Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9faizNOy5R0Zzzj8FB7JQl13zyo.cer
File:                     9faizNOy5R0Zzzj8FB7JQl13zyo.cer (raw, json)
Hash identifier:          nC+jteBACXQ7XQTcHlwcdjWNoinIt31e9Vk579Ir4sQ=
Subject key identifier:   F5:F6:A2:CC:D3:B2:E5:1D:19:CF:38:FC:14:1E:C9:42:5D:77:CF:2A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018571D5C06069AA56EB978671A82FCE61C5
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/64/d354b5-9031-45ef-8b4f-02d1f71208d0/1/9faizNOy5R0Zzzj8FB7JQl13zyo.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/64/d354b5-9031-45ef-8b4f-02d1f71208d0/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 02 Jan 2023 09:35:11 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 146.19.39.0/24
                          IP: 2a12:4d00::/29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:71:d5:c0:60:69:aa:56:eb:97:86:71:a8:2f:ce:61:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 09:35:11 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=f5f6a2ccd3b2e51d19cf38fc141ec9425d77cf2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:6d:31:e2:80:66:64:e7:b3:39:a9:0a:e4:d8:
                    86:ce:59:98:69:0a:67:81:65:25:8f:38:cc:b8:b7:
                    f7:8d:2c:c6:ab:0d:03:40:dd:4e:77:0b:4b:14:8d:
                    f4:81:ad:79:bb:a9:be:9e:56:ae:f9:09:1e:1b:22:
                    9b:9e:3b:df:12:d8:7a:46:0a:a4:87:87:7f:f2:47:
                    e2:93:89:c8:f5:f8:0d:38:cc:24:73:bf:e9:a4:ff:
                    38:d8:69:a9:1a:c0:0a:f5:2a:e7:a7:82:c9:8f:d6:
                    1f:b2:3e:1c:a1:14:78:31:ca:8e:5f:85:34:8d:56:
                    17:57:84:e0:29:de:e3:87:2d:c4:60:91:fc:ea:b6:
                    fd:30:06:80:85:da:cb:eb:60:15:04:54:7c:99:f0:
                    00:d9:c4:cb:76:f1:64:cd:2b:be:06:e3:d8:5e:b1:
                    6c:2e:b6:04:36:22:b3:bd:2d:b7:27:f2:9e:2c:d3:
                    b9:6c:9b:5b:36:23:95:9d:4c:55:93:32:59:9c:54:
                    17:f6:4c:5c:bd:fc:94:cf:0d:9a:78:d6:93:79:fa:
                    4b:12:9c:12:0a:da:1a:39:67:c9:f0:79:73:da:9e:
                    e1:94:33:fd:1c:b4:b7:ac:10:6e:95:b9:5f:98:41:
                    37:4f:01:48:4c:6d:5d:11:ba:76:a6:41:6a:30:59:
                    65:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:F6:A2:CC:D3:B2:E5:1D:19:CF:38:FC:14:1E:C9:42:5D:77:CF:2A
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/d354b5-9031-45ef-8b4f-02d1f71208d0/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/d354b5-9031-45ef-8b4f-02d1f71208d0/1/9faizNOy5R0Zzzj8FB7JQl13zyo.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.19.39.0/24
                IPv6:
                  2a12:4d00::/29

    Signature Algorithm: sha256WithRSAEncryption
         7c:d8:dc:8c:de:bd:49:72:3e:ee:94:33:51:63:7f:f6:4d:fe:
         a9:c4:6a:8f:92:c4:b5:62:fd:ed:9a:82:17:8f:49:28:3b:f2:
         ec:f5:06:27:84:5a:96:ec:d4:ea:a6:b1:fb:2c:f0:27:b9:e8:
         02:8a:b5:ed:de:e6:08:9d:ad:f0:ff:55:fd:9a:1c:4d:6f:e2:
         4b:ac:f7:0b:48:06:be:47:70:56:22:be:ee:aa:88:e4:e0:36:
         46:a5:be:e9:82:ed:3d:d4:7d:5e:84:cd:ff:27:0f:a7:0c:44:
         6b:55:14:63:3a:a0:d5:d1:2b:6b:18:4e:c9:0d:d1:6f:e3:13:
         d2:5b:a2:9f:55:26:03:45:e9:9d:da:9b:b0:c0:24:ab:f6:79:
         fd:63:25:34:7f:bc:91:ee:a2:06:5b:35:81:42:66:cc:73:32:
         cd:ef:b7:43:09:85:9a:28:6f:f8:b9:bc:8d:5b:a7:ce:08:a8:
         6a:bb:98:8b:1a:0a:b1:6b:70:23:e5:b7:1d:c1:ab:8d:e0:d0:
         9a:fa:01:1f:43:2b:b5:ac:d6:bf:e4:60:05:26:3e:9f:a9:f4:
         ff:a8:0f:9a:66:ce:7a:78:40:a9:02:21:ff:81:93:fb:40:09:
         55:34:c8:8f:80:5e:95:2b:10:98:fd:11:fa:1b:24:a3:da:d0:
         08:55:21:14
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgISAYVx1cBgaapW65eGcagvzmHFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjMwMTAyMDkzNTExWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNWY2YTJjY2QzYjJlNTFkMTljZjM4ZmMxNDFlYzk0MjVkNzdjZjJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuW0x4oBmZOezOakK5NiGzlmYaQpn
gWUljzjMuLf3jSzGqw0DQN1OdwtLFI30ga15u6m+nlau+QkeGyKbnjvfEth6Rgqk
h4d/8kfik4nI9fgNOMwkc7/ppP842GmpGsAK9Srnp4LJj9Yfsj4coRR4McqOX4U0
jVYXV4TgKd7jhy3EYJH86rb9MAaAhdrL62AVBFR8mfAA2cTLdvFkzSu+BuPYXrFs
LrYENiKzvS23J/KeLNO5bJtbNiOVnUxVkzJZnFQX9kxcvfyUzw2aeNaTefpLEpwS
CtoaOWfJ8Hlz2p7hlDP9HLS3rBBulblfmEE3TwFITG1dEbp2pkFqMFllVQIDAQAB
o4ICkzCCAo8wHQYDVR0OBBYEFPX2oszTsuUdGc84/BQeyUJdd88qMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzY0L2QzNTRi
NS05MDMxLTQ1ZWYtOGI0Zi0wMmQxZjcxMjA4ZDAvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjQvZDM1NGI1
LTkwMzEtNDVlZi04YjRmLTAyZDFmNzEyMDhkMC8xLzlmYWl6Tk95NVIwWnp6ajhG
QjdKUWwxM3p5by5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQAkhMnMA0EAgACMAcDBQMqEk0AMA0GCSqGSIb3
DQEBCwUAA4IBAQB82NyM3r1Jcj7ulDNRY3/2Tf6pxGqPksS1Yv3tmoIXj0koO/Ls
9QYnhFqW7NTqprH7LPAnuegCirXt3uYIna3w/1X9mhxNb+JLrPcLSAa+R3BWIr7u
qojk4DZGpb7pgu091H1ehM3/Jw+nDERrVRRjOqDV0StrGE7JDdFv4xPSW6KfVSYD
Remd2puwwCSr9nn9YyU0f7yR7qIGWzWBQmbMczLN77dDCYWaKG/4ubyNW6fOCKhq
u5iLGgqxa3Aj5bcdwauN4NCa+gEfQyu1rNa/5GAFJj6fqfT/qA+aZs56eECpAiH/
gZP7QAlVNMiPgF6VKxCY/RH6GySj2tAIVSEU
-----END CERTIFICATE-----