Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/414gTMaBx1G3Fd0jYoxhXxz_7Yk.cer
File:                     414gTMaBx1G3Fd0jYoxhXxz_7Yk.cer (raw, json)
Hash identifier:          FsR66VtJ0XPBfK7C83MxX6OwSzDJKrUFCHMO2ueF3R8=
Subject key identifier:   E3:5E:20:4C:C6:81:C7:51:B7:15:DD:23:62:8C:61:5F:1C:FF:ED:89
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01857245F06F41AAD109392D746DE9088084
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/99/3318a9-0848-45ed-9154-9cebf9a56ccc/1/414gTMaBx1G3Fd0jYoxhXxz_7Yk.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/99/3318a9-0848-45ed-9154-9cebf9a56ccc/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 02 Jan 2023 11:37:44 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    AS: 57015
                          IP: 45.145.36.0/22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:72:45:f0:6f:41:aa:d1:09:39:2d:74:6d:e9:08:80:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 11:37:44 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=e35e204cc681c751b715dd23628c615f1cffed89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:93:51:06:89:65:27:79:ba:ed:76:9a:5f:db:
                    80:ef:09:90:e7:ee:f2:e6:3a:a8:c0:6e:9f:e9:60:
                    41:22:af:a7:2f:7a:4d:05:98:3c:9c:77:ac:67:68:
                    c2:20:e1:4e:28:25:f9:c2:5a:6a:2d:4f:ee:24:cf:
                    a7:38:1b:45:24:7e:82:6c:45:41:b5:81:8a:51:78:
                    15:f5:57:4f:f8:c6:91:82:29:3b:4e:ef:74:2b:d4:
                    45:25:4e:46:56:a7:74:bb:d4:81:57:a0:24:3c:62:
                    da:12:dc:2b:43:87:ba:84:29:7d:81:38:4e:8c:2e:
                    c7:7d:95:9d:54:31:aa:5d:5d:e5:8f:12:8b:cb:46:
                    1f:aa:80:e7:87:c8:94:aa:e7:e1:a3:53:29:d2:2a:
                    ba:82:d8:12:54:f7:89:84:cd:15:9a:07:ff:c7:5d:
                    7a:d5:b4:3f:7b:e2:d9:22:5e:66:c8:d3:75:58:60:
                    fa:e5:e6:14:5f:3b:cf:8b:6a:ca:26:11:1e:19:0e:
                    2f:87:8b:db:2d:21:e6:50:c1:ee:0c:4c:07:51:d7:
                    e7:5a:79:27:66:e6:b4:8a:83:e8:c2:85:1c:d6:b6:
                    d3:ba:3f:01:3a:38:79:0d:f3:92:df:80:4b:40:f5:
                    76:64:63:8e:82:33:94:f9:82:1f:fb:85:ff:9c:b0:
                    24:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:5E:20:4C:C6:81:C7:51:B7:15:DD:23:62:8C:61:5F:1C:FF:ED:89
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/3318a9-0848-45ed-9154-9cebf9a56ccc/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/3318a9-0848-45ed-9154-9cebf9a56ccc/1/414gTMaBx1G3Fd0jYoxhXxz_7Yk.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.145.36.0/22

