Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/I_8C5j6EZ_IRlDL43IQBM0vDUo0.cer
File:                     I_8C5j6EZ_IRlDL43IQBM0vDUo0.cer (raw, json)
Hash identifier:          u9T90KI8rQhXivBqU1zW+g73ejE4JDRfEAPfz5c35eY=
Subject key identifier:   23:FF:02:E6:3E:84:67:F2:11:94:32:F8:DC:84:01:33:4B:C3:52:8D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856DF77AD9D5D06DE07F399DC206279DD3
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/ae/c343e3-b963-450b-98e5-7ddab80396aa/1/I_8C5j6EZ_IRlDL43IQBM0vDUo0.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/ae/c343e3-b963-450b-98e5-7ddab80396aa/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 15:33:33 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 185.253.4.0/24
                          IP: 2a11:f40::/29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6d:f7:7a:d9:d5:d0:6d:e0:7f:39:9d:c2:06:27:9d:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 15:33:33 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=23ff02e63e8467f2119432f8dc8401334bc3528d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:2f:dd:86:0f:32:f8:37:c1:51:bf:fc:55:ec:
                    a1:90:21:1b:d8:d2:72:83:9a:e1:5a:89:ec:3a:1a:
                    f5:d2:b9:fd:c2:73:ef:e3:32:29:e7:75:50:53:3f:
                    dc:15:a6:92:ee:ae:0d:b8:9f:b2:ce:0e:60:38:ff:
                    ef:48:9e:fe:05:5e:cd:91:ea:5a:c5:b8:c3:0e:77:
                    e1:33:33:98:36:9a:fe:9a:e7:ed:06:2b:2d:5b:07:
                    18:2c:ef:ff:4c:2c:01:05:16:9c:ba:f7:a9:d3:09:
                    50:42:e8:14:66:17:ac:fd:c7:b4:da:2f:83:7f:ef:
                    8f:4d:ae:7d:3f:55:ec:df:83:57:0d:09:81:4b:c3:
                    51:81:8a:bf:a5:6d:74:08:06:2c:2a:8e:ac:9e:eb:
                    95:de:ba:a6:0b:61:3f:30:82:2b:b4:38:15:de:7f:
                    ac:d1:89:3e:0e:c0:68:9e:4b:9c:46:5d:3e:62:b2:
                    0c:8b:3b:96:ff:e1:fc:19:fe:1d:62:c8:d6:04:6d:
                    1e:d0:60:a3:52:9d:27:84:eb:d1:61:9d:c7:e2:8a:
                    21:db:13:bb:e8:ac:30:61:7c:19:bd:25:c3:be:95:
                    ee:fc:1c:c9:12:fe:53:e9:e6:d2:c6:47:16:77:af:
                    e6:7a:cb:ab:1c:bc:95:0d:2b:5d:9c:fc:dc:f1:8b:
                    ac:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:FF:02:E6:3E:84:67:F2:11:94:32:F8:DC:84:01:33:4B:C3:52:8D
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/c343e3-b963-450b-98e5-7ddab80396aa/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/c343e3-b963-450b-98e5-7ddab80396aa/1/I_8C5j6EZ_IRlDL43IQBM0vDUo0.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.253.4.0/24
                IPv6:
                  2a11:f40::/29

    Signature Algorithm: sha256WithRSAEncryption
         9c:f8:5f:93:57:b8:79:98:7c:f1:61:1d:77:d4:f5:69:97:ed:
         32:34:38:e2:08:e4:cd:d5:3f:9f:87:02:a1:40:58:9a:be:ac:
         66:a0:11:d2:c9:d5:6b:04:1b:4c:46:e5:3f:bb:80:8a:5d:46:
         fb:d7:dc:22:34:33:62:b1:fd:47:22:91:4d:e9:64:f0:7a:92:
         41:d1:e6:21:a5:48:e5:5e:ac:5e:f6:0d:72:82:72:61:cf:f0:
         dd:5a:17:73:55:f1:56:67:4a:3a:d9:dd:38:91:7b:6c:8d:bf:
         34:b0:ce:7a:a7:12:19:35:84:b5:82:d0:bf:44:21:54:ac:3d:
         d8:47:05:88:bf:b5:64:97:35:57:c0:25:e5:32:31:14:26:ba:
         41:1c:2b:24:1c:fe:e9:e7:5d:22:2b:77:50:08:5b:63:58:60:
         5a:f3:94:9d:8d:4e:8b:2c:d0:1d:bd:f9:30:d2:08:92:f6:58:
         84:01:5d:1b:85:33:d4:ea:b7:0f:48:46:24:06:de:47:6c:61:
         d9:21:12:5a:28:cc:80:a6:fb:a6:79:e9:71:56:0c:9a:d6:6b:
         76:e8:ce:b9:80:6e:ac:09:82:f2:f7:1f:44:98:95:f4:dc:ff:
         27:cc:9c:d9:3a:eb:dd:f2:05:f6:73:77:5f:bc:2b:40:60:d3:
         c5:00:39:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----