Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/HAa2lWCp0xRian_piP3SF0dL-G0.cer
File:                     HAa2lWCp0xRian_piP3SF0dL-G0.cer (raw, json)
Hash identifier:          2iohu/C4YFc+vuaxOjrkkptiB70zn48oaqfB97pdTXc=
Subject key identifier:   1C:06:B6:95:60:A9:D3:14:62:6A:7F:E9:88:FD:D2:17:47:4B:F8:6D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856AF4D430D0B6A9D65279218C6C4E812C
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/5d/1c5284-577a-441d-ad05-5153ff6660f5/1/HAa2lWCp0xRian_piP3SF0dL-G0.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/5d/1c5284-577a-441d-ad05-5153ff6660f5/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 01:31:48 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 185.182.105.0/24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6a:f4:d4:30:d0:b6:a9:d6:52:79:21:8c:6c:4e:81:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 01:31:48 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=1c06b69560a9d314626a7fe988fdd217474bf86d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:22:a2:2c:1b:da:3a:29:94:91:d1:a3:6e:f8:
                    90:72:39:16:27:c2:2f:69:ef:96:dd:34:b1:92:94:
                    dd:83:d5:ef:53:03:a7:45:34:41:20:b4:4e:71:db:
                    7e:5d:57:70:b6:af:82:07:59:52:62:c7:0c:ea:21:
                    5f:0d:ea:81:35:8c:7b:e6:79:76:47:32:5e:47:e1:
                    b3:f0:7c:ee:4b:3c:f5:36:8a:2a:a1:3c:3f:e0:e4:
                    63:71:b7:01:57:b0:f8:38:db:24:b9:c1:93:b8:b7:
                    ad:fc:32:c5:7c:10:55:12:fd:46:aa:d7:34:03:52:
                    b1:50:ce:8e:d0:6b:89:5e:c3:51:99:56:74:95:e0:
                    1b:b1:ef:ff:8a:9e:40:b7:fc:ed:47:38:cf:f7:8c:
                    49:c9:8b:7d:74:b8:99:36:72:a8:2c:eb:2f:53:23:
                    4d:de:08:24:cf:ed:31:7a:15:39:28:20:b3:d7:23:
                    94:8b:10:5e:14:ff:50:eb:85:49:56:fb:e7:94:b6:
                    0c:c1:49:b4:c1:d0:6e:72:e3:e4:41:4d:aa:6f:0f:
                    dd:bb:a6:f6:63:3c:a6:37:ff:23:e2:b9:ed:f7:7a:
                    ad:2c:56:28:1a:b6:46:72:aa:6e:c2:81:64:49:dd:
                    0b:5c:ca:69:9e:88:cc:4c:32:96:ea:9a:b6:ce:7f:
                    d2:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:06:B6:95:60:A9:D3:14:62:6A:7F:E9:88:FD:D2:17:47:4B:F8:6D
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/1c5284-577a-441d-ad05-5153ff6660f5/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/1c5284-577a-441d-ad05-5153ff6660f5/1/HAa2lWCp0xRian_piP3SF0dL-G0.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.182.105.0/24

    Signature Algorithm: sha256WithRSAEncryption
         27:62:24:01:12:16:e3:64:49:b3:68:1e:a7:d8:14:84:a1:e0:
         52:35:6e:ca:da:19:50:9f:4d:5a:da:a6:4c:fc:1d:76:62:4b:
         f6:05:5d:5d:79:36:ab:10:04:f8:bc:b7:fb:b4:8e:07:42:24:
         96:6f:5c:a4:90:15:2a:a4:8b:6f:3c:5d:db:c8:6b:54:70:73:
         cc:3c:75:7c:cb:10:46:a2:aa:60:57:70:47:b8:93:ff:85:99:
         1f:a8:3d:0d:21:ff:b9:e4:6e:5b:fa:7e:a3:f3:1d:c9:92:3d:
         d2:aa:fe:b6:36:e4:ab:c1:69:95:02:38:33:d2:28:38:a0:5d:
         66:ad:c4:43:ba:b6:f4:0b:39:0c:63:64:8a:07:da:ee:27:f5:
         1c:45:7b:f0:9f:01:f6:ac:10:8f:5f:70:50:55:b3:64:23:6a:
         03:14:ad:5d:55:91:5d:c2:64:01:c8:68:00:00:da:d5:f7:4c:
         df:6a:d0:40:27:e5:58:63:87:67:b6:d2:81:9f:67:67:5e:6e:
         49:f7:01:4a:23:99:01:38:f0:e5:11:6b:1e:e5:39:3c:56:67:
         6a:7c:3a:70:91:08:31:53:e4:ec:7c:2f:2c:e5:a6:a1:26:8c:
         c0:26:82:d4:c5:46:01:94:74:56:2e:5e:bc:01:bf:b5:c9:4d:
         7b:8b:12:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:04:19 2023 by rpki-client on console-ams.rpki-client.org