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  57015

    Signature Algorithm: sha256WithRSAEncryption
         77:7c:cb:0b:42:f3:b4:41:09:a2:b6:63:fc:c1:1c:94:02:4d:
         f8:e4:68:46:f5:dd:1c:02:2a:dd:24:1a:ac:73:50:c7:50:5a:
         ee:30:6d:82:a9:8f:8d:42:98:87:84:b3:87:b5:4d:b8:9e:d7:
         44:31:e6:54:5b:40:95:e0:46:e7:96:03:b5:cd:52:cc:90:d8:
         f5:1e:4c:ae:50:28:5a:66:88:90:7b:d5:80:27:9c:09:c1:3d:
         ad:aa:56:2a:09:69:2d:81:7b:21:d1:4d:cc:18:48:b5:d1:bc:
         d3:c8:99:4c:00:35:43:2e:b4:a6:47:66:c5:e5:4e:b2:d0:af:
         00:6e:51:59:67:a8:fe:c1:35:ab:e8:e1:8e:e4:64:4e:6b:a3:
         7e:92:74:ec:b3:ff:4f:10:05:42:9c:db:0b:0e:ca:43:0c:1f:
         46:39:ec:97:69:e3:e4:62:e2:e2:67:3f:fd:d6:2c:38:71:59:
         7a:c3:2f:43:73:cb:53:35:2c:81:b1:06:bf:e4:17:45:8b:b2:
         aa:65:4e:ae:c3:ff:ae:ef:b9:71:54:00:9d:ff:26:2e:5a:68:
         d9:d6:63:f9:2a:ad:67:fb:66:da:be:35:b5:1b:83:98:19:d6:
         44:5a:b4:d2:6c:3a:b1:c4:d6:3a:21:f7:4b:22:e1:0e:78:ce:
         63:91:a6:48
-----BEGIN CERTIFICATE-----
MIIFlDCCBHygAwIBAgISAYVyRfBvQarRCTktdG3pCICEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjMwMTAyMTEzNzQ0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMzVlMjA0Y2M2ODFjNzUxYjcxNWRkMjM2MjhjNjE1ZjFjZmZlZDg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAopNRBollJ3m67XaaX9uA7wmQ5+7y
5jqowG6f6WBBIq+nL3pNBZg8nHesZ2jCIOFOKCX5wlpqLU/uJM+nOBtFJH6CbEVB
tYGKUXgV9VdP+MaRgik7Tu90K9RFJU5GVqd0u9SBV6AkPGLaEtwrQ4e6hCl9gThO
jC7HfZWdVDGqXV3ljxKLy0YfqoDnh8iUqufho1Mp0iq6gtgSVPeJhM0Vmgf/x116
1bQ/e+LZIl5myNN1WGD65eYUXzvPi2rKJhEeGQ4vh4vbLSHmUMHuDEwHUdfnWnkn
Zua0ioPowoUc1rbTuj8BOjh5DfOS34BLQPV2ZGOOgjOU+YIf+4X/nLAkhQIDAQAB
o4ICoDCCApwwHQYDVR0OBBYEFONeIEzGgcdRtxXdI2KMYV8c/+2JMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzk5LzMzMThh
OS0wODQ4LTQ1ZWQtOTE1NC05Y2ViZjlhNTZjY2MvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTkvMzMxOGE5
LTA4NDgtNDVlZC05MTU0LTljZWJmOWE1NmNjYy8xLzQxNGdUTWFCeDFHM0ZkMGpZ
b3hoWHh6XzdZay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQCLZEkMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC
AwDetzANBgkqhkiG9w0BAQsFAAOCAQEAd3zLC0LztEEJorZj/MEclAJN+ORoRvXd
HAIq3SQarHNQx1Ba7jBtgqmPjUKYh4Szh7VNuJ7XRDHmVFtAleBG55YDtc1SzJDY
9R5MrlAoWmaIkHvVgCecCcE9rapWKglpLYF7IdFNzBhItdG808iZTAA1Qy60pkdm
xeVOstCvAG5RWWeo/sE1q+jhjuRkTmujfpJ07LP/TxAFQpzbCw7KQwwfRjnsl2nj
5GLi4mc//dYsOHFZesMvQ3PLUzUsgbEGv+QXRYuyqmVOrsP/ru+5cVQAnf8mLlpo
2dZj+SqtZ/tm2r41tRuDmBnWRFq00mw6scTWOiH3SyLhDnjOY5GmSA==
-----END CERTIFICATE-----
Generated at Mon Jul 31 10:03:27 2023 by rpki-client on console-ams.rpki-client.org