Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/IReZ-YhbZUuQCfRMgFkvGEgsdfw.cer
File:                     IReZ-YhbZUuQCfRMgFkvGEgsdfw.cer (raw, json)
Hash identifier:          qp3KYcx22xd60xfIowa/yWvsOjsaT2kBkQW/j0vRpf8=
Subject key identifier:   21:17:99:F9:88:5B:65:4B:90:09:F4:4C:80:59:2F:18:48:2C:75:FC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856AF536C77B169A9BE1FE6949D91FAB7A
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/33/8729cd-b01c-4994-ab11-f2b305918e61/1/IReZ-YhbZUuQCfRMgFkvGEgsdfw.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/33/8729cd-b01c-4994-ab11-f2b305918e61/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 01:32:13 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 194.62.19.0/24
                          IP: 2a11:3e00::/29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6a:f5:36:c7:7b:16:9a:9b:e1:fe:69:49:d9:1f:ab:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 01:32:13 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=211799f9885b654b9009f44c80592f18482c75fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:54:51:a7:3c:1a:01:d1:d0:40:7f:fd:81:07:
                    6b:df:79:f6:93:43:a4:00:a8:b4:90:1d:b5:64:ac:
                    11:ec:ae:63:6f:78:74:bc:bf:90:06:c9:cb:3e:7b:
                    b5:7f:f6:8a:89:20:61:c5:53:9c:8f:c6:47:0e:82:
                    53:70:26:07:79:44:78:aa:1e:5f:5f:00:67:6f:84:
                    55:27:bd:e2:32:9d:99:35:6c:ba:de:d8:b9:4c:6d:
                    fa:12:24:29:83:a1:33:e8:ba:b5:13:e1:bb:6a:cd:
                    a2:1c:02:4e:cc:27:86:95:03:60:dc:81:f9:71:2c:
                    f0:ae:21:40:9d:a3:d7:a7:17:fb:b4:89:8d:27:60:
                    f5:3e:fd:35:d0:8e:53:2c:8b:32:b2:e6:98:22:12:
                    5c:27:14:21:61:04:cc:7a:c0:07:25:9b:21:48:6f:
                    68:7f:a4:0e:1b:ce:58:d0:e4:b8:9e:f6:70:12:e4:
                    6b:a9:27:0e:dc:75:83:d4:7a:42:d7:86:80:ad:e2:
                    83:ca:b8:d3:69:e2:54:8f:20:5a:db:84:84:c8:0b:
                    b6:25:19:3e:a6:07:e4:2a:dd:10:89:90:9b:44:9f:
                    6a:5a:a7:eb:a4:1d:d5:4c:88:6c:47:9b:c1:a1:c8:
                    52:c8:88:ed:4f:54:9c:75:92:0d:71:18:70:d9:34:
                    3b:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:17:99:F9:88:5B:65:4B:90:09:F4:4C:80:59:2F:18:48:2C:75:FC
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/8729cd-b01c-4994-ab11-f2b305918e61/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/8729cd-b01c-4994-ab11-f2b305918e61/1/IReZ-YhbZUuQCfRMgFkvGEgsdfw.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.62.19.0/24
                IPv6:
                  2a11:3e00::/29

    Signature Algorithm: sha256WithRSAEncryption
         37:5a:00:ff:51:91:f8:6e:03:7a:58:84:c6:70:f8:dd:83:dd:
         62:b9:1d:97:b6:f8:6f:b5:65:e7:d1:e9:2a:2a:86:15:86:7e:
         db:c7:d6:a1:26:60:5a:69:1b:2c:58:b0:b7:18:7b:04:14:e1:
         34:75:8c:aa:00:06:e9:89:3d:5b:d0:60:f9:ba:e0:0f:99:e6:
         3d:4c:96:d5:43:f9:3d:22:4e:8a:cd:e7:43:11:e6:98:d7:53:
         13:ea:a9:eb:a4:8a:a0:11:87:72:7b:3f:a6:08:84:f6:9d:d5:
         d3:b7:f0:e1:1a:a9:a7:b1:66:25:a8:66:0a:3c:b6:65:1b:45:
         28:fe:37:a5:53:9c:ad:7f:60:21:6d:65:66:b0:33:dd:3a:6f:
         43:3a:62:34:47:c3:20:bc:31:3a:cf:e8:b9:41:ea:33:b5:b1:
         18:d5:e8:0d:68:ac:1d:a3:d5:83:bf:0b:11:ed:55:ba:b7:04:
         0a:19:fc:1a:dc:d4:2f:71:68:80:ca:15:94:42:dc:7c:b2:c4:
         6b:56:62:a9:39:c6:32:46:18:9a:90:4d:7a:aa:1a:74:eb:e0:
         c1:57:10:b8:71:7b:9f:f1:98:04:b0:94:31:51:78:be:b2:7b:
         8b:71:49:ac:f1:ca:a7:14:8a:f0:50:a5:62:0f:d9:3d:a6:73:
         dd:67:d1:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:04:23 2023 by rpki-client on console-ams.rpki-client.org