Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/HVrzriH5fsTsddUahaPhYu16ntc.cer
File:                     HVrzriH5fsTsddUahaPhYu16ntc.cer (raw, json)
Hash identifier:          ti0DCqS1zveSMKBK3w5/FeuqZ9iCj8qdij5QbuMuTY4=
Subject key identifier:   1D:5A:F3:AE:21:F9:7E:C4:EC:75:D5:1A:85:A3:E1:62:ED:7A:9E:D7
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018A268B72746DADD77FBB7954C7C642F041
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/cb/d34acf-3a5f-464f-95ee-908bba12b21a/1/HVrzriH5fsTsddUahaPhYu16ntc.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/cb/d34acf-3a5f-464f-95ee-908bba12b21a/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 24 Aug 2023 07:56:27 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 45.146.160.0/22
                          IP: 2a13:b7c0::/29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:26:8b:72:74:6d:ad:d7:7f:bb:79:54:c7:c6:42:f0:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Aug 24 07:56:27 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=1d5af3ae21f97ec4ec75d51a85a3e162ed7a9ed7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:ef:82:3f:c0:e5:29:85:82:e0:a5:7d:62:22:
                    a8:a6:23:53:ad:fe:a5:21:1c:6c:ef:b7:ac:67:de:
                    48:40:98:03:57:85:62:ba:19:8f:0e:1f:fd:e4:bf:
                    06:02:85:83:7d:0c:67:2b:2e:86:2b:02:e6:12:62:
                    5d:bf:08:35:5a:18:27:f2:e3:f7:0e:fc:77:a1:54:
                    fc:eb:3e:1c:89:78:30:63:df:92:28:a8:99:f4:92:
                    5b:ef:ac:23:41:32:b0:b1:d2:0d:6e:09:41:ce:3d:
                    4c:a9:c2:35:05:f5:0f:b0:10:2f:00:41:7c:e6:78:
                    a4:dd:d8:00:f3:1d:e8:49:d4:0e:30:a0:7d:25:58:
                    2d:c1:20:b6:28:9e:c6:2f:7d:31:a0:a0:19:1b:5e:
                    c3:15:ae:f0:38:15:f9:f5:5e:37:19:49:e0:bc:19:
                    e1:d7:95:b9:1e:79:43:4a:07:dd:30:04:1e:02:85:
                    9f:ac:ca:f3:4f:6d:1d:b7:ed:e0:15:43:4c:8f:09:
                    d5:94:fa:00:40:43:98:a3:84:1f:94:7b:99:34:f2:
                    51:36:e7:c4:1b:de:86:a9:7b:fd:4f:e8:16:34:04:
                    46:13:a5:45:e6:24:45:30:af:f2:8e:88:de:59:6e:
                    05:63:3f:b7:7f:df:73:a7:f7:03:2c:31:fe:06:31:
                    9b:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:5A:F3:AE:21:F9:7E:C4:EC:75:D5:1A:85:A3:E1:62:ED:7A:9E:D7
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/d34acf-3a5f-464f-95ee-908bba12b21a/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/d34acf-3a5f-464f-95ee-908bba12b21a/1/HVrzriH5fsTsddUahaPhYu16ntc.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.146.160.0/22
                IPv6:
                  2a13:b7c0::/29

    Signature Algorithm: sha256WithRSAEncryption
         00:51:81:d2:04:e6:35:45:49:e7:91:98:e3:a1:c0:5f:af:fa:
         aa:1e:d4:3b:09:76:d4:bc:7b:fc:1e:f8:80:b3:f3:c6:2d:82:
         91:a1:1c:e6:bc:a6:ff:83:82:ff:41:a2:9a:e7:3b:b5:8e:0b:
         67:f1:b7:97:b9:f6:b4:e9:7d:fc:c6:a8:26:25:fe:38:1c:ee:
         03:67:a8:62:ed:1f:8c:89:e4:7c:f6:cc:17:ee:65:20:06:ae:
         db:a3:91:cf:7a:a9:67:db:15:c3:f7:51:50:86:9e:07:45:40:
         ba:d3:b2:e8:93:39:49:53:a4:3f:88:1f:99:b5:f9:df:6e:99:
         4b:d3:25:ff:42:69:20:10:c2:4f:5c:bd:2f:f4:1d:dc:33:67:
         dc:0d:29:d4:b2:43:15:2a:48:c2:84:54:f5:14:5a:a0:b4:63:
         4d:f7:bf:c7:5b:89:37:d3:dd:0a:9e:36:f1:cd:2f:be:6f:83:
         72:85:d1:9b:16:1c:65:76:50:14:7e:f8:0a:c1:03:84:a3:34:
         c2:71:1d:b1:b9:03:ae:2f:c8:5e:e4:02:64:98:32:35:be:09:
         a7:c3:bd:f3:4d:cc:52:98:05:90:ea:28:49:71:92:fa:8e:6d:
         2c:66:1b:73:6f:33:a6:26:40:97:b7:02:a2:57:29:5c:d2:68:
         82:d7:ec:c2
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgISAYomi3J0ba3Xf7t5VMfGQvBBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjMwODI0MDc1NjI3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZDVhZjNhZTIxZjk3ZWM0ZWM3NWQ1MWE4NWEzZTE2MmVkN2E5ZWQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApO+CP8DlKYWC4KV9YiKopiNTrf6l
IRxs77esZ95IQJgDV4ViuhmPDh/95L8GAoWDfQxnKy6GKwLmEmJdvwg1Whgn8uP3
Dvx3oVT86z4ciXgwY9+SKKiZ9JJb76wjQTKwsdINbglBzj1MqcI1BfUPsBAvAEF8
5nik3dgA8x3oSdQOMKB9JVgtwSC2KJ7GL30xoKAZG17DFa7wOBX59V43GUngvBnh
15W5HnlDSgfdMAQeAoWfrMrzT20dt+3gFUNMjwnVlPoAQEOYo4QflHuZNPJRNufE
G96GqXv9T+gWNARGE6VF5iRFMK/yjojeWW4FYz+3f99zp/cDLDH+BjGbpQIDAQAB
o4ICkzCCAo8wHQYDVR0OBBYEFB1a864h+X7E7HXVGoWj4WLtep7XMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2NiL2QzNGFj
Zi0zYTVmLTQ2NGYtOTVlZS05MDhiYmExMmIyMWEvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvY2IvZDM0YWNm
LTNhNWYtNDY0Zi05NWVlLTkwOGJiYTEyYjIxYS8xL0hWcnpyaUg1ZnNUc2RkVWFo
YVBoWXUxNm50Yy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQCLZKgMA0EAgACMAcDBQMqE7fAMA0GCSqGSIb3
DQEBCwUAA4IBAQAAUYHSBOY1RUnnkZjjocBfr/qqHtQ7CXbUvHv8HviAs/PGLYKR
oRzmvKb/g4L/QaKa5zu1jgtn8beXufa06X38xqgmJf44HO4DZ6hi7R+MieR89swX
7mUgBq7bo5HPeqln2xXD91FQhp4HRUC607LokzlJU6Q/iB+ZtfnfbplL0yX/Qmkg
EMJPXL0v9B3cM2fcDSnUskMVKkjChFT1FFqgtGNN97/HW4k3090KnjbxzS++b4Ny
hdGbFhxldlAUfvgKwQOEozTCcR2xuQOuL8he5AJkmDI1vgmnw73zTcxSmAWQ6ihJ
cZL6jm0sZhtzbzOmJkCXtwKiVylc0miC1+zC
-----END CERTIFICATE-----