Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6wa2BDHWwnqB2IudCDBMupyIFDM.cer
File:                     6wa2BDHWwnqB2IudCDBMupyIFDM.cer (raw, json)
Hash identifier:          zxzNg8/K/AV7pek68PPpzZ0Ad/14t+4l13J/hxDOTV8=
Subject key identifier:   EB:06:B6:04:31:D6:C2:7A:81:D8:8B:9D:08:30:4C:BA:9C:88:14:33
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856CAC3936BB6DA89D86E2B29D31252A47
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/40/6d64a3-c0ba-46b3-af52-cc66fb8392c4/1/6wa2BDHWwnqB2IudCDBMupyIFDM.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/40/6d64a3-c0ba-46b3-af52-cc66fb8392c4/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 09:31:44 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 91.242.227.0/24
                          IP: 2a11:aac0::/29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6c:ac:39:36:bb:6d:a8:9d:86:e2:b2:9d:31:25:2a:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 09:31:44 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=eb06b60431d6c27a81d88b9d08304cba9c881433
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:3a:ff:a7:55:76:ad:c9:ad:2f:08:d2:72:9c:
                    57:66:20:82:89:80:66:86:09:8e:2e:91:68:a9:0f:
                    03:cb:09:7f:ce:1b:0a:23:dc:2c:d1:0e:32:6b:53:
                    76:10:69:f0:98:52:19:8b:fe:78:7c:16:27:51:2d:
                    af:93:90:20:2e:ea:40:a3:b2:84:03:86:b7:43:7f:
                    f8:a7:09:6c:53:1d:01:f9:65:6a:99:43:3d:bb:04:
                    e7:07:01:09:99:35:b6:62:a0:7c:c2:21:3d:e9:2e:
                    46:8f:cd:7e:df:b4:8e:bc:c9:74:6a:6b:0f:05:66:
                    c4:c0:c8:9c:64:a6:fa:7a:01:11:46:52:2f:53:25:
                    03:24:38:f9:c9:65:23:96:66:27:30:a1:c9:d3:92:
                    06:3d:1a:f8:05:f4:f0:e5:4d:c5:55:3d:38:60:b9:
                    42:00:4a:d1:52:8a:3e:0c:b0:56:50:67:b3:bf:07:
                    47:e6:37:bc:3e:38:19:63:fb:fa:98:a0:ef:8a:5e:
                    f7:8b:70:da:23:84:16:f5:12:66:e1:70:a3:8d:d0:
                    0d:09:f1:85:8e:4b:37:36:4f:ac:17:13:c6:21:af:
                    01:0c:61:12:f8:c0:8c:16:44:d4:4c:e6:21:db:b5:
                    ba:ec:00:4a:90:14:89:90:ef:91:ef:df:50:3a:92:
                    ff:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:06:B6:04:31:D6:C2:7A:81:D8:8B:9D:08:30:4C:BA:9C:88:14:33
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/6d64a3-c0ba-46b3-af52-cc66fb8392c4/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/6d64a3-c0ba-46b3-af52-cc66fb8392c4/1/6wa2BDHWwnqB2IudCDBMupyIFDM.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.242.227.0/24
                IPv6:
                  2a11:aac0::/29

    Signature Algorithm: sha256WithRSAEncryption
         9a:24:1a:c7:62:80:b1:dd:0e:76:f0:c6:43:8f:bb:37:d8:37:
         22:df:ac:58:11:68:aa:ba:d8:18:07:12:3d:f3:2e:a5:de:b7:
         a8:29:1f:19:2f:84:a2:c7:d2:eb:60:a6:30:2c:c8:c7:73:ec:
         c6:5f:72:ea:15:93:56:4d:8c:9a:bb:9d:fe:bc:f1:e4:4b:11:
         ca:cf:27:c7:26:21:57:af:fc:94:4b:ed:d8:3d:49:83:e7:3e:
         64:3b:9f:c4:d8:2c:c8:40:f8:fd:c0:18:1d:73:a5:4b:c5:45:
         f6:1d:52:55:64:db:53:5e:45:ab:3c:ac:ae:3a:d4:f3:49:0c:
         43:8e:bf:80:d0:97:13:1c:50:78:10:53:32:ff:87:dc:31:f3:
         5b:e4:9f:16:a7:2f:e6:ef:12:4f:3f:f0:32:2c:10:2e:c1:e7:
         12:96:12:16:ca:61:2b:68:c2:c5:c4:ea:2f:10:ec:ba:56:1b:
         e8:8f:4a:10:a8:74:87:7a:9b:90:aa:ca:da:73:2c:be:47:0f:
         60:de:37:a6:d2:ec:9d:2b:d8:64:41:9c:4e:4a:d0:f7:bb:c0:
         a2:8c:c1:67:50:72:ca:ec:9d:ab:92:71:de:a3:f8:d1:e9:a4:
         a0:23:f8:be:5d:5d:21:7f:b2:04:2e:7a:4c:0e:76:0b:9d:36:
         98:22:40:67
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgISAYVsrDk2u22onYbisp0xJSpHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjMwMTAxMDkzMTQ0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYjA2YjYwNDMxZDZjMjdhODFkODhiOWQwODMwNGNiYTljODgxNDMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Dr/p1V2rcmtLwjScpxXZiCCiYBm
hgmOLpFoqQ8Dywl/zhsKI9ws0Q4ya1N2EGnwmFIZi/54fBYnUS2vk5AgLupAo7KE
A4a3Q3/4pwlsUx0B+WVqmUM9uwTnBwEJmTW2YqB8wiE96S5Gj81+37SOvMl0amsP
BWbEwMicZKb6egERRlIvUyUDJDj5yWUjlmYnMKHJ05IGPRr4BfTw5U3FVT04YLlC
AErRUoo+DLBWUGezvwdH5je8PjgZY/v6mKDvil73i3DaI4QW9RJm4XCjjdANCfGF
jks3Nk+sFxPGIa8BDGES+MCMFkTUTOYh27W67ABKkBSJkO+R799QOpL/vwIDAQAB
o4ICkzCCAo8wHQYDVR0OBBYEFOsGtgQx1sJ6gdiLnQgwTLqciBQzMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzQwLzZkNjRh
My1jMGJhLTQ2YjMtYWY1Mi1jYzY2ZmI4MzkyYzQvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDAvNmQ2NGEz
LWMwYmEtNDZiMy1hZjUyLWNjNjZmYjgzOTJjNC8xLzZ3YTJCREhXd25xQjJJdWRD
REJNdXB5SUZETS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQAW/LjMA0EAgACMAcDBQMqEarAMA0GCSqGSIb3
DQEBCwUAA4IBAQCaJBrHYoCx3Q528MZDj7s32Dci36xYEWiqutgYBxI98y6l3reo
KR8ZL4Six9LrYKYwLMjHc+zGX3LqFZNWTYyau53+vPHkSxHKzyfHJiFXr/yUS+3Y
PUmD5z5kO5/E2CzIQPj9wBgdc6VLxUX2HVJVZNtTXkWrPKyuOtTzSQxDjr+A0JcT
HFB4EFMy/4fcMfNb5J8Wpy/m7xJPP/AyLBAuwecSlhIWymEraMLFxOovEOy6Vhvo
j0oQqHSHepuQqsracyy+Rw9g3jem0uydK9hkQZxOStD3u8CijMFnUHLK7J2rknHe
o/jR6aSgI/i+XV0hf7IELnpMDnYLnTaYIkBn
-----END CERTIFICATE-----