Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/EKMM0HNcDw1o_3b4m1_wZ5LUigU.cer
File:                     EKMM0HNcDw1o_3b4m1_wZ5LUigU.cer (raw, json)
Hash identifier:          48/lNNC6gaLk+/hsQYBBsXiMnMkTrA8mLNx/IKk9UlI=
Subject key identifier:   10:A3:0C:D0:73:5C:0F:0D:68:FF:76:F8:9B:5F:F0:67:92:D4:8A:05
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856BD0EEB816F8AC965258A269E1CE9DC9
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/d0/d7d1dc-6467-4ca5-ba8c-ea816336769d/1/EKMM0HNcDw1o_3b4m1_wZ5LUigU.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/d0/d7d1dc-6467-4ca5-ba8c-ea816336769d/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 05:32:12 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 217.114.42.0/24
                          IP: 2a11:77c0::/29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6b:d0:ee:b8:16:f8:ac:96:52:58:a2:69:e1:ce:9d:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 05:32:12 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=10a30cd0735c0f0d68ff76f89b5ff06792d48a05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:0f:a5:5d:f2:31:6f:7e:96:f8:1c:84:c9:ec:
                    80:06:18:15:16:56:39:6b:81:c9:1f:3c:88:93:59:
                    d9:ec:a2:1f:70:a9:1c:7a:6b:72:b0:de:96:4a:4f:
                    57:27:27:4c:9c:8d:c2:30:1f:36:01:e1:b9:c5:37:
                    7b:1a:ac:44:61:55:2c:71:e6:71:29:9b:25:38:df:
                    1d:7f:11:73:32:de:2c:2e:b3:e8:b5:dc:d3:13:db:
                    b2:c2:40:23:44:af:1b:2c:aa:f9:29:de:81:d3:5b:
                    b9:30:0f:32:2b:78:f1:7e:e8:94:de:a3:4d:39:d6:
                    e5:96:48:76:55:fc:0c:14:df:02:bc:b2:5e:a1:46:
                    86:a9:16:0c:38:01:d3:2d:b9:a9:db:41:12:e2:16:
                    7a:e1:7d:ed:8b:17:80:e4:21:7f:91:1f:66:a6:e6:
                    a4:10:ed:74:f2:e5:99:ac:82:ea:a2:eb:00:7a:20:
                    c3:7f:ca:7c:df:87:39:6d:9f:2c:3b:ea:67:75:8b:
                    89:50:37:a3:fc:e2:58:e1:ea:a9:41:5c:24:00:b2:
                    af:ea:f7:54:a9:48:ae:91:58:33:ee:b1:05:e6:df:
                    11:93:6a:59:ed:6e:2c:d1:be:6f:ff:50:0f:3b:42:
                    36:ae:23:61:2a:27:16:62:b5:88:ef:31:61:00:b7:
                    97:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:A3:0C:D0:73:5C:0F:0D:68:FF:76:F8:9B:5F:F0:67:92:D4:8A:05
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d7d1dc-6467-4ca5-ba8c-ea816336769d/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d7d1dc-6467-4ca5-ba8c-ea816336769d/1/EKMM0HNcDw1o_3b4m1_wZ5LUigU.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  217.114.42.0/24
                IPv6:
                  2a11:77c0::/29

    Signature Algorithm: sha256WithRSAEncryption
         8e:4b:da:69:d5:e8:2a:c2:3d:58:ff:68:31:27:64:ee:ee:17:
         4f:df:4a:c1:dc:82:5c:18:d6:2e:8b:72:98:31:e3:0f:86:45:
         86:5d:63:ba:12:7e:59:95:41:49:f6:db:e2:c8:37:79:b2:68:
         38:7f:43:88:f7:08:05:91:47:ff:b1:6b:75:06:4b:f1:d6:92:
         58:14:14:85:a1:e6:cd:eb:f8:fa:c0:94:87:ac:8d:15:19:9b:
         db:7e:90:9d:a8:c4:d5:c6:bc:f6:ef:a3:b1:6e:2d:93:56:ad:
         60:5f:14:a1:95:af:9f:c1:6b:bf:11:96:2e:1e:48:ff:5f:80:
         ae:90:ae:ff:b5:ca:a3:80:30:11:75:5e:16:ee:5f:34:8c:ed:
         db:7e:41:87:27:be:0a:11:3d:c1:7e:79:3f:de:07:5a:56:68:
         82:b1:23:62:e2:df:94:ac:09:65:37:81:c9:22:d2:0b:01:d7:
         6b:25:36:f1:6c:c4:5c:aa:92:0a:ed:67:b8:9b:be:25:56:2a:
         f7:a1:4c:01:b6:da:76:3d:a1:6b:ed:f2:20:c6:ee:bf:c6:12:
         30:10:4a:98:75:46:39:0a:45:e0:12:63:4e:21:fd:27:18:c9:
         5f:ec:1b:45:59:f6:11:1d:22:cd:fa:2a:0b:50:7a:1d:7a:3b:
         d5:99:09:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----