQjU08oG3WmGVSfAPvj99iu0++YiU=
Subject key identifier:   D4:CA:D8:D0:6D:F6:F4:2B:C8:A2:7B:DB:AA:BF:6C:73:6C:C3:24:E6
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856F416D7EB975A6F1C4FB303A2277B0BF
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/82/ffbbd7-ba26-473e-88b1-a8d6683018dc/1/1MrY0G329CvIonvbqr9sc2zDJOY.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/82/ffbbd7-ba26-473e-88b1-a8d6683018dc/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 21:33:56 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 193.38.155.0/24
                          IP: 2a11:8c00::/29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:41:6d:7e:b9:75:a6:f1:c4:fb:30:3a:22:77:b0:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 21:33:56 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=d4cad8d06df6f42bc8a27bdbaabf6c736cc324e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:67:b7:b1:75:a2:bb:f5:36:0e:9b:37:63:41:
                    76:d7:23:82:26:ff:aa:97:da:1b:2f:81:2c:73:4d:
                    54:7c:3e:4a:fc:23:ec:3b:ec:1a:d0:29:a5:82:ba:
                    e0:a9:9a:e3:93:75:b6:fd:ff:ee:89:b9:d1:10:4e:
                    7d:03:56:54:ff:99:77:e6:bb:79:77:61:1b:de:14:
                    f9:c0:c1:48:d3:4d:41:88:ed:da:40:e0:df:f3:d4:
                    64:7d:e6:d8:32:f7:6c:61:3e:27:78:94:21:f5:6c:
                    9a:74:3b:8a:62:66:80:11:02:2d:45:af:72:ff:92:
                    cb:c9:5a:56:8d:6e:5a:6f:c6:fd:ee:5a:e6:7e:4c:
                    b1:3c:d3:0e:3e:91:e3:c7:38:bc:5a:f3:d7:ab:ed:
                    03:43:88:45:27:c0:c8:c9:96:0c:4b:fa:e3:15:e0:
                    fd:20:db:24:00:8b:de:f8:72:3a:0e:f2:cd:df:4b:
                    66:ed:a7:ab:d1:ee:a4:39:05:60:70:aa:6c:a3:79:
                    d5:ba:95:04:cf:ea:73:ad:d5:07:ad:b8:61:03:e8:
                    f0:06:a2:a2:e0:5e:cd:6a:33:d2:42:90:dd:78:cd:
                    4c:6a:d6:45:7f:36:74:aa:17:8e:64:1c:6c:8d:8a:
                    22:91:b6:54:d3:78:e2:05:9a:59:62:b8:8d:44:a7:
                    00:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:CA:D8:D0:6D:F6:F4:2B:C8:A2:7B:DB:AA:BF:6C:73:6C:C3:24:E6
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/ffbbd7-ba26-473e-88b1-a8d6683018dc/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/ffbbd7-ba26-473e-88b1-a8d6683018dc/1/1MrY0G329CvIonvbqr9sc2zDJOY.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.38.155.0/24
                IPv6:
                  2a11:8c00::/29

    Signature Algorithm: sha256WithRSAEncryption
         2c:ae:89:3f:7a:e3:51:31:d1:0b:08:38:e2:64:13:85:6a:28:
         77:fa:d9:f3:43:06:0f:8d:77:c3:5b:2f:af:03:d8:f8:fc:4f:
         a7:b6:cb:af:9e:35:4f:3b:86:68:7d:75:db:9c:f4:a0:0c:3f:
         85:bc:12:fa:ad:34:c4:0b:4c:07:2b:f4:cf:71:f5:58:70:9e:
         3f:04:52:05:0e:96:b5:95:24:55:36:7b:34:03:4c:7b:93:4b:
         f6:36:4f:b0:59:66:ae:55:29:cd:81:69:f6:36:1c:2a:af:9b:
         0d:95:62:43:77:cc:56:1c:5e:01:bf:b5:fe:cf:bc:05:1d:3e:
         33:38:df:46:04:9b:11:f8:f9:33:49:bc:1b:c5:c2:fa:6c:01:
         85:35:50:2e:14:dd:ed:9e:8e:53:83:18:0d:d1:52:e8:99:8b:
         a1:1a:3b:e2:17:19:60:2c:95:4a:bf:a4:85:ce:f9:8c:1a:12:
         b4:8a:9b:7d:a4:dd:cc:1a:39:eb:5b:be:84:e5:8a:7c:44:e4:
         74:60:8c:16:82:5d:85:28:63:7e:6c:8d:cd:42:f2:4c:1d:64:
         a5:b0:19:5b:52:9c:2d:cf:4b:01:b3:cf:d4:0e:c0:b5:97:29:
         1f:38:77:f2:16:ed:ba:aa:30:55:ba:fa:6c:f7:16:57:83:d3:
         1f:d9:a1:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----