Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1dsJVtJHAKbIwjv0WO2mxhj8-rM.cer
File:                     1dsJVtJHAKbIwjv0WO2mxhj8-rM.cer (raw, json)
Hash identifier:          KpnqLngoyyH67jwJdVrIrwGmGXfq4TGuQD2JT5M7KTI=
Subject key identifier:   D5:DB:09:56:D2:47:00:A6:C8:C2:3B:F4:58:ED:A6:C6:18:FC:FA:B3
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0185724370FD4CC932E59941DD3829ACFC44
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/b3/0049ae-b743-4acb-8d7b-380888b642f3/1/1dsJVtJHAKbIwjv0WO2mxhj8-rM.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/b3/0049ae-b743-4acb-8d7b-380888b642f3/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 02 Jan 2023 11:35:00 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 146.19.178.0/24
                          IP: 2a12:e300::/29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:72:43:70:fd:4c:c9:32:e5:99:41:dd:38:29:ac:fc:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 11:35:00 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=d5db0956d24700a6c8c23bf458eda6c618fcfab3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:6e:91:a1:cd:cc:f7:d9:c5:fe:6f:c0:e3:db:
                    90:99:23:d7:70:23:1c:7d:94:39:6d:91:f4:7f:8a:
                    17:ad:a0:87:22:49:d4:10:54:1c:b0:b1:17:11:f9:
                    b9:e0:71:d9:45:f2:f4:55:93:9b:6d:39:aa:91:de:
                    ae:f4:02:ce:17:13:bf:6e:5b:d6:e8:9b:41:a7:07:
                    f1:73:22:82:63:60:b4:a8:c7:e7:d6:8f:f0:9f:75:
                    9f:11:04:01:60:c4:9c:17:24:37:30:eb:16:09:cf:
                    9b:09:04:6b:d7:3e:c0:08:b7:36:cd:27:36:d1:c6:
                    86:62:e1:ea:68:68:5b:09:8c:b5:af:a7:7d:8a:d1:
                    f3:ce:61:0b:cf:64:3e:9d:c8:f4:de:bc:83:02:f2:
                    6b:fd:33:25:8a:a9:c7:72:3a:c4:35:93:0c:ed:97:
                    b9:55:14:69:2e:43:62:42:31:26:ac:d9:65:60:0d:
                    a8:a3:7c:ac:e9:77:ca:2b:c7:a0:5c:e3:d4:ea:1b:
                    f7:44:bd:05:77:58:0d:d3:40:de:8a:b6:1c:5f:48:
                    3a:76:2a:83:7d:44:36:4f:7f:da:4e:68:cb:ba:0f:
                    bb:d5:03:8f:64:88:78:b9:0b:f7:50:25:4d:2b:54:
                    04:95:54:eb:86:ee:5a:87:cc:5d:25:88:6a:86:71:
                    aa:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:DB:09:56:D2:47:00:A6:C8:C2:3B:F4:58:ED:A6:C6:18:FC:FA:B3
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/0049ae-b743-4acb-8d7b-380888b642f3/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/0049ae-b743-4acb-8d7b-380888b642f3/1/1dsJVtJHAKbIwjv0WO2mxhj8-rM.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.19.178.0/24
                IPv6:
                  2a12:e300::/29

    Signature Algorithm: sha256WithRSAEncryption
         2d:43:9f:c7:07:ae:84:65:16:7f:66:09:33:40:73:11:7c:3d:
         9b:1b:e2:84:bd:83:99:e0:48:99:c8:65:65:5e:ba:d7:09:56:
         6f:d8:b2:fc:c5:63:85:c8:94:0f:a3:ee:d8:95:1b:d0:a0:9e:
         6b:35:e0:e9:59:fe:89:4c:14:79:0d:ae:59:f0:26:6c:2c:ba:
         a6:31:4a:a4:9d:a5:4b:c8:9a:e7:ab:d2:c4:61:c3:98:bf:2b:
         9b:79:09:a9:c3:03:ab:34:bb:83:37:b6:eb:dc:84:42:78:58:
         74:98:a1:05:35:05:86:26:d6:06:8e:b8:79:0a:3f:58:bf:96:
         6f:af:b8:ee:6c:9d:25:bf:86:4a:4d:1f:33:9d:a1:39:d3:3f:
         91:13:3c:53:27:26:c0:66:30:a6:2f:ac:c0:b7:12:11:8b:18:
         e5:db:c9:d0:5e:e5:99:62:55:5b:ac:ef:2a:2e:cf:a2:3f:7a:
         e0:64:a0:86:6d:3e:61:71:75:df:de:75:ae:62:ff:76:53:0f:
         de:10:60:b5:f3:71:46:9a:2d:06:75:0b:fc:cf:d4:61:9d:cc:
         eb:88:42:fa:bd:1b:5b:7f:ce:c8:18:72:be:43:28:bb:1c:6d:
         50:81:aa:95:1f:64:a3:38:eb:fc:64:3e:7d:97:75:28:fa:3e:
         67:62:77:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 20 08:46:23 2023 by rpki-client on console-fra.rpki-client.org