Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1nlM_zXcvUJ_vnuiqUMzqo3wpGc.cer
File:                     1nlM_zXcvUJ_vnuiqUMzqo3wpGc.cer (raw, json)
Hash identifier:          PHA8FwlYQwEfojf0WfBtPh43E2WU5z/FH68xy+bPtTo=
Subject key identifier:   D6:79:4C:FF:35:DC:BD:42:7F:BE:7B:A2:A9:43:33:AA:8D:F0:A4:67
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018571D711C359A934099C3DD277A73FFD0E
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/33/fcf886-01e9-4bc8-9688-a0ef6c9dc33a/1/1nlM_zXcvUJ_vnuiqUMzqo3wpGc.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/33/fcf886-01e9-4bc8-9688-a0ef6c9dc33a/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 02 Jan 2023 09:36:38 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 45.144.128.0/22
                          IP: 2a07:5580::/29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:71:d7:11:c3:59:a9:34:09:9c:3d:d2:77:a7:3f:fd:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 09:36:38 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=d6794cff35dcbd427fbe7ba2a94333aa8df0a467
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:01:e7:f0:3e:80:ee:f1:cb:58:e4:9f:2c:d5:
                    62:47:2b:2a:18:f6:fe:1a:63:c5:0c:e8:9f:9d:39:
                    ff:5a:ee:d0:7e:87:ad:18:f0:27:8a:82:ec:3f:ab:
                    61:f4:60:55:b5:e7:bb:bd:c6:2b:d6:7b:b1:aa:67:
                    b6:bf:86:90:59:70:55:b0:cd:d7:3a:34:13:5d:c5:
                    99:0e:3f:e6:37:76:c6:af:cb:0a:d3:dc:ad:d2:23:
                    b7:b9:08:1c:d0:71:1e:dd:32:29:a6:ab:26:2b:9b:
                    9f:51:da:f0:82:b0:66:e0:bc:17:36:ae:cb:f3:41:
                    b2:39:a7:c5:3e:15:9f:a6:2c:4c:16:c0:fe:f8:cf:
                    b5:f8:c2:71:ad:c2:52:90:84:d6:4f:23:71:e6:6d:
                    51:27:af:d7:28:9a:18:2c:e3:0e:dc:6b:43:99:38:
                    f3:4b:b6:37:5e:df:8b:ed:f1:c6:30:53:16:61:7a:
                    36:d0:c5:0b:00:b1:fb:59:a9:55:f3:6d:2f:f3:29:
                    e2:0c:62:97:72:3c:f3:23:c5:d7:b8:97:cc:7d:8b:
                    75:1e:ab:58:b4:d9:eb:84:4f:b9:3f:8a:57:f4:93:
                    16:e6:13:3c:96:a8:e3:aa:3a:90:e4:aa:d5:21:d1:
                    b7:52:56:ca:89:cd:c4:0b:72:1a:a8:17:3d:0d:44:
                    25:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:79:4C:FF:35:DC:BD:42:7F:BE:7B:A2:A9:43:33:AA:8D:F0:A4:67
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/fcf886-01e9-4bc8-9688-a0ef6c9dc33a/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/fcf886-01e9-4bc8-9688-a0ef6c9dc33a/1/1nlM_zXcvUJ_vnuiqUMzqo3wpGc.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.144.128.0/22
                IPv6:
                  2a07:5580::/29

    Signature Algorithm: sha256WithRSAEncryption
         1c:54:9d:77:a1:ab:f0:59:fe:53:91:65:bb:1d:2d:6e:46:94:
         6e:a5:66:4b:15:e3:ae:8e:af:5c:6e:51:0b:1e:40:ef:2c:36:
         27:4d:ca:9a:47:3c:f5:95:ac:f7:93:13:30:02:b3:24:21:7c:
         35:8e:95:c5:f7:2b:ad:c8:22:b3:95:e1:9d:41:6c:1c:cc:3f:
         a6:69:52:e6:d9:0c:00:ba:bc:19:c4:7b:4c:d5:0b:d0:d6:8c:
         e6:c9:3e:e9:e6:a2:64:9f:83:1a:dc:4f:72:df:b6:76:3a:cb:
         1f:16:4f:1d:08:48:c3:b3:01:a2:28:fd:ae:ea:a0:15:d2:ec:
         23:fc:64:f1:36:a2:80:d3:68:d8:b2:67:e0:89:31:0b:84:6f:
         4d:3b:f3:d3:5f:79:14:bd:33:5e:ea:ce:c9:ff:ef:89:3d:b1:
         aa:8d:47:a6:3a:f7:66:19:6b:fd:d8:e5:57:21:95:d8:f2:02:
         89:4e:8f:fd:4f:e8:84:75:dd:af:15:df:f1:21:9a:d2:49:51:
         15:74:8e:df:7f:10:13:8c:f9:ed:26:f9:b6:44:76:a6:e4:8d:
         25:ee:fc:63:07:b8:ec:9f:63:16:fe:5e:8b:8a:5e:78:29:85:
         d1:ff:d0:18:19:1f:1a:3c:fb:78:ef:34:5e:ba:0d:da:66:17:
         eb:04:f0:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:54 2023 by rpki-client on console-ams.rpki-client.org