Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6gPRJPwh1yf_avYAdt2RIiFR9EU.cer
File:                     6gPRJPwh1yf_avYAdt2RIiFR9EU.cer (raw, json)
Hash identifier:          TybX6+1K46HPs5iYpgllfzwRmAoCjR0XUrR3QLuCFxw=
Subject key identifier:   EA:03:D1:24:FC:21:D7:27:FF:6A:F6:00:76:DD:91:22:21:51:F4:45
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856FAF9A1CD3A96DA12D926B6D900F1DF3
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/5b/6300f6-179d-4e0d-ba18-ab7ea3ac2454/1/6gPRJPwh1yf_avYAdt2RIiFR9EU.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/5b/6300f6-179d-4e0d-ba18-ab7ea3ac2454/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 23:34:17 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 194.26.25.0/24
                          IP: 194.26.27.0/24
                          IP: 194.26.29.0/24
                          IP: 194.26.69.0/24
                          IP: 2a0b:88c0::/29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:af:9a:1c:d3:a9:6d:a1:2d:92:6b:6d:90:0f:1d:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 23:34:17 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=ea03d124fc21d727ff6af60076dd91222151f445
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:2c:25:db:7f:dc:0b:a2:6b:22:ff:a5:6f:4a:
                    62:ed:0d:90:61:67:df:69:64:71:f8:19:90:34:5c:
                    49:1a:48:ea:2f:b1:af:53:fa:90:ee:32:d3:b0:82:
                    13:f2:42:d6:ca:3f:d1:e9:cb:9f:a1:8b:90:08:59:
                    33:91:65:fe:46:dc:35:7c:f9:8e:56:74:26:a5:d7:
                    83:a3:69:a9:cb:1b:d8:16:bc:5f:f4:f3:b5:eb:c1:
                    db:c7:8f:b0:11:b8:de:75:96:ec:6f:27:a7:89:df:
                    11:fc:11:76:15:50:9a:84:88:1b:b6:84:64:51:c4:
                    35:4e:bf:a0:bb:68:67:0c:2d:dd:23:0f:ec:7b:3a:
                    37:5c:df:ee:bb:39:57:98:99:e9:5a:7a:25:83:c0:
                    22:fb:cf:7b:49:cb:3e:4a:02:03:7b:d3:c4:84:16:
                    3e:da:67:39:4a:be:0e:cd:f7:37:28:70:90:b3:a6:
                    3c:0a:75:6a:0d:18:e0:f1:e8:8c:8b:67:3e:dc:d8:
                    f4:10:f1:0a:3d:2e:cd:63:17:85:d6:61:51:d2:bd:
                    e6:41:c5:91:b9:54:a0:0a:0a:2a:72:11:88:6c:c7:
                    9b:0b:8a:90:ca:81:e8:3e:7f:91:ee:40:0c:8c:fb:
                    8d:4f:e1:f2:9b:1b:07:24:f5:a6:63:f7:3c:9f:24:
                    ac:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:03:D1:24:FC:21:D7:27:FF:6A:F6:00:76:DD:91:22:21:51:F4:45
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/6300f6-179d-4e0d-ba18-ab7ea3ac2454/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/6300f6-179d-4e0d-ba18-ab7ea3ac2454/1/6gPRJPwh1yf_avYAdt2RIiFR9EU.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.26.25.0/24
                  194.26.27.0/24
                  194.26.29.0/24
                  194.26.69.0/24
                IPv6:
                  2a0b:88c0::/29

    Signature Algorithm: sha256WithRSAEncryption
         71:41:84:19:4e:ad:23:a2:00:b7:af:0e:83:07:b2:83:53:77:
         e1:81:22:76:a8:45:67:6c:1a:94:63:46:cd:74:12:95:21:71:
         91:e7:d5:33:18:ce:6a:11:e7:e2:4a:90:71:d9:92:e2:72:de:
         b3:11:f5:de:26:80:8f:2c:6d:42:4b:a7:38:81:6d:e7:28:4d:
         d0:b4:80:3b:6c:e1:07:38:1f:79:98:0d:c5:50:b8:34:db:ae:
         9a:e7:32:60:06:75:32:6f:a1:8c:35:63:98:6f:d6:d2:c5:de:
         51:ae:69:5d:c2:b5:e1:be:0f:c9:8a:67:07:2b:78:50:2d:32:
         c8:fe:53:8d:64:fe:58:ce:8b:a8:df:05:fc:6d:54:0c:74:c6:
         17:41:73:03:73:8f:0b:06:25:04:00:9a:9c:21:6f:82:28:c4:
         a1:e8:31:e5:a4:17:79:a3:a1:00:b4:1f:ff:3f:04:0b:9a:2c:
         f0:14:e7:e1:85:23:db:4f:57:7d:6e:38:24:3d:23:21:6e:aa:
         e1:85:8b:38:7e:ae:0c:b2:ab:7b:ab:3d:f9:d6:3d:bf:e2:10:
         23:39:24:a9:7d:cb:b5:bd:b0:b1:85:9f:18:78:52:d8:a6:c2:
         b5:2f:67:34:a1:1d:be:eb:a8:1f:66:ac:03:2a:77:df:2c:cb:
         e2:65:4f:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----