Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6KkFsKTxujc9nniS0kVbxeqLv4k.cer
File:                     6KkFsKTxujc9nniS0kVbxeqLv4k.cer (raw, json)
Hash identifier:          GdV3EViofbmAuHc7uzwnVwjopZXg+HAEAzkjuUA4Vh8=
Subject key identifier:   E8:A9:05:B0:A4:F1:BA:37:3D:9E:78:92:D2:45:5B:C5:EA:8B:BF:89
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01857088FCB339BE480EF8060385063DC5F8
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/bd/bfb168-1b3d-48ae-9800-1744e7259b17/1/6KkFsKTxujc9nniS0kVbxeqLv4k.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/bd/bfb168-1b3d-48ae-9800-1744e7259b17/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 02 Jan 2023 03:31:43 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 185.235.227.0/24
                          IP: 2a09:8140::/29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:88:fc:b3:39:be:48:0e:f8:06:03:85:06:3d:c5:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 03:31:43 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=e8a905b0a4f1ba373d9e7892d2455bc5ea8bbf89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:cb:e9:37:77:d1:de:37:b8:be:f6:bc:85:24:
                    0b:59:97:35:23:63:3e:18:e6:2d:82:2d:22:f6:65:
                    7b:7f:1a:d4:d0:da:b2:f7:ab:54:ab:08:63:62:88:
                    18:7f:d7:48:60:67:37:d9:fa:9d:94:02:65:22:3a:
                    c2:f4:a8:f5:77:b1:79:e4:8d:16:3f:2d:f6:29:79:
                    d2:89:2a:f5:7b:05:88:9d:af:f3:87:18:e3:20:08:
                    51:ec:77:c0:2d:f5:e4:ca:7c:b5:eb:9c:2d:31:4e:
                    0b:4d:25:98:43:4f:66:35:eb:13:64:60:ce:01:b6:
                    da:95:dc:32:a4:33:54:89:3f:6e:a5:a9:c4:34:8d:
                    77:48:3e:03:a3:41:96:78:fa:9e:e8:bf:e1:31:09:
                    ed:53:10:07:29:cc:50:13:ee:fe:ac:9c:3a:8d:b7:
                    cc:27:4e:7f:11:7f:0c:21:52:09:20:72:c6:07:de:
                    46:d7:d6:b4:af:ac:52:6c:d5:79:ea:6a:8b:91:4f:
                    99:07:a8:74:54:d8:31:1f:5d:9c:1e:0c:26:71:8c:
                    d4:bd:67:44:4c:b2:c1:94:5c:b0:51:86:a9:b9:e0:
                    b9:7f:28:6c:e9:fc:34:dd:cb:3d:1e:f3:95:c9:69:
                    a4:8f:c3:9b:af:b2:e2:80:03:ba:1e:da:54:53:ae:
                    59:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:A9:05:B0:A4:F1:BA:37:3D:9E:78:92:D2:45:5B:C5:EA:8B:BF:89
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/bfb168-1b3d-48ae-9800-1744e7259b17/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/bfb168-1b3d-48ae-9800-1744e7259b17/1/6KkFsKTxujc9nniS0kVbxeqLv4k.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.235.227.0/24
                IPv6:
                  2a09:8140::/29

    Signature Algorithm: sha256WithRSAEncryption
         85:cc:7b:c5:3a:32:25:08:37:b0:68:71:69:a4:b1:18:1e:ad:
         b4:01:69:aa:1e:25:f3:ab:99:73:0b:23:da:40:23:2d:99:f8:
         18:58:c3:61:21:cd:30:40:33:55:f5:f6:1b:5d:67:2f:51:8c:
         4f:61:42:ed:b3:0f:38:ea:43:85:bb:a9:97:f9:bb:aa:83:af:
         51:3b:55:35:e5:69:5b:3b:db:c4:ad:8d:b1:b4:1b:ac:8a:bf:
         1d:6e:c7:78:a3:7e:3c:ab:6f:74:24:2c:58:a9:b6:9c:f1:6e:
         1b:0b:ea:e1:4e:59:dd:39:f1:de:85:66:a4:6f:e4:9e:95:1a:
         fe:17:ec:4b:92:92:e5:6d:ff:de:6c:14:f8:bc:2f:0d:fb:e7:
         f8:33:4d:98:19:e0:9a:85:39:1a:4e:42:cd:71:4f:98:7a:ae:
         88:49:e2:fc:0c:cd:a2:63:bd:55:69:2a:0a:0b:fc:ae:34:ba:
         3a:81:89:e1:ab:ff:6c:04:f8:4f:49:b5:4c:3d:b9:b7:18:25:
         27:89:de:5b:e5:a0:1a:cd:48:c7:1b:ac:6a:ba:32:be:96:70:
         03:96:18:bd:23:ce:09:5a:2f:c3:d2:0b:32:02:9a:dd:50:d6:
         1c:96:2d:d0:49:eb:28:4b:62:2f:a0:89:d8:be:0e:01:85:74:
         89:28:da:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 2 06:55:05 2023 by rpki-client on console-ams.rpki-client.org