Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9RRbGi9oE1UCjLYqtleBGBsYZko.cer
File:                     9RRbGi9oE1UCjLYqtleBGBsYZko.cer (raw, json)
Hash identifier:          5a1KF/t4/bQLV+Gxu9viVMH78UliB9ggkfzfFYQuaiA=
Subject key identifier:   F5:14:5B:1A:2F:68:13:55:02:8C:B6:2A:B6:57:81:18:1B:18:66:4A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856E6532499022062A233A0CBFEEADD175
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/18/c050ea-0e26-4ef2-9fb9-345554f65a24/1/9RRbGi9oE1UCjLYqtleBGBsYZko.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/18/c050ea-0e26-4ef2-9fb9-345554f65a24/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 17:33:23 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 2001:4bc0::/29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6e:65:32:49:90:22:06:2a:23:3a:0c:bf:ee:ad:d1:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 17:33:23 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=f5145b1a2f681355028cb62ab65781181b18664a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:8f:c8:05:09:ea:d8:7b:11:5a:a2:f7:69:71:
                    92:7d:96:bf:7b:49:99:48:73:e0:c7:e5:78:b9:cb:
                    a7:8c:e4:31:8a:57:ad:9c:56:bd:e0:46:0b:93:4a:
                    54:d2:69:54:b3:1e:be:57:43:7d:b4:e6:0d:4d:39:
                    e7:a0:46:c5:32:88:b2:ce:0d:89:38:58:80:6d:05:
                    bc:72:42:2a:3b:19:5c:7a:bd:f0:03:db:b2:b6:00:
                    0e:f5:0d:28:07:73:af:d7:c1:23:6e:3d:93:d9:b5:
                    b9:26:9e:5e:04:a4:0f:67:ae:24:49:77:dd:dd:30:
                    e7:d2:23:d2:f8:d8:74:ff:ec:45:01:5a:b1:25:c1:
                    40:13:f4:de:4c:80:8f:b2:62:f0:93:76:aa:e6:cb:
                    23:99:64:b3:90:82:6f:5b:8f:96:42:26:70:ef:94:
                    3b:18:d9:ab:03:45:c8:a2:1e:9a:0a:0f:24:af:eb:
                    07:e5:9b:5c:7a:6e:ed:ba:91:47:c1:ab:ad:c5:ec:
                    75:b6:ee:5f:a6:42:a8:56:ac:25:d8:e7:3e:4d:d0:
                    3d:cd:eb:69:49:d8:4c:22:b9:14:0c:56:66:77:c5:
                    ca:15:bb:4c:34:4e:37:b1:25:02:cc:2a:6a:b0:86:
                    32:78:e9:8e:c8:dd:0e:cf:8e:35:37:e9:68:ff:46:
                    4a:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:14:5B:1A:2F:68:13:55:02:8C:B6:2A:B6:57:81:18:1B:18:66:4A
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/c050ea-0e26-4ef2-9fb9-345554f65a24/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/c050ea-0e26-4ef2-9fb9-345554f65a24/1/9RRbGi9oE1UCjLYqtleBGBsYZko.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4bc0::/29

    Signature Algorithm: sha256WithRSAEncryption
         66:84:9a:0e:53:c5:ab:ef:e9:c7:bd:49:84:53:47:98:f1:f7:
         37:66:08:e7:20:94:d9:c2:87:ba:e2:d0:97:d7:63:35:ff:84:
         73:ba:66:44:9c:00:63:e7:77:72:e9:0f:ba:8f:08:25:0d:53:
         2d:9d:3f:c0:e5:5f:29:6f:f7:17:1a:c3:4d:74:81:f3:a1:fa:
         0e:4b:f5:06:9a:71:4e:8c:09:eb:73:52:25:2a:ed:70:82:de:
         35:05:62:5c:ea:d2:1b:a9:35:6f:18:49:e1:de:20:06:c9:df:
         30:6a:d1:79:fa:d3:ee:f9:ef:3a:cd:f5:16:e9:d8:f2:82:c2:
         5e:83:d6:0b:fd:54:eb:93:61:26:af:7d:a4:8f:70:4d:45:fd:
         7e:60:e2:ab:55:f9:f1:11:7c:57:51:b7:96:80:63:8c:f2:7b:
         5b:c8:de:3c:d1:9b:1f:90:7c:8f:8e:9b:bd:43:02:a3:cd:7b:
         d1:6a:c4:80:8e:38:e3:b2:17:d1:72:29:34:1e:d6:cb:ba:81:
         ac:42:48:8a:44:cd:7c:30:bc:94:1b:10:96:44:3d:e1:06:24:
         57:27:bc:2e:19:33:a2:3e:f7:d9:5b:9d:76:72:96:9e:50:db:
         e0:a5:8a:7f:cb:5e:1b:bc:44:78:c6:6d:b5:e1:b9:2a:da:6f:
         6d:50:3d:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----