Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1mHWCkcyZzg-yD8rccCO9DknpPk.cer
File:                     1mHWCkcyZzg-yD8rccCO9DknpPk.cer (raw, json)
Hash identifier:          gBSNkKy5VOkDodBm9f3sYsShkRWWS+AWkfMu1S0LLEA=
Subject key identifier:   D6:61:D6:0A:47:32:67:38:3E:C8:3F:2B:71:C0:8E:F4:39:27:A4:F9
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856B6370BEC4F6BCD3CC23D747DDDC2C52
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/89/aa479a-e6d0-4362-9317-49ba6ccde770/1/1mHWCkcyZzg-yD8rccCO9DknpPk.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/89/aa479a-e6d0-4362-9317-49ba6ccde770/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 03:32:37 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 185.222.214.0/24
                          IP: 2a11:a800::/29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6b:63:70:be:c4:f6:bc:d3:cc:23:d7:47:dd:dc:2c:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 03:32:37 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=d661d60a473267383ec83f2b71c08ef43927a4f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:45:c0:21:b3:63:7b:59:8b:da:e4:69:4c:99:
                    38:ab:94:ad:74:3b:23:46:76:b7:74:5e:fc:c0:18:
                    31:11:5f:50:42:d0:85:96:d2:5f:6b:2d:3f:cc:c9:
                    33:56:da:f9:29:19:e2:07:5f:18:67:cf:34:5c:aa:
                    31:b1:91:47:28:4c:56:5c:3a:ba:74:79:e7:a3:10:
                    77:45:09:aa:30:3d:ff:64:3d:a2:7b:07:32:b8:92:
                    1f:e6:72:77:90:1a:5c:07:24:c5:c5:ca:3d:30:8e:
                    43:08:64:42:c7:7d:7a:fc:4f:15:f6:67:d6:dc:f2:
                    d4:85:00:9f:1b:59:fa:d5:a8:2f:dd:4e:44:e5:ac:
                    ff:c4:62:9b:d4:5a:52:8a:cd:7e:69:b7:e1:58:a6:
                    2c:d4:e7:06:96:0b:48:52:9e:f7:8c:d9:8a:8b:75:
                    0a:76:14:24:8f:b2:29:d3:95:b4:b0:28:3e:c8:c6:
                    87:98:7a:62:46:92:7d:a3:0f:e4:7b:b2:55:49:23:
                    7e:2e:43:b8:3c:3e:91:75:97:2b:f0:1b:49:07:96:
                    27:b9:dd:e3:f2:ef:72:f8:2e:20:6c:be:98:6f:c0:
                    ff:96:bb:e1:ca:ac:7c:df:21:23:ad:b7:11:29:81:
                    2a:75:ee:b2:aa:c6:3a:6c:c7:08:e8:e9:ec:49:fb:
                    82:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:61:D6:0A:47:32:67:38:3E:C8:3F:2B:71:C0:8E:F4:39:27:A4:F9
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/aa479a-e6d0-4362-9317-49ba6ccde770/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/aa479a-e6d0-4362-9317-49ba6ccde770/1/1mHWCkcyZzg-yD8rccCO9DknpPk.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.222.214.0/24
                IPv6:
                  2a11:a800::/29

    Signature Algorithm: sha256WithRSAEncryption
         ae:a7:8c:c4:2a:a2:20:fa:18:f6:e5:c4:2c:b8:e4:39:35:ae:
         eb:33:f2:0d:b1:33:b5:ba:d5:ec:67:21:18:54:5b:2a:b7:b5:
         66:70:63:37:3d:d7:31:7b:95:8d:0c:63:d7:e2:76:24:ef:27:
         76:7b:e3:4e:e9:aa:fc:5d:80:ee:8b:13:14:df:66:d9:47:68:
         e5:99:a6:91:d9:3d:23:5a:5f:27:84:58:ac:a5:1d:68:c0:52:
         15:7c:e0:f7:25:03:e0:eb:46:c9:cf:ed:e8:07:55:48:22:6a:
         c2:9b:94:69:b3:2c:c6:a8:22:ff:43:06:8f:92:ae:5b:6e:48:
         07:fb:51:31:40:1a:27:ac:3d:81:56:3d:84:db:bf:26:f4:90:
         62:b7:8e:20:fc:1c:fd:b0:fe:fe:68:97:33:cf:72:6c:cd:48:
         37:db:f1:01:5a:b6:69:35:d0:3f:75:c7:12:13:50:c4:02:83:
         e1:30:32:f4:86:ec:85:61:da:57:2b:d2:8b:18:cf:55:59:2e:
         75:ed:95:27:1e:bf:d0:e7:00:b7:89:b9:3a:cb:80:3c:d4:40:
         b5:af:e4:ea:40:61:ed:ca:6f:8e:c5:4f:74:b3:eb:92:e9:43:
         ab:44:41:02:84:97:9b:a3:45:e7:6d:87:0c:01:5c:1c:50:65:
         30:0b:32:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:54 2023 by rpki-client on console-ams.rpki-client.org