Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3uTmsY9CBaGhVHDfIUioHGNWY2M.cer
File:                     3uTmsY9CBaGhVHDfIUioHGNWY2M.cer (raw, json)
Hash identifier:          aX1Wxe71b+ulC1jesDCK9btYhU8YN3EH07+QQE8HUlE=
Subject key identifier:   DE:E4:E6:B1:8F:42:05:A1:A1:54:70:DF:21:48:A8:1C:63:56:63:63
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856ED3D26BE13185484CE9B58310A11892
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/cc/814a4a-bc5e-4ebf-abb8-2f491c664109/1/3uTmsY9CBaGhVHDfIUioHGNWY2M.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/cc/814a4a-bc5e-4ebf-abb8-2f491c664109/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 19:34:13 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 45.9.56.0/22
                          IP: 2a13:1680::/29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6e:d3:d2:6b:e1:31:85:48:4c:e9:b5:83:10:a1:18:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 19:34:13 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=dee4e6b18f4205a1a15470df2148a81c63566363
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:5d:7e:53:5b:64:56:d0:3f:5b:51:09:b1:9c:
                    97:86:e4:27:2f:01:c7:38:c8:e1:a6:31:4a:46:e4:
                    91:6e:51:de:4c:a4:9b:f1:8b:10:a2:b0:5d:be:55:
                    18:f7:65:34:0d:37:70:35:b3:e2:b7:80:e7:c8:e3:
                    ba:c7:76:41:08:e5:c8:c1:8f:0d:97:c7:20:30:6a:
                    5f:44:e0:41:ae:aa:0b:1a:57:3d:86:0f:d1:13:0d:
                    2a:c7:2d:d6:65:86:c0:95:ee:bf:1b:a7:ae:3a:b9:
                    e8:81:a6:fa:ef:4b:97:6b:26:7d:8e:44:84:27:7b:
                    59:8e:80:10:05:31:3d:fa:27:17:67:d6:69:d3:b1:
                    80:c3:0c:41:35:3e:e7:ef:2e:f8:82:9d:ec:43:2c:
                    6e:c7:75:ba:e1:31:0c:ce:ec:a9:83:46:1a:75:87:
                    52:da:7e:32:ba:d3:4d:fe:93:61:f6:33:1a:3e:c3:
                    00:61:0e:40:49:65:2e:df:e2:a0:11:05:09:17:5f:
                    02:f9:09:58:43:a2:87:49:04:47:a4:14:39:12:39:
                    67:57:a7:95:f7:c8:45:5b:61:2e:a8:09:ed:59:ef:
                    9c:62:d7:03:4c:36:59:53:60:ef:73:da:1f:0a:d5:
                    64:b9:97:95:63:b0:58:83:db:b3:0d:42:5a:db:62:
                    49:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:E4:E6:B1:8F:42:05:A1:A1:54:70:DF:21:48:A8:1C:63:56:63:63
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/814a4a-bc5e-4ebf-abb8-2f491c664109/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/814a4a-bc5e-4ebf-abb8-2f491c664109/1/3uTmsY9CBaGhVHDfIUioHGNWY2M.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.9.56.0/22
                IPv6:
                  2a13:1680::/29

    Signature Algorithm: sha256WithRSAEncryption
         7a:96:da:7d:48:e0:0c:9c:ad:3c:d3:78:9e:2e:5c:5e:10:81:
         fb:76:0f:c5:3d:8a:0a:5e:92:f5:4c:be:01:56:51:68:73:34:
         86:45:90:e9:5e:d8:f2:70:04:19:dd:da:84:e4:53:b6:38:2d:
         ab:38:6e:9e:41:86:d4:01:e6:17:f1:f2:6f:8c:0b:a7:a2:6a:
         70:54:3c:0b:de:12:c1:4f:5e:8e:d1:cb:14:07:e4:30:76:ca:
         d1:ca:36:c7:75:7b:58:9d:47:e9:e3:79:83:f6:fe:19:b4:6c:
         17:84:3b:7b:c6:8d:13:2a:49:6e:3b:32:51:38:55:a4:07:27:
         c0:fc:23:e0:01:8b:dc:da:f3:db:0e:d7:3e:94:93:18:4b:39:
         43:88:4e:38:0c:ed:77:a2:77:a2:e0:d1:24:4c:af:b2:ef:d6:
         1b:03:fb:7e:a9:5d:4c:a7:34:53:15:31:ed:1b:0d:95:bb:2e:
         50:1d:ba:77:18:f5:2f:bb:17:c1:c2:39:8e:3e:7c:ae:a6:37:
         64:fb:f8:07:15:0c:89:71:4e:1c:c5:71:96:6b:9c:e7:73:85:
         cb:12:90:1a:a0:29:86:1a:e7:d0:aa:fd:44:de:9f:3b:40:a2:
         fb:51:53:7e:d7:fb:c4:1d:40:0d:43:a1:64:9f:b1:af:e8:1b:
         30:9e:04:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----