Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42gRbGhJIoIQkFEiAW1yIJEZe-U.cer
File:                     42gRbGhJIoIQkFEiAW1yIJEZe-U.cer (raw, json)
Hash identifier:          k+EmwHOa21+zK7wGPWOKdXppNqVIW8D5dOY3Rob69W4=
Subject key identifier:   E3:68:11:6C:68:49:22:82:10:90:51:22:01:6D:72:20:91:19:7B:E5
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856BD1346CB8A99C97BFFCE7A5DF8E6BF3
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/a9/87f152-5f33-45c9-8511-fefcb4f3b4b4/1/42gRbGhJIoIQkFEiAW1yIJEZe-U.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/a9/87f152-5f33-45c9-8511-fefcb4f3b4b4/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 05:32:30 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 193.201.13.0/24
                          IP: 2a11:22c0::/29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6b:d1:34:6c:b8:a9:9c:97:bf:fc:e7:a5:df:8e:6b:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 05:32:30 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=e368116c6849228210905122016d722091197be5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:ea:e2:db:b9:45:18:fc:f3:13:55:af:a2:08:
                    34:f2:84:08:55:51:c8:8c:37:d2:19:b0:67:a2:ff:
                    e6:d7:6b:d0:af:e4:be:b6:8e:07:8e:27:86:8a:b4:
                    b0:1f:16:7b:7a:11:ce:f9:52:0b:a3:24:05:fb:19:
                    0d:ae:6d:83:bb:eb:d9:bb:27:60:1c:7a:1e:eb:41:
                    1a:9f:17:71:9a:39:70:30:75:04:ae:38:a1:17:80:
                    8b:8d:2a:b7:c3:28:0c:2c:78:2a:11:5c:5d:ce:1d:
                    ab:2b:04:6e:7b:45:4c:b3:42:2a:34:b5:38:88:a9:
                    5b:ab:6b:1c:70:a3:40:da:45:54:94:08:28:22:39:
                    4c:68:c0:9d:7a:21:71:93:a3:97:1b:95:a8:17:c9:
                    13:f0:fd:cf:f0:81:fc:38:2c:11:5a:2a:d4:56:3d:
                    6f:e1:ae:39:46:4b:4a:86:f0:0c:9e:1b:40:c0:b0:
                    7e:e8:ea:82:d6:a9:60:ef:f0:0b:aa:22:85:23:ad:
                    ec:d4:53:79:a3:46:ae:90:0d:20:0b:d1:43:55:cb:
                    b5:1b:c0:77:ee:be:cc:f3:7a:f4:c5:52:8a:39:f1:
                    82:9c:48:99:7a:e1:bb:aa:9e:e6:90:7a:28:5c:0f:
                    21:12:45:1a:c4:1d:7e:e2:e5:a2:de:30:61:06:77:
                    51:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:68:11:6C:68:49:22:82:10:90:51:22:01:6D:72:20:91:19:7B:E5
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/87f152-5f33-45c9-8511-fefcb4f3b4b4/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/87f152-5f33-45c9-8511-fefcb4f3b4b4/1/42gRbGhJIoIQkFEiAW1yIJEZe-U.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.201.13.0/24
                IPv6:
                  2a11:22c0::/29

    Signature Algorithm: sha256WithRSAEncryption
         59:02:8c:74:40:dd:e5:53:ee:89:3e:fe:fa:37:42:15:5e:a9:
         06:d4:2c:a7:6c:73:7b:a7:cb:5f:19:10:d8:fe:08:72:79:6e:
         2a:85:a9:ee:b9:8b:2c:b7:1e:2d:c6:1e:d3:20:3c:84:cb:1a:
         88:17:dc:bd:e3:77:48:6b:4f:2b:b0:d4:21:0f:5a:2e:4d:4f:
         42:d0:73:27:90:53:31:3f:2f:de:78:8a:23:50:84:4b:71:60:
         e2:ef:6d:19:55:1c:8d:3f:50:b8:53:46:0f:17:ab:3d:1d:31:
         c6:c4:74:cd:da:60:9c:1e:65:29:86:9b:16:85:02:d5:ce:06:
         97:90:40:96:e1:4d:1c:9c:73:85:f7:0e:65:14:4a:53:39:e4:
         12:c5:c6:39:80:2c:c2:26:87:ff:36:b4:72:2f:d2:4e:60:a7:
         4d:61:95:df:89:56:7b:5a:3d:ae:21:e0:d6:b6:ac:25:ac:e1:
         9c:02:4e:03:32:48:14:6e:25:36:34:91:7d:66:66:fb:73:98:
         db:96:51:bf:5c:7d:ba:de:31:80:c8:1a:6a:24:bf:50:a9:92:
         9c:ea:10:11:2b:35:b5:4c:9b:5b:a7:9e:c5:64:14:77:30:09:
         d4:10:f2:19:5e:e1:6a:87:2d:d3:78:6f:ce:20:46:21:13:ea:
         46:bc:e6:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----