Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Bkq6AV0rZSy0idpL2ZLRS-B2c8c.cer
File:                     Bkq6AV0rZSy0idpL2ZLRS-B2c8c.cer (raw, json)
Hash identifier:          /i4qoRAw5LQ2+pMF9l+pK5clnSCdoVungtLxJXQzi8o=
Subject key identifier:   06:4A:BA:01:5D:2B:65:2C:B4:89:DA:4B:D9:92:D1:4B:E0:76:73:C7
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856D1AC8891720A7C415C0F927FCA29BD2
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/0e/37d93c-aa71-46d8-a54c-43d796147d3c/1/Bkq6AV0rZSy0idpL2ZLRS-B2c8c.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/0e/37d93c-aa71-46d8-a54c-43d796147d3c/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 11:32:29 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 91.242.239.0/24
                          IP: 2a11:aec0::/29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6d:1a:c8:89:17:20:a7:c4:15:c0:f9:27:fc:a2:9b:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 11:32:29 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=064aba015d2b652cb489da4bd992d14be07673c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:a1:cc:89:fa:4c:b6:e4:94:dc:af:17:05:a5:
                    18:55:aa:f6:2e:1c:ec:a3:56:a7:f3:44:5e:9f:56:
                    51:e0:a5:e2:07:e9:6d:df:af:7a:c9:bb:e7:ca:4f:
                    33:82:3b:58:90:7e:dd:bc:fb:80:40:cb:9a:e9:db:
                    75:2f:11:cf:31:ed:67:16:f0:f9:6f:7a:29:37:4c:
                    9d:56:3e:48:14:10:1d:38:13:94:4d:34:eb:1b:df:
                    5e:a5:f1:45:4e:68:9c:b8:3c:85:43:26:2d:85:63:
                    98:aa:0a:f0:13:06:6f:25:29:13:87:e1:80:5a:1a:
                    69:6a:b8:35:99:9d:d3:f5:76:c1:37:f1:5d:94:e5:
                    9d:c6:46:51:03:ad:ec:63:43:d4:bb:a4:f6:ef:b0:
                    f3:45:5b:d7:8b:b7:66:b1:45:85:2c:2c:98:a8:0e:
                    6e:92:3a:7b:79:0a:e7:cc:25:f6:0c:cc:09:f5:1b:
                    19:14:8d:17:5b:39:4f:26:a8:82:57:22:50:f5:b8:
                    f1:b7:0d:d3:ff:8e:9a:8e:68:1f:47:7b:47:56:95:
                    d7:63:95:6f:db:af:cf:0e:bd:ee:44:c9:b6:19:cb:
                    72:3c:ac:a0:0f:9b:ea:bc:6d:b9:e8:da:2b:98:0a:
                    d0:87:36:5b:ed:51:b4:71:7f:b8:55:ff:81:c9:e6:
                    55:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:4A:BA:01:5D:2B:65:2C:B4:89:DA:4B:D9:92:D1:4B:E0:76:73:C7
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/37d93c-aa71-46d8-a54c-43d796147d3c/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/37d93c-aa71-46d8-a54c-43d796147d3c/1/Bkq6AV0rZSy0idpL2ZLRS-B2c8c.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.242.239.0/24
                IPv6:
                  2a11:aec0::/29

    Signature Algorithm: sha256WithRSAEncryption
         8d:37:4f:5c:a0:ff:3c:d6:c6:32:50:3c:4a:bd:f0:0e:b7:46:
         68:98:12:6d:12:7f:49:34:61:3e:d3:e5:39:23:ef:b4:55:a4:
         2b:06:69:3b:e7:ea:a6:d4:9f:a8:20:77:7d:a0:2a:c7:1b:b1:
         63:58:e5:90:dc:b7:80:c9:6b:c4:d2:b3:cf:a6:b5:a5:6e:e7:
         ad:dd:b9:e6:39:8a:44:09:fd:78:ef:84:1b:c8:26:45:76:b6:
         07:a8:11:1b:04:08:8c:c3:10:db:1c:d9:4f:1f:d9:aa:37:a7:
         1a:a3:bf:eb:e6:2b:e6:e7:32:19:39:49:06:45:a4:2f:2b:f2:
         a6:a6:1e:e6:68:90:aa:86:b0:fd:3b:c7:8b:68:78:2c:04:2a:
         5c:3c:5e:9b:14:f4:d7:6c:ca:68:8b:bf:dd:e3:91:e2:d2:29:
         fe:28:d6:ca:a5:24:52:80:61:8a:e7:93:1a:1b:df:f9:4f:8c:
         c9:a1:aa:6e:e7:09:5b:ad:77:f0:cb:57:77:94:19:70:1d:85:
         32:31:ab:e6:0c:7d:5e:f8:56:bd:04:24:bf:d7:20:df:d6:b6:
         ae:cc:03:87:d4:75:3a:92:25:aa:00:77:3e:6f:03:37:ea:85:
         bf:14:2a:64:e0:f2:4d:5f:5c:d5:c1:4f:3e:ac:2c:5b:db:ba:
         56:d5:1f:64
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgISAYVtGsiJFyCnxBXA+Sf8opvSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjMwMTAxMTEzMjI5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNjRhYmEwMTVkMmI2NTJjYjQ4OWRhNGJkOTkyZDE0YmUwNzY3M2M3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv6HMifpMtuSU3K8XBaUYVar2Lhzs
o1an80Ren1ZR4KXiB+lt3696ybvnyk8zgjtYkH7dvPuAQMua6dt1LxHPMe1nFvD5
b3opN0ydVj5IFBAdOBOUTTTrG99epfFFTmicuDyFQyYthWOYqgrwEwZvJSkTh+GA
Whpparg1mZ3T9XbBN/FdlOWdxkZRA63sY0PUu6T277DzRVvXi7dmsUWFLCyYqA5u
kjp7eQrnzCX2DMwJ9RsZFI0XWzlPJqiCVyJQ9bjxtw3T/46ajmgfR3tHVpXXY5Vv
26/PDr3uRMm2GctyPKygD5vqvG256NormArQhzZb7VG0cX+4Vf+ByeZV4wIDAQAB
o4ICkzCCAo8wHQYDVR0OBBYEFAZKugFdK2UstInaS9mS0UvgdnPHMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBlLzM3ZDkz
Yy1hYTcxLTQ2ZDgtYTU0Yy00M2Q3OTYxNDdkM2MvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGUvMzdkOTNj
LWFhNzEtNDZkOC1hNTRjLTQzZDc5NjE0N2QzYy8xL0JrcTZBVjByWlN5MGlkcEwy
WkxSUy1CMmM4Yy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQAW/LvMA0EAgACMAcDBQMqEa7AMA0GCSqGSIb3
DQEBCwUAA4IBAQCNN09coP881sYyUDxKvfAOt0ZomBJtEn9JNGE+0+U5I++0VaQr
Bmk75+qm1J+oIHd9oCrHG7FjWOWQ3LeAyWvE0rPPprWlbuet3bnmOYpECf1474Qb
yCZFdrYHqBEbBAiMwxDbHNlPH9mqN6cao7/r5ivm5zIZOUkGRaQvK/Kmph7maJCq
hrD9O8eLaHgsBCpcPF6bFPTXbMpoi7/d45Hi0in+KNbKpSRSgGGK55MaG9/5T4zJ
oapu5wlbrXfwy1d3lBlwHYUyMavmDH1e+Fa9BCS/1yDf1rauzAOH1HU6kiWqAHc+
bwM36oW/FCpk4PJNX1zVwU8+rCxb27pW1R9k
-----END CERTIFICATE-----