Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/GfZttAFYkWodo20luQ-xtJFbgRY.cer
File:                     GfZttAFYkWodo20luQ-xtJFbgRY.cer (raw, json)
Hash identifier:          zkrNsmtf9CYPuH979CiuWZcvVl5gewGhRKb6+ZvwAk4=
Subject key identifier:   19:F6:6D:B4:01:58:91:6A:1D:A3:6D:25:B9:0F:B1:B4:91:5B:81:16
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0185708BB2251E82E85B94B57304D0940F92
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/24/075961-a2e8-4ae0-acb9-79b56f1b5b11/1/GfZttAFYkWodo20luQ-xtJFbgRY.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/24/075961-a2e8-4ae0-acb9-79b56f1b5b11/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 02 Jan 2023 03:34:41 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 94.154.124.0/24
                          IP: 2a11:4940::/29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:8b:b2:25:1e:82:e8:5b:94:b5:73:04:d0:94:0f:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 03:34:41 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=19f66db40158916a1da36d25b90fb1b4915b8116
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:4a:4a:99:71:d2:87:16:7c:8f:b8:1c:15:af:
                    f4:e9:8a:fa:64:f4:46:e6:43:2f:c1:35:e1:f8:f4:
                    5c:19:33:f3:7a:18:2b:91:ef:c6:01:15:2e:99:18:
                    6c:ee:ab:b6:e2:50:f4:33:3a:97:3e:c4:97:f5:9b:
                    f1:0b:6f:ae:a3:aa:bd:38:46:b8:9a:bf:a5:ee:99:
                    62:d0:6a:87:3e:55:11:57:0f:5b:3c:da:01:52:ed:
                    f7:d7:73:86:a3:57:66:7c:64:c5:24:bf:74:87:bd:
                    8c:d0:f5:f3:0b:11:ec:ef:af:57:6c:f2:f4:70:da:
                    a6:36:6c:d3:60:10:5b:24:04:db:87:ca:d8:9a:fc:
                    78:7a:7e:a4:5f:45:6c:2f:5b:1a:06:c4:56:aa:52:
                    9a:b0:8f:99:c8:fa:85:c2:41:81:36:25:c6:5a:a6:
                    db:79:05:0f:ea:f0:f8:44:05:3d:2d:cf:5f:7c:e6:
                    35:27:a0:c3:25:39:b5:b5:a7:84:d0:71:d8:f3:45:
                    67:4c:60:f8:2b:e7:24:b6:80:c7:18:c0:33:f8:22:
                    57:f3:4d:48:45:57:96:a5:99:72:7e:dd:d8:26:0f:
                    81:be:e3:10:6b:da:a6:fd:3b:45:5b:ac:d3:3c:30:
                    26:e9:a1:49:c5:57:be:57:3e:c2:f0:1c:44:b7:b9:
                    81:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:F6:6D:B4:01:58:91:6A:1D:A3:6D:25:B9:0F:B1:B4:91:5B:81:16
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/075961-a2e8-4ae0-acb9-79b56f1b5b11/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/075961-a2e8-4ae0-acb9-79b56f1b5b11/1/GfZttAFYkWodo20luQ-xtJFbgRY.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  94.154.124.0/24
                IPv6:
                  2a11:4940::/29

    Signature Algorithm: sha256WithRSAEncryption
         28:d2:d0:77:6d:cb:9f:ea:7f:96:cc:96:e9:00:c6:1b:85:7e:
         15:6b:40:a2:2d:4e:c3:b3:60:89:cc:3b:c7:c9:3c:6f:eb:c5:
         eb:c5:5e:3a:72:db:91:c2:1f:0d:a5:0b:79:ae:97:e4:6e:f9:
         2f:a8:0e:16:03:38:62:3b:a7:e7:59:39:77:7c:ef:66:a7:fe:
         1f:c2:fd:a3:17:a8:2a:23:85:03:6a:cd:47:68:34:60:e7:fa:
         6c:45:67:5e:a5:03:e6:e9:d5:3d:f2:aa:94:6b:38:34:6f:23:
         1f:b0:7b:db:18:cb:63:04:de:d7:5f:32:d9:c7:8a:a8:8e:e3:
         af:19:83:39:aa:80:fc:90:55:40:98:2b:f0:98:f3:13:cf:6a:
         4e:a1:4a:f6:dd:21:3d:f9:33:14:d6:27:fb:b7:99:5d:4a:08:
         bd:1b:5f:32:a0:ef:50:d5:7f:ff:db:a3:ae:d2:62:e8:d7:61:
         a7:dd:c0:d6:6a:10:fe:de:ab:83:e6:10:c7:f4:19:dc:1b:ee:
         0c:6b:77:cd:ef:b3:97:3a:ad:d5:48:bf:e9:e0:34:2c:ad:61:
         47:a1:52:b5:e6:da:48:0c:a6:28:3a:41:23:6a:d2:3c:94:f7:
         b1:ad:63:60:c9:28:0f:98:40:68:3b:95:01:13:96:5a:d9:2d:
         87:cf:47:3e
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgISAYVwi7IlHoLoW5S1cwTQlA+SMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjMwMTAyMDMzNDQxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxOWY2NmRiNDAxNTg5MTZhMWRhMzZkMjViOTBmYjFiNDkxNWI4MTE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApEpKmXHShxZ8j7gcFa/06Yr6ZPRG
5kMvwTXh+PRcGTPzehgrke/GARUumRhs7qu24lD0MzqXPsSX9ZvxC2+uo6q9OEa4
mr+l7pli0GqHPlURVw9bPNoBUu3313OGo1dmfGTFJL90h72M0PXzCxHs769XbPL0
cNqmNmzTYBBbJATbh8rYmvx4en6kX0VsL1saBsRWqlKasI+ZyPqFwkGBNiXGWqbb
eQUP6vD4RAU9Lc9ffOY1J6DDJTm1taeE0HHY80VnTGD4K+cktoDHGMAz+CJX801I
RVeWpZlyft3YJg+BvuMQa9qm/TtFW6zTPDAm6aFJxVe+Vz7C8BxEt7mBWQIDAQAB
o4ICkzCCAo8wHQYDVR0OBBYEFBn2bbQBWJFqHaNtJbkPsbSRW4EWMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzI0LzA3NTk2
MS1hMmU4LTRhZTAtYWNiOS03OWI1NmYxYjViMTEvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjQvMDc1OTYx
LWEyZTgtNGFlMC1hY2I5LTc5YjU2ZjFiNWIxMS8xL0dmWnR0QUZZa1dvZG8yMGx1
US14dEpGYmdSWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQAXpp8MA0EAgACMAcDBQMqEUlAMA0GCSqGSIb3
DQEBCwUAA4IBAQAo0tB3bcuf6n+WzJbpAMYbhX4Va0CiLU7Ds2CJzDvHyTxv68Xr
xV46ctuRwh8NpQt5rpfkbvkvqA4WAzhiO6fnWTl3fO9mp/4fwv2jF6gqI4UDas1H
aDRg5/psRWdepQPm6dU98qqUazg0byMfsHvbGMtjBN7XXzLZx4qojuOvGYM5qoD8
kFVAmCvwmPMTz2pOoUr23SE9+TMU1if7t5ldSgi9G18yoO9Q1X//26Ou0mLo12Gn
3cDWahD+3quD5hDH9BncG+4Ma3fN77OXOq3VSL/p4DQsrWFHoVK15tpIDKYoOkEj
atI8lPexrWNgySgPmEBoO5UBE5Za2S2Hz0c+
-----END CERTIFICATE-----