Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4LnGXclQU-Q34yyZrPO9xelcse4.cer
File:                     4LnGXclQU-Q34yyZrPO9xelcse4.cer (raw, json)
Hash identifier:          KDwxl1LU+vhdWFNC44yIse2JvGih5dGNB7bg1Q/KomM=
Subject key identifier:   E0:B9:C6:5D:C9:50:53:E4:37:E3:2C:99:AC:F3:BD:C5:E9:5C:B1:EE
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856B637A07453705ED1580A171B5E65438
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/71/d019bb-8768-4478-a39a-b94f7654a8c7/1/4LnGXclQU-Q34yyZrPO9xelcse4.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/71/d019bb-8768-4478-a39a-b94f7654a8c7/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 03:32:39 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    AS: 49931
                          IP: 109.164.0.0/17
                          IP: 185.131.60.0/22
                          IP: 2a03:3a00::/29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6b:63:7a:07:45:37:05:ed:15:80:a1:71:b5:e6:54:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 03:32:39 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=e0b9c65dc95053e437e32c99acf3bdc5e95cb1ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:74:04:3b:3b:e3:d3:4b:94:9f:f2:43:3a:91:
                    61:b0:5a:7a:48:1f:7d:7a:9f:be:ed:21:65:8c:6c:
                    60:94:38:f3:84:e6:44:7b:a4:d9:b8:0e:ec:8d:2c:
                    b2:c2:a5:81:f2:79:c8:23:d3:ce:84:fe:66:98:8b:
                    82:ce:68:90:5c:96:67:ff:b8:2a:59:79:22:d2:9c:
                    e8:c9:de:af:73:6a:50:3d:9b:c8:d0:d3:f8:bd:8c:
                    f8:cd:3f:2b:5f:a8:cb:7d:b9:78:69:01:a9:6f:e7:
                    f3:08:02:ff:46:11:a7:94:d0:13:f1:64:97:0f:a9:
                    cf:31:cd:75:86:e3:08:53:e3:c9:01:13:4f:37:e8:
                    b9:97:e7:b6:44:7f:19:65:1c:7f:50:40:31:e5:47:
                    13:e6:d4:36:3a:36:33:d3:ad:a5:2e:d9:19:cf:c6:
                    c9:6e:eb:20:b2:90:2c:ec:01:27:90:07:bf:7a:40:
                    89:ef:d8:02:a3:f0:30:30:c2:75:82:f1:39:dd:2c:
                    7e:7f:3c:f8:5b:ea:66:99:00:a3:91:a8:31:8b:88:
                    35:0f:fa:ba:94:58:57:3b:3a:38:cc:ca:26:17:da:
                    a2:35:44:68:d7:8d:45:9b:c5:c3:6a:3c:0b:2f:9f:
                    87:ed:fe:5e:c5:e7:e4:bc:c3:b1:09:e7:1a:90:8b:
                    2f:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:B9:C6:5D:C9:50:53:E4:37:E3:2C:99:AC:F3:BD:C5:E9:5C:B1:EE
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/d019bb-8768-4478-a39a-b94f7654a8c7/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/d019bb-8768-4478-a39a-b94f7654a8c7/1/4LnGXclQU-Q34yyZrPO9xelcse4.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  109.164.0.0/17
                  185.131.60.0/22
                IPv6:
                  2a03:3a00::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  49931

    Signature Algorithm: sha256WithRSAEncryption
         29:8c:75:85:6d:8e:80:c6:b9:dd:f9:0b:c9:0e:8d:77:e1:a4:
         c7:9c:d6:5b:90:24:72:9d:f2:a2:d2:e0:a4:38:17:f1:f3:64:
         dd:86:63:d2:25:e1:c7:77:9c:0b:52:8b:a1:9f:97:04:bd:33:
         95:33:74:26:4c:80:7e:e9:64:44:66:6d:c4:2a:83:f2:2c:d2:
         94:16:e2:b1:2e:3b:75:80:b5:06:8e:4c:9c:3d:f3:27:08:d5:
         e3:28:b9:6a:02:8a:5b:ec:0d:41:4c:1a:e1:d8:90:08:02:47:
         1d:7f:26:25:64:8a:69:26:cc:69:26:25:ab:fc:72:b2:4a:8a:
         08:17:76:dc:25:c6:84:c8:76:0b:2a:72:28:25:47:6c:ac:ad:
         17:c6:11:32:5a:b9:08:03:39:5c:c3:45:fc:d3:d3:f9:28:a2:
         de:1d:1d:ba:21:cc:ad:3f:6c:f1:bb:d6:82:9a:9c:6f:9a:1e:
         5e:1c:12:4c:6e:91:97:62:e4:6c:e1:2e:b3:7b:2e:4e:91:99:
         66:dc:45:fe:f5:10:dc:b7:41:52:1d:58:02:61:73:0b:6b:87:
         57:1e:de:77:43:04:86:ce:dc:78:17:68:99:cd:3e:03:72:c6:
         dd:9e:77:60:77:aa:1d:72:73:e2:57:08:37:61:c1:87:ec:56:
         95:ad:09:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----