Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/LZJ857pSAwfqFHw08TKH23a5MP4.cer
File:                     LZJ857pSAwfqFHw08TKH23a5MP4.cer (raw, json)
Hash identifier:          orBHO2VC0iQb7TrCVmnJId30sqPJj+SVmliKwv1I93c=
Subject key identifier:   2D:92:7C:E7:BA:52:03:07:EA:14:7C:34:F1:32:87:DB:76:B9:30:FE
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856FAFFA3703A6D248481621523E589C87
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/fc/e44a7a-f569-4d5a-bc8b-c8884fc9c26e/1/LZJ857pSAwfqFHw08TKH23a5MP4.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/fc/e44a7a-f569-4d5a-bc8b-c8884fc9c26e/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 23:34:41 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 213.109.205.0/24
                          IP: 2a11:71c0::/29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:af:fa:37:03:a6:d2:48:48:16:21:52:3e:58:9c:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 23:34:41 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=2d927ce7ba520307ea147c34f13287db76b930fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:fd:ee:5b:66:cd:c0:d9:ca:b4:ea:33:bc:e8:
                    4f:82:e8:36:26:48:77:ce:84:2f:33:e0:05:28:88:
                    ba:22:d2:6d:65:33:07:be:62:51:48:26:41:c0:ff:
                    f5:ce:c9:ca:36:67:44:d3:6e:4c:27:83:11:21:14:
                    5c:e4:57:c3:05:35:b5:99:8d:64:28:94:07:11:9f:
                    db:b6:b9:eb:07:32:57:39:12:de:4c:a1:71:a0:f2:
                    ea:ed:b1:5b:25:80:39:3e:13:44:75:d3:f6:a2:cf:
                    4b:92:87:74:c5:99:4b:22:63:01:3a:48:d6:bd:ba:
                    f5:80:28:35:08:26:bc:08:6a:93:59:be:9f:b4:2c:
                    5b:32:b3:8e:b7:36:45:d6:1c:1f:3f:3e:12:9e:a9:
                    58:b2:68:f0:f2:a1:67:f9:7f:a7:c7:40:72:f6:4a:
                    b0:47:a3:6e:76:63:80:39:f6:b6:4b:75:22:aa:b3:
                    3f:81:d5:af:56:57:29:2e:06:bf:76:51:56:5b:94:
                    3f:92:4f:6c:d1:1e:58:2c:dd:f5:05:a8:f2:1d:9f:
                    cf:7a:d3:fa:90:f1:64:61:a7:8f:5f:a5:3d:56:6c:
                    d1:8a:b6:9e:bf:b9:12:06:c5:59:4b:fb:2b:63:ac:
                    f0:da:1f:76:da:90:f1:8e:20:9d:ea:0a:22:e1:e2:
                    b3:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:92:7C:E7:BA:52:03:07:EA:14:7C:34:F1:32:87:DB:76:B9:30:FE
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/e44a7a-f569-4d5a-bc8b-c8884fc9c26e/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/e44a7a-f569-4d5a-bc8b-c8884fc9c26e/1/LZJ857pSAwfqFHw08TKH23a5MP4.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  213.109.205.0/24
                IPv6:
                  2a11:71c0::/29

    Signature Algorithm: sha256WithRSAEncryption
         44:14:98:ba:2f:67:21:4e:0f:46:79:08:27:aa:bd:18:d1:e5:
         ff:05:ca:1f:4a:00:ac:dc:77:9f:83:55:e6:5a:10:e9:b7:b3:
         a8:c1:ea:01:77:bd:a4:8d:e0:a6:4f:50:84:7c:19:97:30:f4:
         93:38:ec:74:04:60:0f:7e:b0:a3:73:76:0b:6f:8d:75:46:6d:
         b8:67:92:16:4c:f4:f4:49:c1:42:8a:7e:db:d7:b2:68:ad:af:
         dd:ca:b2:f2:38:d0:77:3f:08:56:21:b6:6a:66:73:dd:9c:92:
         9e:b5:0e:f9:d9:aa:0a:53:f3:d9:f5:33:fa:00:c3:99:17:80:
         f2:e0:09:c8:1a:35:b5:79:3b:87:74:f0:2a:62:1b:99:d0:f7:
         d0:fe:90:20:b5:ad:44:de:a9:f5:ff:44:c3:1a:78:1d:7d:2d:
         bc:8f:6b:77:16:87:18:60:e9:05:d4:76:a3:75:83:83:95:a2:
         6c:94:83:e6:99:fb:e5:6b:5c:08:9e:7e:a1:d5:49:e0:29:ff:
         97:ac:f2:a9:80:02:c3:6a:7a:57:84:88:96:9f:71:56:79:7d:
         0f:67:35:d2:2c:3e:24:6f:9c:35:2c:50:0d:a0:d6:c3:e9:b8:
         ef:df:c5:ab:63:1d:d1:0c:c8:8a:4c:9a:01:b5:89:87:6b:93:
         ea:49:92:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 17 10:17:12 2023 by rpki-client on console-ams.rpki-client.org