Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/FIjBjGLwik7Y74Pgqo1WkLhQU2g.cer
File:                     FIjBjGLwik7Y74Pgqo1WkLhQU2g.cer (raw, json)
Hash identifier:          4nLnIgt0c0nmLkGgp1ku6m1/zDtksVFOb9rW81Y7FI0=
Subject key identifier:   14:88:C1:8C:62:F0:8A:4E:D8:EF:83:E0:AA:8D:56:90:B8:50:53:68
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856BD12B7E500D7A94D59FCA89544C93F6
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/00/fd492d-2ca7-4fa2-8ece-9b9324d618db/1/FIjBjGLwik7Y74Pgqo1WkLhQU2g.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/00/fd492d-2ca7-4fa2-8ece-9b9324d618db/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 05:32:28 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 176.116.1.0/24
                          IP: 2a11:dfc0::/29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6b:d1:2b:7e:50:0d:7a:94:d5:9f:ca:89:54:4c:93:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 05:32:28 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=1488c18c62f08a4ed8ef83e0aa8d5690b8505368
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:01:32:86:89:42:5b:33:0d:f7:35:20:7a:4d:
                    52:5e:34:ac:67:65:69:13:79:9b:84:8c:af:07:6b:
                    af:7c:82:04:ec:79:cb:76:df:8a:21:60:a7:f7:5d:
                    af:f6:f3:b7:73:85:ff:7c:92:99:2a:bd:b4:2f:1c:
                    e4:b1:58:6a:5c:a6:e6:06:82:5c:7e:0e:46:ed:28:
                    4e:cd:93:7f:f7:67:ad:7e:03:c1:57:f5:02:5b:db:
                    0b:8f:2f:bb:c8:3a:03:9e:3e:c2:d0:4a:d2:bc:c6:
                    dc:af:b2:a5:b6:78:d7:39:fb:6e:c0:2b:63:dd:a3:
                    bd:fd:f4:56:4e:b4:eb:fa:0b:5b:cc:ad:6e:ce:5a:
                    3e:fa:05:e3:08:96:8d:e9:97:40:fb:76:af:94:18:
                    f2:40:e1:1d:4a:1c:b5:e7:be:5a:5a:10:5e:9e:ed:
                    cf:01:a2:39:dd:27:36:79:de:4a:e8:4e:84:68:42:
                    e4:2f:e2:53:17:3c:bc:c3:54:c6:d5:dc:4b:55:50:
                    8b:c2:92:7f:55:18:54:93:e1:1a:39:9d:f2:a8:22:
                    2d:25:5c:f4:62:82:48:e2:19:f5:4a:1d:11:42:e2:
                    ec:cc:31:e0:76:f2:2f:ed:12:63:3e:c0:22:1d:49:
                    1f:1a:7d:87:3d:23:06:81:b6:57:8a:f7:60:51:80:
                    7a:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:88:C1:8C:62:F0:8A:4E:D8:EF:83:E0:AA:8D:56:90:B8:50:53:68
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/fd492d-2ca7-4fa2-8ece-9b9324d618db/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/fd492d-2ca7-4fa2-8ece-9b9324d618db/1/FIjBjGLwik7Y74Pgqo1WkLhQU2g.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  176.116.1.0/24
                IPv6:
                  2a11:dfc0::/29

    Signature Algorithm: sha256WithRSAEncryption
         79:1a:ec:b0:20:80:5f:a8:cd:24:df:fc:df:e0:74:1b:1d:33:
         80:44:06:3b:44:92:a0:e4:92:d7:a1:45:e0:41:1f:91:17:cc:
         d3:d3:a8:10:7a:29:89:28:c1:e1:6c:cf:ca:da:04:0f:40:12:
         1e:9b:fb:56:b8:c9:1b:db:0a:1e:9f:9c:0f:f8:ed:85:70:67:
         c6:eb:5b:22:27:dd:ed:26:76:1c:c9:8d:c5:04:cb:8b:28:34:
         6a:b4:bb:03:df:f2:08:5c:37:75:fb:d7:6a:2e:cf:a8:12:79:
         a4:4a:d8:c4:56:b1:f7:06:5c:f5:ad:f8:bd:ca:fc:5f:ce:6f:
         32:ce:dc:c8:ba:1d:5a:af:35:7a:51:ea:78:f6:d8:2f:58:72:
         9d:e2:34:91:0c:4a:00:d8:0a:7a:88:e4:99:99:3c:44:21:4d:
         91:9a:4a:f0:3a:b3:25:6e:ef:0c:e0:df:be:cd:e7:0d:f9:cb:
         f5:13:f9:6a:06:3e:05:e0:82:5d:6b:ab:b3:d8:e2:36:0d:bb:
         2f:19:9c:f4:f6:2b:2e:7f:79:19:f8:c4:8a:ba:03:de:01:c4:
         9d:e4:ff:2f:3c:18:b8:90:78:5d:49:5b:e1:0e:67:a7:5f:c5:
         09:26:d7:35:cb:d4:56:46:03:39:35:e7:52:b7:fe:b6:7a:ef:
         d2:6d:6d:68
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgISAYVr0St+UA16lNWfyolUTJP2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjMwMTAxMDUzMjI4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNDg4YzE4YzYyZjA4YTRlZDhlZjgzZTBhYThkNTY5MGI4NTA1MzY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoAEyholCWzMN9zUgek1SXjSsZ2Vp
E3mbhIyvB2uvfIIE7HnLdt+KIWCn912v9vO3c4X/fJKZKr20LxzksVhqXKbmBoJc
fg5G7ShOzZN/92etfgPBV/UCW9sLjy+7yDoDnj7C0ErSvMbcr7KltnjXOftuwCtj
3aO9/fRWTrTr+gtbzK1uzlo++gXjCJaN6ZdA+3avlBjyQOEdShy1575aWhBenu3P
AaI53Sc2ed5K6E6EaELkL+JTFzy8w1TG1dxLVVCLwpJ/VRhUk+EaOZ3yqCItJVz0
YoJI4hn1Sh0RQuLszDHgdvIv7RJjPsAiHUkfGn2HPSMGgbZXivdgUYB6NwIDAQAB
o4ICkzCCAo8wHQYDVR0OBBYEFBSIwYxi8IpO2O+D4KqNVpC4UFNoMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzAwL2ZkNDky
ZC0yY2E3LTRmYTItOGVjZS05YjkzMjRkNjE4ZGIvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDAvZmQ0OTJk
LTJjYTctNGZhMi04ZWNlLTliOTMyNGQ2MThkYi8xL0ZJakJqR0x3aWs3WTc0UGdx
bzFXa0xoUVUyZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQAsHQBMA0EAgACMAcDBQMqEd/AMA0GCSqGSIb3
DQEBCwUAA4IBAQB5GuywIIBfqM0k3/zf4HQbHTOARAY7RJKg5JLXoUXgQR+RF8zT
06gQeimJKMHhbM/K2gQPQBIem/tWuMkb2woen5wP+O2FcGfG61siJ93tJnYcyY3F
BMuLKDRqtLsD3/IIXDd1+9dqLs+oEnmkStjEVrH3Blz1rfi9yvxfzm8yztzIuh1a
rzV6Uep49tgvWHKd4jSRDEoA2Ap6iOSZmTxEIU2RmkrwOrMlbu8M4N++zecN+cv1
E/lqBj4F4IJda6uz2OI2DbsvGZz09isuf3kZ+MSKugPeAcSd5P8vPBi4kHhdSVvh
DmenX8UJJtc1y9RWRgM5NedSt/62eu/SbW1o
-----END CERTIFICATE-----