Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6HAk2c9qiYtLqbKaRhEK_0GX2RM.cer
File:                     6HAk2c9qiYtLqbKaRhEK_0GX2RM.cer (raw, json)
Hash identifier:          3IxKJ6WHKfPP77I4W7ZZJxpZJ5e8pEUUedwrtzOKZDw=
Subject key identifier:   E8:70:24:D9:CF:6A:89:8B:4B:A9:B2:9A:46:11:0A:FF:41:97:D9:13
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856D89A815545DBBB829FC624B10E1407F
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/cc/9afc88-70ef-4a44-a760-1c2885e73ece/1/6HAk2c9qiYtLqbKaRhEK_0GX2RM.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/cc/9afc88-70ef-4a44-a760-1c2885e73ece/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 13:33:36 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 92.118.192.0/22
                          IP: 2a09:b040::/29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6d:89:a8:15:54:5d:bb:b8:29:fc:62:4b:10:e1:40:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 13:33:36 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=e87024d9cf6a898b4ba9b29a46110aff4197d913
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:ac:e4:b7:c0:7f:c3:93:95:44:02:03:9c:15:
                    29:81:f4:a7:88:e9:cc:4d:e5:8d:75:da:d0:4a:84:
                    73:ce:37:69:d3:05:ca:d1:fa:74:0e:2c:2d:c5:c8:
                    50:a4:d4:6c:61:19:31:02:d6:68:d1:4b:a9:80:e6:
                    1b:54:c5:b9:74:6d:6c:34:00:3f:87:61:5b:53:9e:
                    dc:d6:ec:2c:ce:0f:59:9c:20:0f:54:a5:13:f0:1b:
                    3d:12:1b:3f:ca:d1:2f:56:d7:b9:37:6a:1d:03:80:
                    eb:20:fb:a9:2d:af:93:04:c0:95:96:a8:7f:3b:af:
                    cc:40:fc:94:97:24:9d:54:a9:4d:63:33:04:95:4e:
                    1b:dd:6b:e7:53:cc:6c:33:0e:40:bc:0f:e9:e0:ac:
                    59:47:65:96:88:91:45:15:6c:c5:a1:06:ed:72:90:
                    d0:18:2c:a3:6b:e0:5e:c5:b3:06:89:b0:b8:dd:42:
                    7f:82:71:d9:77:11:e9:09:6a:b0:4b:f3:59:12:94:
                    7a:bc:4a:fa:30:8e:ec:bf:96:03:1a:01:c3:58:e1:
                    b3:f4:71:8a:00:8f:06:de:e1:1d:84:78:6b:8c:48:
                    7a:c5:00:2f:90:e3:38:c6:41:60:33:31:4a:d4:a6:
                    cf:97:d3:31:81:fb:25:72:ef:51:aa:e5:ed:1e:96:
                    a2:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:70:24:D9:CF:6A:89:8B:4B:A9:B2:9A:46:11:0A:FF:41:97:D9:13
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/9afc88-70ef-4a44-a760-1c2885e73ece/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/9afc88-70ef-4a44-a760-1c2885e73ece/1/6HAk2c9qiYtLqbKaRhEK_0GX2RM.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  92.118.192.0/22
                IPv6:
                  2a09:b040::/29

    Signature Algorithm: sha256WithRSAEncryption
         06:af:2e:24:89:cf:af:7d:09:1f:38:45:57:d1:0a:f2:36:a6:
         4c:be:de:40:61:e3:ae:1a:98:a2:e3:4c:2b:29:8e:d8:52:80:
         7f:e0:d3:e9:d9:fe:dd:fd:23:a6:42:a2:a3:29:ea:85:b7:b6:
         e3:6b:4d:4d:e2:83:a7:f8:a0:73:9c:0e:4a:74:22:b2:73:15:
         da:57:cd:28:ab:3c:20:75:ab:e3:a3:28:e8:96:63:e5:01:fd:
         d5:3b:54:5e:24:36:e0:97:8e:df:5d:56:57:33:38:a7:eb:24:
         a9:55:ae:df:ba:74:10:84:86:6d:89:19:fd:e5:cd:1e:8b:a8:
         3e:43:14:24:60:e9:bd:c2:a7:4a:d1:8f:a8:e1:da:dd:c3:10:
         d6:9e:5c:6c:c6:fd:e6:dc:61:19:d3:85:7a:81:4e:18:72:3a:
         5e:89:3f:15:12:0c:0d:67:c1:a9:5b:f2:7f:99:c0:d1:61:bd:
         5e:33:9d:ef:18:f2:8d:cb:78:88:4b:98:21:c8:bb:b0:61:58:
         6e:41:5b:5f:5c:77:a9:90:84:30:ab:e5:ce:10:31:2e:96:fc:
         0a:d8:cb:28:e4:9d:87:c4:c9:14:a0:4d:9f:cc:dd:ba:0c:36:
         7b:e1:ab:f0:1e:6a:1e:70:d0:47:4f:4a:fe:41:68:52:71:b4:
         d9:40:8a:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 28 07:15:25 2023 by rpki-client on console-fra.rpki-client.org