Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/A3jiKwJRDSn4wYSm9mPrmP0daqc.cer
File:                     A3jiKwJRDSn4wYSm9mPrmP0daqc.cer (raw, json)
Hash identifier:          w3UM6Uzem00XA/q3uzWLZ/uAO8ta6LBS/kK5D2SUv/E=
Subject key identifier:   03:78:E2:2B:02:51:0D:29:F8:C1:84:A6:F6:63:EB:98:FD:1D:6A:A7
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01857168E05AD0F57C21BCAF8E6EA919AF2F
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/bb/daff4f-42e1-4fef-a4e8-9ef964c6b569/1/A3jiKwJRDSn4wYSm9mPrmP0daqc.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/bb/daff4f-42e1-4fef-a4e8-9ef964c6b569/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 02 Jan 2023 07:36:16 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    AS: 51574
                          IP: 185.201.254.0/24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:71:68:e0:5a:d0:f5:7c:21:bc:af:8e:6e:a9:19:af:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 07:36:16 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=0378e22b02510d29f8c184a6f663eb98fd1d6aa7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:44:51:f3:9f:ac:7e:c5:bf:fe:64:1b:88:47:
                    12:85:2e:c3:d0:e1:22:74:f7:05:67:83:4a:44:c5:
                    49:6a:dc:7d:28:5b:d7:c6:da:ea:88:0f:ee:31:03:
                    1b:fb:77:14:eb:24:d7:64:d1:c9:4f:06:bb:e0:a7:
                    a4:11:f7:d6:ac:29:92:6a:88:94:dc:01:70:af:3d:
                    fb:11:09:e7:45:ee:c9:e4:42:bf:93:ca:1b:cb:fe:
                    77:96:ae:91:71:b8:aa:dc:ee:a4:14:8a:ad:7f:b1:
                    12:68:3b:f0:5d:23:5e:89:eb:7b:b2:21:df:ac:90:
                    75:de:f4:57:c1:f4:e3:24:17:2a:ec:44:d2:43:89:
                    e4:09:bf:9c:f9:cf:35:81:c6:69:ef:f4:31:5b:7a:
                    12:4e:19:19:3f:0e:96:00:6f:ba:10:ca:aa:92:6a:
                    25:fd:59:e1:fe:40:0d:27:30:c6:50:04:ef:d4:8d:
                    a0:0b:ce:54:9d:5c:5d:65:33:0f:2e:6c:cd:f6:b3:
                    67:55:de:5f:82:2a:03:84:83:9f:52:1d:61:94:e0:
                    8b:76:f2:61:c1:e4:00:ab:04:a2:e5:b6:63:2a:45:
                    d1:04:07:db:8a:c3:6f:d8:80:b1:c5:06:29:e3:56:
                    f9:d2:45:11:6a:bb:1e:e6:c9:1c:10:9f:03:ec:a8:
                    de:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:78:E2:2B:02:51:0D:29:F8:C1:84:A6:F6:63:EB:98:FD:1D:6A:A7
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/daff4f-42e1-4fef-a4e8-9ef964c6b569/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/daff4f-42e1-4fef-a4e8-9ef964c6b569/1/A3jiKwJRDSn4wYSm9mPrmP0daqc.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.201.254.0/24

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  51574

    Signature Algorithm: sha256WithRSAEncryption
         3d:d1:e3:13:ee:b8:da:fd:d2:19:0f:b6:65:de:99:c1:1e:c5:
         53:03:ed:8a:15:43:b6:08:04:7f:9e:a0:db:e3:63:0b:62:d5:
         23:e2:11:4f:86:07:de:73:27:76:f1:35:41:54:71:d8:0a:de:
         8a:31:d7:aa:6a:8d:d4:56:e5:0f:fe:c2:1a:b1:43:79:7b:9f:
         5b:bd:ae:10:7b:e8:8f:a5:a4:ad:97:1c:ae:49:e0:58:6c:76:
         70:8e:97:75:99:53:51:07:2a:53:08:32:ce:d7:97:fe:59:c9:
         c8:e0:c8:29:3a:e5:ba:b3:53:21:0d:0b:e1:bd:84:a4:74:42:
         ed:8e:1d:72:e1:93:18:03:b0:f1:53:2e:73:79:ab:33:9b:61:
         98:ad:73:31:57:8a:ca:d1:12:e7:f8:48:7d:ab:79:95:57:0f:
         5b:d6:b0:c1:2b:76:e4:95:94:d3:d0:26:d8:79:6d:93:e6:21:
         87:97:c8:3e:5f:d2:d7:c9:bf:cc:c3:14:aa:12:ba:e8:43:97:
         66:ed:52:a0:bb:2f:2a:00:71:5c:b9:6d:18:54:02:ed:e5:0a:
         95:9a:f3:1b:25:ad:d2:d8:fb:ca:f2:ac:cb:f0:41:68:ee:74:
         2f:b7:40:8d:32:5d:00:4e:0f:db:d3:80:0d:a9:61:b3:c7:e6:
         47:38:0d:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----