Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/HfJxDAbQ3wvvRtmxy1iv9SD4xYQ.cer
File:                     HfJxDAbQ3wvvRtmxy1iv9SD4xYQ.cer (raw, json)
Hash identifier:          /o3Wo9VKYinEwerEUdWVlDRbwb8Od6opAcRSQ5Ee9SY=
Subject key identifier:   1D:F2:71:0C:06:D0:DF:0B:EF:46:D9:B1:CB:58:AF:F5:20:F8:C5:84
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018570FAFFADC4E1821B543195A41F68A3AC
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/d1/d807d5-ce18-4be5-bd2a-844913f8bba3/1/HfJxDAbQ3wvvRtmxy1iv9SD4xYQ.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/d1/d807d5-ce18-4be5-bd2a-844913f8bba3/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 02 Jan 2023 05:36:15 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    AS: 211265
                          IP: 185.197.150.0/24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:fa:ff:ad:c4:e1:82:1b:54:31:95:a4:1f:68:a3:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 05:36:15 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=1df2710c06d0df0bef46d9b1cb58aff520f8c584
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:0e:b4:9e:a1:c3:ec:9f:2f:74:bb:34:65:50:
                    8b:fa:4e:ec:bf:ab:b9:83:a6:43:ad:f5:eb:9d:77:
                    78:d1:33:ed:33:f4:bf:fe:74:1e:42:e7:a4:d0:ef:
                    34:8f:81:13:81:8e:01:00:1e:2b:c7:d3:4d:14:a0:
                    30:49:ae:27:51:59:4d:cd:b4:0c:d4:da:87:b8:1c:
                    1e:08:63:ea:eb:65:40:22:28:c2:d8:c8:3a:eb:8a:
                    58:3b:56:2c:53:20:dd:53:02:2e:99:9a:83:0e:55:
                    cd:dd:91:27:ea:ff:8c:07:d3:3a:19:b0:38:56:98:
                    24:61:9b:8d:66:3c:c4:d1:cf:98:cb:1e:4a:19:5a:
                    6a:df:54:c6:f1:d1:53:ca:56:12:f3:11:7e:c8:01:
                    6f:e0:40:49:e3:64:71:c4:f3:b1:93:1a:35:3c:55:
                    aa:34:ad:51:d9:5b:d2:87:2d:98:2e:6f:ec:ab:f8:
                    19:92:48:d1:be:c4:be:be:be:d8:f7:0c:74:e2:71:
                    10:a4:7e:7d:17:49:83:38:18:11:7d:56:97:77:62:
                    c3:64:af:b4:57:b3:93:71:80:e8:d6:7a:83:b6:1e:
                    b9:0c:b4:8f:c0:95:b1:2b:3b:58:ca:70:d7:6c:d3:
                    77:e6:fc:66:e3:91:dd:84:7a:58:b9:5b:1a:c9:e6:
                    09:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:F2:71:0C:06:D0:DF:0B:EF:46:D9:B1:CB:58:AF:F5:20:F8:C5:84
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/d807d5-ce18-4be5-bd2a-844913f8bba3/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/d807d5-ce18-4be5-bd2a-844913f8bba3/1/HfJxDAbQ3wvvRtmxy1iv9SD4xYQ.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.197.150.0/24

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  211265

    Signature Algorithm: sha256WithRSAEncryption
         0b:7e:14:0e:32:99:e0:a1:94:60:d8:19:67:eb:5f:a4:02:3f:
         09:fc:56:fb:5b:20:43:d4:26:de:08:3c:c8:6e:14:9a:a8:05:
         a0:9c:ed:7b:36:2c:cc:5d:d5:32:32:38:9f:9f:e7:47:de:ed:
         1f:97:53:d7:f1:47:3b:6d:bd:75:fd:00:e8:7d:a1:64:03:75:
         ef:99:7d:41:4b:fa:16:40:5b:a1:1d:a4:29:e3:1a:d9:0a:c2:
         50:16:85:7e:25:0b:fb:4f:28:ca:a9:66:23:65:48:b2:ce:3c:
         b4:19:bb:2f:b7:e0:0b:65:71:48:6c:b8:b3:09:84:0e:94:5b:
         a6:93:a6:f8:04:ea:54:90:54:dc:50:20:31:07:42:55:49:08:
         5f:34:4c:27:bb:fb:9e:08:1a:e0:6e:96:66:b2:22:7f:45:61:
         bb:cd:3d:06:b6:36:c0:14:91:16:1e:6f:a7:28:62:6d:e3:1d:
         ad:d4:d1:ce:3e:b9:db:a4:e5:ba:64:ab:51:4b:3f:6e:72:66:
         25:02:91:e8:0c:23:19:63:40:15:62:4d:69:99:eb:56:38:79:
         48:a7:a2:ae:d0:88:dd:5d:a4:af:53:84:48:02:13:ee:43:85:
         97:d3:da:13:b1:de:8e:56:26:4b:09:70:af:d1:2c:d2:47:78:
         4b:31:46:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----