Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1Shl6DtwG4upNBAcNMEevfP6g7s.cer
File:                     1Shl6DtwG4upNBAcNMEevfP6g7s.cer (raw, json)
Hash identifier:          FeQu6lcW3ZnFSZRpEU/TmuWMM+tnRvSRUIfXiepY/9k=
Subject key identifier:   D5:28:65:E8:3B:70:1B:8B:A9:34:10:1C:34:C1:1E:BD:F3:FA:83:BB
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856ED365AF1B790EEF8B770A093C3043DC
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/db/5c565e-0427-4097-bc12-eb70ba1bde7b/1/1Shl6DtwG4upNBAcNMEevfP6g7s.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/db/5c565e-0427-4097-bc12-eb70ba1bde7b/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 19:33:46 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 37.140.250.0/24
                          IP: 2a11:54c0::/29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6e:d3:65:af:1b:79:0e:ef:8b:77:0a:09:3c:30:43:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 19:33:46 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=d52865e83b701b8ba934101c34c11ebdf3fa83bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:a7:c1:ad:dc:79:b0:ce:1b:97:10:76:74:b6:
                    6a:13:5b:9a:76:45:87:9b:00:bf:f9:e7:71:df:08:
                    93:c7:9d:55:5b:f3:35:5a:1f:8f:b5:df:48:df:31:
                    0b:be:12:da:cf:9e:85:f4:07:06:7d:a6:d9:94:0e:
                    e2:80:48:91:bd:e3:5f:02:25:84:a3:24:58:f9:e6:
                    bd:d7:94:4e:db:27:be:95:03:e0:29:93:5d:12:4d:
                    5b:17:5a:1e:5d:b6:5b:ab:e6:ae:a7:2f:bf:4f:67:
                    8a:b5:10:15:03:26:15:97:22:88:0e:e9:d6:a3:37:
                    d4:da:43:bc:f8:57:57:6a:5d:38:81:88:c7:27:00:
                    5b:c9:41:09:db:97:36:3a:00:a6:51:af:f8:d6:8c:
                    0c:1a:d4:27:95:77:2a:43:4a:86:d8:4d:c1:2a:df:
                    f5:00:b6:8e:b6:d0:65:f1:b3:10:9e:ae:4e:34:81:
                    e8:4b:56:8a:f9:e3:9e:42:a7:01:ee:58:aa:9a:42:
                    24:f3:ff:91:b2:60:ca:67:79:c9:da:3d:3c:9f:5d:
                    33:0c:04:b9:fa:b8:06:cc:cb:ae:5b:f4:80:b8:7d:
                    22:d7:8d:55:da:ed:34:cb:30:00:9f:8c:00:69:34:
                    8c:c3:a0:dc:0c:47:ba:3b:de:00:06:66:9f:90:69:
                    6b:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:28:65:E8:3B:70:1B:8B:A9:34:10:1C:34:C1:1E:BD:F3:FA:83:BB
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/5c565e-0427-4097-bc12-eb70ba1bde7b/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/5c565e-0427-4097-bc12-eb70ba1bde7b/1/1Shl6DtwG4upNBAcNMEevfP6g7s.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  37.140.250.0/24
                IPv6:
                  2a11:54c0::/29

    Signature Algorithm: sha256WithRSAEncryption
         34:9b:f2:7e:c5:1d:f6:29:65:1d:bd:b3:74:4c:24:41:21:5d:
         c5:a1:0b:d6:73:03:b7:c0:26:8e:51:05:2b:2f:20:d6:8e:e2:
         c2:50:68:a9:99:f2:b7:e8:07:7c:0b:f0:dc:a4:30:a8:73:50:
         3b:f7:74:ab:6f:64:d6:12:fc:29:f0:3e:2f:6f:90:98:f4:3b:
         e4:53:c5:a5:f2:d5:df:82:c2:3c:47:08:3d:c3:ff:c8:2b:77:
         c6:b9:44:b8:2e:81:e2:c0:57:f5:5d:f1:82:e4:86:06:b3:a8:
         a1:3f:49:91:e2:c3:e7:4c:3a:4d:36:36:6d:73:d9:f2:fe:e4:
         3e:57:c0:91:df:88:33:1e:32:5a:de:6f:0a:23:81:0b:ef:a9:
         da:80:00:d4:68:a7:8c:63:1a:61:da:33:f8:29:c0:07:c9:36:
         27:cd:e2:81:f7:33:e3:e7:27:7e:69:ab:60:8f:2b:d8:10:4c:
         c6:8f:dd:03:62:da:81:7c:40:d7:5a:62:f5:ec:bb:73:de:ed:
         c3:dc:da:6f:d0:0a:c0:53:f7:d6:c4:65:c9:98:13:36:70:d5:
         56:91:6f:b0:1b:0e:19:7a:ef:32:78:d6:23:b9:b0:72:1e:2a:
         eb:e0:1f:52:65:40:b9:a4:95:57:07:96:89:75:b5:0f:f2:47:
         38:34:e1:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----