Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/CnEjTyVmNJor3xf4kvjUcQu_-BI.cer
File:                     CnEjTyVmNJor3xf4kvjUcQu_-BI.cer (raw, json)
Hash identifier:          Fii2bN5k/zZHQtlaE0CwISdoZvAngpaaXC7qBKCv3z4=
Subject key identifier:   0A:71:23:4F:25:66:34:9A:2B:DF:17:F8:92:F8:D4:71:0B:BF:F8:12
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856D89315604F416CFF9A369B80EFED1CD
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/2c/4a5512-64c7-4f14-a2f0-55f6e25b5adb/1/CnEjTyVmNJor3xf4kvjUcQu_-BI.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/2c/4a5512-64c7-4f14-a2f0-55f6e25b5adb/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 13:33:05 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 45.141.192.0/22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6d:89:31:56:04:f4:16:cf:f9:a3:69:b8:0e:fe:d1:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 13:33:05 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=0a71234f2566349a2bdf17f892f8d4710bbff812
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:b0:c6:a3:70:31:70:d2:51:0e:aa:ef:0c:6b:
                    32:6b:03:2b:9b:5c:a3:bd:8e:23:84:f0:77:73:a8:
                    3d:24:1b:3e:5b:0a:20:3f:74:c1:24:96:ad:e5:9c:
                    1d:9d:2e:bd:db:f1:f9:38:17:4b:09:05:11:8b:41:
                    ff:a8:f4:d0:92:55:d3:90:ca:0c:79:bf:11:69:27:
                    b8:43:03:45:2d:f5:4c:7f:de:34:76:d8:61:71:f9:
                    57:7f:3e:4e:e5:db:84:43:01:cd:ea:eb:78:10:55:
                    32:3f:cd:cc:20:30:73:06:28:17:bd:6c:ed:3d:92:
                    32:0d:48:5c:5d:6d:68:f1:98:99:7e:62:cb:b8:31:
                    79:f2:8d:85:1f:8f:17:a8:d3:10:26:35:eb:0f:ca:
                    27:e9:ef:d6:f4:ac:08:51:da:27:ce:0c:99:57:a2:
                    12:8c:4b:00:fe:2e:02:c7:8f:f2:cd:d9:30:9b:1b:
                    06:db:02:a1:ae:b8:ce:33:05:7d:6d:a7:2f:9e:24:
                    8e:0b:1b:30:15:56:eb:ca:f5:e6:8c:f3:46:05:e3:
                    3b:e0:48:47:c2:8e:d3:ed:42:cd:55:93:fd:ee:d3:
                    cd:6a:c1:5e:57:07:7c:c3:f6:d0:88:f2:50:b1:b2:
                    da:f0:0e:7d:f4:8c:4b:04:c5:07:d5:8f:88:f8:9d:
                    e4:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:71:23:4F:25:66:34:9A:2B:DF:17:F8:92:F8:D4:71:0B:BF:F8:12
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/4a5512-64c7-4f14-a2f0-55f6e25b5adb/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/4a5512-64c7-4f14-a2f0-55f6e25b5adb/1/CnEjTyVmNJor3xf4kvjUcQu_-BI.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.141.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         22:5f:ee:71:fc:b9:b5:3c:cb:98:c9:54:03:49:db:b7:eb:eb:
         c7:45:c7:ee:7b:b1:3e:11:93:cd:d6:be:57:31:e7:c5:bf:aa:
         b1:d1:26:c3:0b:3c:0c:15:c1:cd:12:eb:f9:12:fb:62:cb:95:
         54:5b:92:9a:25:db:e6:26:ba:31:6c:06:3b:4b:81:77:b2:a9:
         9b:e5:b0:a3:ac:ef:b8:16:65:ba:62:24:c5:95:9a:93:a0:ad:
         d8:ef:97:52:93:38:5d:e2:62:6a:21:c4:8e:f3:ce:95:24:cb:
         ae:b5:64:a7:46:de:22:0e:57:81:c1:fa:8d:87:4d:ce:8b:1d:
         c8:51:ec:c4:c6:e0:57:d1:aa:2b:7b:ea:20:b9:7c:19:01:6f:
         2d:a8:3e:b0:33:6e:19:6c:0c:68:7c:f3:81:f5:76:7f:5b:a6:
         9e:d6:58:3f:48:1f:28:d3:e6:1f:e5:ce:68:18:24:9a:e7:a3:
         6f:6e:71:9b:71:e1:a5:12:c0:92:07:24:3f:be:39:61:8b:2b:
         2e:03:f9:89:3c:13:b9:3f:a4:6f:66:e5:a2:e6:3f:15:42:4c:
         6b:78:ac:2c:9f:f7:a7:61:c1:a0:0d:e0:70:eb:66:3c:1b:5f:
         3c:c6:2e:76:0b:39:82:1c:d3:d6:9c:24:98:b6:f7:9c:6c:52:
         31:10:25:76
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAYVtiTFWBPQWz/mjabgO/tHNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjMwMTAxMTMzMzA1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwYTcxMjM0ZjI1NjYzNDlhMmJkZjE3Zjg5MmY4ZDQ3MTBiYmZmODEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA17DGo3AxcNJRDqrvDGsyawMrm1yj
vY4jhPB3c6g9JBs+WwogP3TBJJat5ZwdnS692/H5OBdLCQURi0H/qPTQklXTkMoM
eb8RaSe4QwNFLfVMf940dthhcflXfz5O5duEQwHN6ut4EFUyP83MIDBzBigXvWzt
PZIyDUhcXW1o8ZiZfmLLuDF58o2FH48XqNMQJjXrD8on6e/W9KwIUdonzgyZV6IS
jEsA/i4Cx4/yzdkwmxsG2wKhrrjOMwV9bacvniSOCxswFVbryvXmjPNGBeM74EhH
wo7T7ULNVZP97tPNasFeVwd8w/bQiPJQsbLa8A599IxLBMUH1Y+I+J3kcQIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFApxI08lZjSaK98X+JL41HELv/gSMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzJjLzRhNTUx
Mi02NGM3LTRmMTQtYTJmMC01NWY2ZTI1YjVhZGIvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmMvNGE1NTEy
LTY0YzctNGYxNC1hMmYwLTU1ZjZlMjViNWFkYi8xL0NuRWpUeVZtTkpvcjN4ZjRr
dmpVY1F1Xy1CSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQCLY3AMA0GCSqGSIb3DQEBCwUAA4IBAQAiX+5x
/Lm1PMuYyVQDSdu36+vHRcfue7E+EZPN1r5XMefFv6qx0SbDCzwMFcHNEuv5Evti
y5VUW5KaJdvmJroxbAY7S4F3sqmb5bCjrO+4FmW6YiTFlZqToK3Y75dSkzhd4mJq
IcSO886VJMuutWSnRt4iDleBwfqNh03Oix3IUezExuBX0aore+oguXwZAW8tqD6w
M24ZbAxofPOB9XZ/W6ae1lg/SB8o0+Yf5c5oGCSa56NvbnGbceGlEsCSByQ/vjlh
iysuA/mJPBO5P6RvZuWi5j8VQkxreKwsn/enYcGgDeBw62Y8G188xi52CzmCHNPW
nCSYtvecbFIxECV2
-----END CERTIFICATE-----