Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2AwvnzmkVNzdlzHlKDZhFgnpquc.cer
File:                     2AwvnzmkVNzdlzHlKDZhFgnpquc.cer (raw, json)
Hash identifier:          Eq+kVyv6CoMjc0UeC8HiKWOcn0XnCLL/uk7vWpHvnTw=
Subject key identifier:   D8:0C:2F:9F:39:A4:54:DC:DD:97:31:E5:28:36:61:16:09:E9:AA:E7
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856C3F5BDD1EE1F730DF1080F21239F932
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/d0/052fd3-11be-4ee4-a6cd-286aca1b8bdb/1/2AwvnzmkVNzdlzHlKDZhFgnpquc.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/d0/052fd3-11be-4ee4-a6cd-286aca1b8bdb/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 07:32:49 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 80.73.242.0/24
                          IP: 2a11:1480::/29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6c:3f:5b:dd:1e:e1:f7:30:df:10:80:f2:12:39:f9:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 07:32:49 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=d80c2f9f39a454dcdd9731e52836611609e9aae7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:27:28:c1:bc:ac:65:3e:af:5b:5d:8a:f0:82:
                    1f:45:51:00:81:14:70:9b:5c:87:70:66:e5:8e:87:
                    62:c8:ac:bd:1b:9b:fd:1f:de:66:f9:61:7f:9f:20:
                    48:5f:5c:aa:3c:29:87:a6:93:d6:bd:62:63:99:dc:
                    4b:37:a8:c9:de:39:41:76:82:27:97:eb:6d:69:30:
                    bc:38:5b:ab:e8:d4:f1:0f:7e:d2:2c:c0:a2:20:a4:
                    f5:a8:c2:b4:10:67:95:4f:74:0e:30:14:5a:55:dd:
                    14:c5:04:f9:75:9e:ec:30:40:81:75:78:b5:dd:93:
                    e4:54:94:f9:24:e5:4a:1f:5d:5a:69:f5:e4:be:39:
                    2a:19:98:09:1c:5f:21:b9:80:92:e7:f4:0a:ab:c6:
                    ec:42:13:8c:34:23:09:39:4f:ba:31:09:67:e4:d4:
                    46:ae:85:74:5b:26:37:40:a5:1c:3c:d1:18:93:47:
                    ed:fb:61:0c:80:fc:ff:85:ad:1b:7d:e0:57:2b:b6:
                    c8:e6:64:d0:09:52:45:a8:0a:a4:30:bc:72:2f:4a:
                    89:fa:c2:81:87:de:66:5b:ab:b9:14:8c:13:aa:ab:
                    b3:08:2a:0d:d0:1f:f2:b8:4d:83:a5:b0:b2:b3:08:
                    38:2e:c2:79:c6:39:da:8b:ea:cf:35:2d:8c:62:4c:
                    bd:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:0C:2F:9F:39:A4:54:DC:DD:97:31:E5:28:36:61:16:09:E9:AA:E7
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/052fd3-11be-4ee4-a6cd-286aca1b8bdb/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/052fd3-11be-4ee4-a6cd-286aca1b8bdb/1/2AwvnzmkVNzdlzHlKDZhFgnpquc.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.73.242.0/24
                IPv6:
                  2a11:1480::/29

    Signature Algorithm: sha256WithRSAEncryption
         a0:ee:c7:c3:8b:38:2b:2c:f3:8e:ab:0f:01:07:27:44:ec:79:
         af:00:69:8c:0d:4d:d8:c9:59:67:95:d0:43:71:71:58:ab:2c:
         78:02:c6:a7:fb:d9:cf:50:6c:1e:84:0d:83:88:f8:a4:34:d6:
         39:5f:38:a1:b8:71:89:e6:86:37:39:30:2b:9a:37:17:a1:ce:
         50:6f:9b:69:1f:6d:b2:01:bd:1e:33:9b:df:8f:15:b3:47:9d:
         39:9c:43:11:2d:53:04:6d:04:7b:7e:7e:17:4a:07:1e:20:ca:
         c6:1d:b4:86:9d:c2:91:bd:28:57:f6:8e:5a:c0:b7:c1:bf:f0:
         bd:99:e1:0a:76:17:bf:7e:96:50:44:02:53:2a:5c:3f:15:cb:
         98:4e:14:91:19:08:3f:5a:d6:bd:2f:40:87:f0:b4:c1:b6:8a:
         5d:5d:8d:88:3f:94:b4:ab:26:c6:ab:4e:dd:dd:0e:4a:ca:5e:
         15:60:85:1c:54:69:53:92:67:81:ae:42:cc:13:ad:1a:d9:99:
         ba:df:a3:fa:02:11:8a:65:5e:0c:b4:4d:e6:a9:75:a5:90:97:
         ab:a2:39:5c:af:6a:2a:17:d7:d6:6a:ff:86:b3:6e:c2:5a:9e:
         6c:4e:33:52:1c:f9:3b:7e:51:73:69:77:e8:ec:06:fd:fe:58:
         8f:da:fe:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----