Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/GWUJqIHln_r6oxz0i_Xidhu4Iu0.cer
File:                     GWUJqIHln_r6oxz0i_Xidhu4Iu0.cer (raw, json)
Hash identifier:          dKJnK5zJSLLHMSSyR1v94cIwfXc711V6s4HZyhmuAUw=
Subject key identifier:   19:65:09:A8:81:E5:9F:FA:FA:A3:1C:F4:8B:F5:E2:76:1B:B8:22:ED
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856ED2B0C65E01A81635BDEA25C4DFFA44
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/fd/944a87-a607-4552-9537-788b443b939f/1/GWUJqIHln_r6oxz0i_Xidhu4Iu0.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/fd/944a87-a607-4552-9537-788b443b939f/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 19:32:59 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 185.149.151.0/24
                          IP: 2a10:3c00::/29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6e:d2:b0:c6:5e:01:a8:16:35:bd:ea:25:c4:df:fa:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 19:32:59 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=196509a881e59ffafaa31cf48bf5e2761bb822ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:36:6d:08:42:24:35:65:28:7f:3d:a2:db:be:
                    fb:69:b7:1c:b0:20:5d:ab:3f:bc:5e:f6:7c:53:dc:
                    87:30:a2:b1:a2:a4:3b:31:d9:f4:3c:78:09:10:59:
                    89:fa:1e:67:15:c1:72:ea:b5:d6:62:5b:41:44:4f:
                    5a:68:64:9e:08:9d:e7:49:f1:03:31:76:d8:fa:c2:
                    d0:db:3d:ac:fe:da:ae:3f:22:1d:bb:52:67:b3:ee:
                    bc:04:87:3d:48:1d:2b:ca:67:1f:ae:fe:a7:e7:18:
                    3d:b8:8f:d0:d7:7a:72:6e:32:16:33:b7:5a:70:a0:
                    b2:b9:3b:de:9e:3a:73:9e:e1:43:b9:2d:a9:b6:3f:
                    07:d1:8e:03:54:ea:d7:2d:e5:89:24:96:f1:d8:b7:
                    0b:be:e2:d1:55:f3:7a:50:10:fe:12:58:36:38:73:
                    b7:5c:3a:59:46:c1:59:ba:4b:fd:e1:48:b0:31:ab:
                    88:ca:cc:dc:21:1d:c5:61:dd:f0:d1:cc:66:94:eb:
                    3e:4a:68:82:47:cb:40:1c:62:fa:cc:0c:4b:15:1f:
                    76:cf:79:d4:dc:60:db:a6:25:72:1d:76:de:c9:9c:
                    2e:27:1e:c7:c6:d5:bf:1a:d6:8d:0a:45:85:14:d0:
                    37:e1:e8:85:c5:0d:f3:1c:eb:43:13:8e:f5:b3:c5:
                    3e:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:65:09:A8:81:E5:9F:FA:FA:A3:1C:F4:8B:F5:E2:76:1B:B8:22:ED
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/944a87-a607-4552-9537-788b443b939f/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/944a87-a607-4552-9537-788b443b939f/1/GWUJqIHln_r6oxz0i_Xidhu4Iu0.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.149.151.0/24
                IPv6:
                  2a10:3c00::/29

    Signature Algorithm: sha256WithRSAEncryption
         36:a3:83:c6:b7:f2:cd:91:c5:f0:27:13:d7:92:84:27:29:7e:
         c6:a6:a6:d3:5c:63:d9:fd:91:be:7b:72:9f:fb:4a:2d:10:a0:
         ca:0d:35:c2:14:8f:3e:f9:25:43:59:01:d5:ed:8b:35:8a:80:
         7e:80:44:55:65:68:e8:98:87:00:26:89:be:c9:7c:bd:9f:3c:
         6c:bc:43:64:d5:ed:aa:c6:b2:13:2c:40:c1:68:6e:e3:78:49:
         ce:c3:bd:9e:ac:9b:80:89:bb:42:ca:ae:fb:af:03:0b:89:33:
         62:f0:ae:71:d5:92:40:8d:e1:51:1b:99:eb:1c:35:7e:5d:00:
         85:9a:aa:75:45:38:84:97:1c:f1:bc:f4:8d:74:47:e5:6d:90:
         fa:8b:c6:6f:d7:5f:00:32:2b:3d:d1:a0:21:90:99:f1:93:13:
         61:42:b1:b2:37:51:01:72:94:25:86:1f:99:c6:d6:ce:5c:4f:
         53:10:8f:eb:6f:a5:2e:25:aa:76:aa:6f:6f:1d:87:95:fd:bb:
         f7:2d:33:81:37:de:4b:15:53:69:d8:66:c4:1f:bf:49:3f:0c:
         39:19:9f:19:02:82:f5:a1:5f:d5:f0:de:8e:7e:19:a5:ca:58:
         fa:b5:95:97:ce:7b:43:ef:6a:21:5b:84:e4:70:1e:31:3b:bc:
         8f:89:04:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----