Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Am_WtloRo6csIvqtoGwx8vYzFjc.cer
File:                     Am_WtloRo6csIvqtoGwx8vYzFjc.cer (raw, json)
Hash identifier:          g46kr0PzG+kFUb1XKw0MpI3eJ8f0NFGuBt90O+SRJg4=
Subject key identifier:   02:6F:D6:B6:5A:11:A3:A7:2C:22:FA:AD:A0:6C:31:F2:F6:33:16:37
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856DF7DABC88207D8D0456E742600A77A9
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/9f/2148db-a1fa-4011-8917-4eabe3c5e418/1/Am_WtloRo6csIvqtoGwx8vYzFjc.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/9f/2148db-a1fa-4011-8917-4eabe3c5e418/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 15:33:58 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 185.76.150.0/24
                          IP: 2a0d:8f80::/29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6d:f7:da:bc:88:20:7d:8d:04:56:e7:42:60:0a:77:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 15:33:58 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=026fd6b65a11a3a72c22faada06c31f2f6331637
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:84:3d:c4:28:a9:57:f0:d3:2c:3b:57:91:74:
                    84:d3:46:2b:f6:31:c4:18:e4:69:86:cd:45:1a:7e:
                    4c:4f:ac:20:3e:23:bd:27:a3:68:f6:55:99:3f:87:
                    a4:f9:bd:2d:69:98:c8:01:74:8c:1b:0d:c7:38:fa:
                    aa:7a:f8:78:42:03:50:08:1f:5f:c0:b8:bb:12:d0:
                    b1:7d:d2:43:c8:f4:fc:38:92:be:d8:6c:01:59:c4:
                    4c:2f:6a:fc:95:9a:0f:8f:9f:47:ed:47:ca:30:62:
                    98:d1:dd:2e:ac:48:de:dd:14:80:d2:78:5a:15:60:
                    07:75:61:fa:8c:f3:f0:b7:0c:7e:51:6c:60:90:42:
                    b7:50:3b:70:ec:e1:f6:40:a3:a1:83:a8:cf:8e:af:
                    b8:8e:c3:56:cf:ad:b9:02:4e:c7:36:a8:2a:74:bb:
                    9a:2a:33:57:14:e3:c7:df:2f:66:39:39:7b:01:81:
                    bd:63:53:a6:01:f4:9f:32:0c:d5:f8:cc:21:88:5e:
                    92:20:6b:df:24:d4:6a:7d:7b:cb:7f:43:45:d2:80:
                    30:16:13:96:bf:28:68:52:50:66:dd:46:54:d9:cf:
                    2e:7f:6e:cc:0d:83:01:0f:fe:2a:b6:e7:05:7d:c0:
                    68:c2:33:99:48:e1:c8:31:28:f9:90:ed:dc:de:c5:
                    23:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:6F:D6:B6:5A:11:A3:A7:2C:22:FA:AD:A0:6C:31:F2:F6:33:16:37
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/2148db-a1fa-4011-8917-4eabe3c5e418/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/2148db-a1fa-4011-8917-4eabe3c5e418/1/Am_WtloRo6csIvqtoGwx8vYzFjc.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.76.150.0/24
                IPv6:
                  2a0d:8f80::/29

    Signature Algorithm: sha256WithRSAEncryption
         9f:3e:31:f5:77:08:e5:d8:da:7b:39:7f:13:49:8d:77:b7:5f:
         cc:90:01:3c:92:69:8e:1b:aa:d3:95:4e:bd:5b:54:a2:d7:d3:
         bb:57:10:74:07:5f:e8:dc:60:fc:f7:f0:73:29:7c:a8:af:4f:
         07:ce:13:7b:4b:fb:33:5c:f0:e8:ae:fe:5c:11:3d:ad:7b:81:
         6d:aa:1c:57:ce:92:30:7a:fe:35:8b:ae:28:da:7a:cf:71:2f:
         ee:40:cb:aa:d4:8d:9c:45:d7:0a:40:1a:11:a3:05:48:4d:45:
         76:3d:0f:c3:b3:8e:51:27:2d:15:7e:5a:35:1f:85:17:12:2c:
         2b:c9:fb:78:28:f7:5b:f9:b5:b1:2a:2f:4d:b7:69:94:38:51:
         44:23:0a:24:8d:b8:2d:ea:2e:f1:87:fa:a5:cd:f4:a7:d6:83:
         4e:5c:bb:c2:d9:02:79:04:9f:cb:bf:13:f1:fe:a6:e3:bd:93:
         b0:08:eb:a0:24:a1:d4:0c:0c:75:ea:02:54:42:14:7c:38:e2:
         75:32:75:37:2d:b9:80:fb:08:b8:e9:f3:44:36:59:a6:3b:d9:
         f7:de:c4:2b:1c:f5:04:77:0d:ef:f4:19:b8:22:31:a4:f8:b2:
         b5:be:b9:6d:24:a7:34:40:ad:f1:6d:37:c9:bb:02:80:e2:f7:
         b5:d2:85:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----