Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3djV07KQmbJpJh7icU2h6VSMRjI.cer
File:                     3djV07KQmbJpJh7icU2h6VSMRjI.cer (raw, json)
Hash identifier:          ooilTF3MHmk0KIzDEI3pdINpqKX7b9lmIAlAk/1X3f4=
Subject key identifier:   DD:D8:D5:D3:B2:90:99:B2:69:26:1E:E2:71:4D:A1:E9:54:8C:46:32
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856ED40B682D8FCF0A93A06370BE07CFEF
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/8e/e913c7-8320-434c-a70f-f936783fabdb/1/3djV07KQmbJpJh7icU2h6VSMRjI.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/8e/e913c7-8320-434c-a70f-f936783fabdb/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 19:34:28 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 194.104.233.0/24
                          IP: 2a11:6640::/29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6e:d4:0b:68:2d:8f:cf:0a:93:a0:63:70:be:07:cf:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 19:34:28 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=ddd8d5d3b29099b269261ee2714da1e9548c4632
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:4d:55:49:51:39:de:e9:af:bd:ac:bd:57:a4:
                    6a:14:6d:f0:36:e8:24:54:ea:b2:70:25:fa:93:2a:
                    ff:17:b9:96:14:dd:c2:99:b0:80:31:60:1b:38:8f:
                    61:25:e9:62:47:2e:09:58:67:32:54:d7:19:14:f1:
                    6e:c8:da:d6:1e:ec:0d:95:b8:f2:f5:ab:90:0c:25:
                    bc:92:52:f5:0a:07:60:06:dc:49:0c:d5:fb:cc:43:
                    2a:02:6a:02:68:67:66:03:c2:ab:02:12:04:d6:60:
                    00:23:da:a0:12:f3:50:c6:11:32:c2:c9:d5:51:6a:
                    33:13:53:f8:fc:9d:80:db:58:89:25:c2:1b:08:88:
                    c6:a6:17:79:c7:f0:38:dc:67:09:27:6f:40:29:c2:
                    b3:7f:3b:15:30:29:b7:9c:3a:8f:4a:96:cd:68:13:
                    4c:99:18:7c:35:bf:af:4a:b4:a6:3f:d9:0c:8c:b3:
                    81:65:e8:db:77:e1:7a:c7:38:89:73:6f:aa:c8:da:
                    24:14:ab:20:04:22:5f:69:1a:ea:12:f7:22:a9:b3:
                    3c:46:63:d7:09:00:6a:58:54:df:c5:b4:6c:5b:ae:
                    4c:1b:f4:e9:d0:bb:19:26:d5:f3:b5:89:bd:fa:d0:
                    dd:0e:57:24:b3:9a:fd:85:d9:2a:e6:08:9a:9c:0d:
                    c5:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:D8:D5:D3:B2:90:99:B2:69:26:1E:E2:71:4D:A1:E9:54:8C:46:32
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/e913c7-8320-434c-a70f-f936783fabdb/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/e913c7-8320-434c-a70f-f936783fabdb/1/3djV07KQmbJpJh7icU2h6VSMRjI.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.104.233.0/24
                IPv6:
                  2a11:6640::/29

    Signature Algorithm: sha256WithRSAEncryption
         33:3d:b1:e7:ee:b3:38:b4:61:df:a0:1d:d2:fa:b2:b6:ec:6e:
         4c:e1:cc:d3:2b:52:a8:d5:bd:6e:4e:57:35:fe:a7:a3:90:54:
         a1:8f:11:c3:c4:61:f9:a0:ba:dc:5f:fd:3a:c1:95:78:42:ee:
         5f:19:2a:97:58:08:97:29:1b:1b:c2:2a:c9:b0:4e:a0:db:20:
         d0:91:f8:f2:c4:d4:c0:dd:28:59:89:f7:f3:5f:70:5e:89:c3:
         eb:7b:59:d3:4d:bd:79:d9:a8:fb:ec:fe:58:aa:94:be:e7:be:
         58:8a:f4:48:fe:6c:23:7a:93:46:24:da:73:ce:76:66:0c:cf:
         79:45:0e:44:25:50:87:d2:44:6b:3c:67:e6:17:7f:4c:a0:f1:
         d2:2a:56:aa:c4:1b:87:39:84:d8:67:4f:1a:c2:d5:64:45:ef:
         8a:5c:82:cf:ec:38:79:94:ce:0f:47:8a:00:d4:cb:b3:c4:08:
         aa:62:fc:61:c1:0d:83:78:91:e6:8b:75:40:e5:36:1c:9c:39:
         83:43:12:e2:2b:c1:fb:38:61:ba:c5:71:fd:02:25:ad:4f:8d:
         77:86:c1:86:d2:2a:2a:dd:c2:07:73:8b:fb:e5:c2:18:41:a8:
         83:a6:89:f5:d2:63:d4:0a:2b:0a:53:d2:7d:23:67:8b:7d:c3:
         89:57:f7:f0
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgISAYVu1AtoLY/PCpOgY3C+B8/vMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjMwMTAxMTkzNDI4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkZGQ4ZDVkM2IyOTA5OWIyNjkyNjFlZTI3MTRkYTFlOTU0OGM0NjMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn01VSVE53umvvay9V6RqFG3wNugk
VOqycCX6kyr/F7mWFN3CmbCAMWAbOI9hJeliRy4JWGcyVNcZFPFuyNrWHuwNlbjy
9auQDCW8klL1CgdgBtxJDNX7zEMqAmoCaGdmA8KrAhIE1mAAI9qgEvNQxhEywsnV
UWozE1P4/J2A21iJJcIbCIjGphd5x/A43GcJJ29AKcKzfzsVMCm3nDqPSpbNaBNM
mRh8Nb+vSrSmP9kMjLOBZejbd+F6xziJc2+qyNokFKsgBCJfaRrqEvciqbM8RmPX
CQBqWFTfxbRsW65MG/Tp0LsZJtXztYm9+tDdDlcks5r9hdkq5gianA3FcQIDAQAB
o4ICkzCCAo8wHQYDVR0OBBYEFN3Y1dOykJmyaSYe4nFNoelUjEYyMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzhlL2U5MTNj
Ny04MzIwLTQzNGMtYTcwZi1mOTM2NzgzZmFiZGIvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOGUvZTkxM2M3
LTgzMjAtNDM0Yy1hNzBmLWY5MzY3ODNmYWJkYi8xLzNkalYwN0tRbWJKcEpoN2lj
VTJoNlZTTVJqSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQAwmjpMA0EAgACMAcDBQMqEWZAMA0GCSqGSIb3
DQEBCwUAA4IBAQAzPbHn7rM4tGHfoB3S+rK27G5M4czTK1Ko1b1uTlc1/qejkFSh
jxHDxGH5oLrcX/06wZV4Qu5fGSqXWAiXKRsbwirJsE6g2yDQkfjyxNTA3ShZiffz
X3BeicPre1nTTb152aj77P5YqpS+575YivRI/mwjepNGJNpzznZmDM95RQ5EJVCH
0kRrPGfmF39MoPHSKlaqxBuHOYTYZ08awtVkRe+KXILP7Dh5lM4PR4oA1MuzxAiq
YvxhwQ2DeJHmi3VA5TYcnDmDQxLiK8H7OGG6xXH9AiWtT413hsGG0ioq3cIHc4v7
5cIYQaiDpon10mPUCisKU9J9I2eLfcOJV/fw
-----END CERTIFICATE-----
Generated at Tue Oct 17 11:57:40 2023 by rpki-client on console-ams.rpki-client.org