Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53FLYM7VkMoA1SPEHT_nieRpXlE.cer
File:                     53FLYM7VkMoA1SPEHT_nieRpXlE.cer (raw, json)
Hash identifier:          WwI1AVDtCNUz4KUkAGEfgHKodtVuMq4GoPikP5M8R7s=
Subject key identifier:   E7:71:4B:60:CE:D5:90:CA:00:D5:23:C4:1D:3F:E7:89:E4:69:5E:51
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0185708A6EF94C6027D183673E87B1764D75
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/0d/7b7472-b6fe-41fe-8c4a-bbad4c4f44e7/1/53FLYM7VkMoA1SPEHT_nieRpXlE.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/0d/7b7472-b6fe-41fe-8c4a-bbad4c4f44e7/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 02 Jan 2023 03:33:18 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 62.3.1.0/24
                          IP: 2a12:aa00::/29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:8a:6e:f9:4c:60:27:d1:83:67:3e:87:b1:76:4d:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 03:33:18 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=e7714b60ced590ca00d523c41d3fe789e4695e51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:57:f7:f1:df:05:96:7f:19:b8:1f:9d:4f:0f:
                    10:a8:bd:b0:9e:ed:13:f3:96:67:e8:df:6b:2b:b5:
                    30:38:57:5c:27:d8:23:c4:c1:1f:4b:ea:42:b1:07:
                    db:8b:f5:8a:2d:d7:ca:e0:82:02:ac:68:ee:f4:79:
                    b6:b5:64:ec:99:a1:72:37:fc:7c:d1:74:af:b7:16:
                    f3:52:88:b3:b5:e5:cf:f7:6a:c3:36:38:ff:b0:ce:
                    29:5b:5d:a7:f9:0b:7a:b4:0c:88:3c:44:57:4c:b1:
                    0d:84:d1:1c:be:a1:2f:42:4c:21:92:ef:42:c2:34:
                    eb:d6:af:af:52:02:ab:14:af:30:a3:74:45:37:2d:
                    b4:db:44:8f:59:3d:e7:6d:c5:7d:25:0a:97:9d:8e:
                    74:00:0b:33:95:15:76:9b:ee:44:48:72:d4:37:df:
                    2d:6c:c5:f4:e5:da:07:12:38:24:1a:f9:b1:1c:a8:
                    c7:5b:dd:f2:98:cd:e3:53:f7:5c:4a:93:21:a8:c5:
                    30:21:fe:d8:5d:67:18:d1:d2:4e:62:2d:cd:79:a1:
                    33:a8:4a:30:61:05:c7:a7:fb:02:5f:eb:41:f7:7b:
                    a0:d1:0d:b8:97:05:89:1a:83:68:1e:9f:6f:82:bd:
                    a6:a1:27:b8:a4:84:46:d8:92:6d:ba:ea:37:f1:3d:
                    cf:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:71:4B:60:CE:D5:90:CA:00:D5:23:C4:1D:3F:E7:89:E4:69:5E:51
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/7b7472-b6fe-41fe-8c4a-bbad4c4f44e7/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/7b7472-b6fe-41fe-8c4a-bbad4c4f44e7/1/53FLYM7VkMoA1SPEHT_nieRpXlE.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.3.1.0/24
                IPv6:
                  2a12:aa00::/29

    Signature Algorithm: sha256WithRSAEncryption
         5c:7c:07:f1:dd:30:2f:44:1e:13:44:d4:52:0e:07:71:7b:61:
         51:56:5e:36:c9:17:09:48:2c:1d:bc:9d:e5:4c:39:5c:bf:81:
         d8:d8:96:2d:92:c3:af:93:33:c4:61:71:00:69:fb:36:a9:5e:
         cf:59:92:8f:09:1d:02:ae:e2:bc:66:35:79:e7:d4:7e:66:94:
         ef:9a:9e:fd:68:e0:b9:bf:bc:f5:dc:b1:50:63:86:4e:d4:48:
         09:f0:bf:e2:92:1a:42:01:f8:0a:0c:9e:0d:5c:d2:02:70:94:
         92:3d:78:af:f1:59:42:35:38:22:94:3a:ed:1d:9c:21:b3:af:
         ae:05:20:89:12:e0:f9:7a:54:53:19:41:10:2e:7d:91:fc:41:
         d6:70:20:e3:5d:c1:64:7f:47:f2:4f:48:9a:56:8b:8f:15:db:
         02:67:1c:61:7e:e8:1a:c3:a6:e4:f0:dc:d0:8c:5e:e2:5b:c8:
         f6:f0:45:2e:57:e8:be:f8:68:37:33:07:92:72:e5:15:54:50:
         22:1c:40:77:56:97:9f:3d:38:29:f9:60:81:bc:7b:16:95:ca:
         f1:e5:0c:67:36:7a:e2:0c:5b:8d:6e:e7:0c:fd:10:95:c0:db:
         8b:6e:25:1c:34:5e:0f:45:49:fc:bd:0d:1a:71:a6:c8:c6:f9:
         09:e3:df:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----