Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/LuthaRXW5K05Q06F2g6XKw5oHXU.cer
File:                     LuthaRXW5K05Q06F2g6XKw5oHXU.cer (raw, json)
Hash identifier:          aGdOWpTvVL3EY2FdlI+UCzie6vv5p2NPIG52lp3LboE=
Subject key identifier:   2E:EB:61:69:15:D6:E4:AD:39:43:4E:85:DA:0E:97:2B:0E:68:1D:75
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856FAFC3BC2009B5CE330B228DCFA55D79
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/61/451b53-4152-4ce3-ab98-ebef8597452d/1/LuthaRXW5K05Q06F2g6XKw5oHXU.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/61/451b53-4152-4ce3-ab98-ebef8597452d/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 23:34:28 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 5.57.213.0/24
                          IP: 2a11:4300::/29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:af:c3:bc:20:09:b5:ce:33:0b:22:8d:cf:a5:5d:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 23:34:28 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=2eeb616915d6e4ad39434e85da0e972b0e681d75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:77:6e:11:05:64:04:35:0f:e3:55:e5:a5:8d:
                    c3:26:d6:d4:53:fd:cc:07:fd:ad:5f:53:a8:54:9b:
                    3d:4a:b3:39:5f:b7:1b:76:13:46:4f:36:e4:8e:10:
                    5e:df:cf:f5:41:f1:f2:14:3a:d2:be:e8:7d:67:35:
                    ad:24:0f:65:6c:28:a1:3c:7f:8f:15:eb:eb:1b:56:
                    8f:a5:dc:00:33:2e:f4:d0:74:e4:84:7b:1c:42:8f:
                    2f:a6:b9:68:86:b0:d7:34:26:b3:ec:c3:45:e8:0e:
                    05:0e:18:a1:90:6c:6e:51:ea:fe:dc:6a:97:f5:1d:
                    d5:07:b0:73:e9:02:b7:9c:e6:08:cf:1e:68:ca:e4:
                    c9:fb:eb:3d:7a:f5:56:58:b6:88:4c:7e:de:d8:86:
                    99:d5:07:db:e9:a8:0b:70:8f:68:49:10:77:95:64:
                    a4:4d:59:b7:81:eb:a8:ea:ee:fd:d0:1b:67:67:1b:
                    29:45:da:e4:56:9f:e2:d6:b4:7c:34:26:cc:05:ee:
                    18:32:22:eb:e0:e9:5d:4f:9d:ad:2f:90:6a:da:63:
                    23:3b:c4:72:c5:ce:63:1c:f6:5f:7b:6b:82:d1:c5:
                    ad:5e:3e:dd:e2:80:0c:02:ab:76:ed:6d:52:80:33:
                    94:fb:2e:b8:56:79:03:80:f4:f2:2c:da:f8:ca:4c:
                    c7:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:EB:61:69:15:D6:E4:AD:39:43:4E:85:DA:0E:97:2B:0E:68:1D:75
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/451b53-4152-4ce3-ab98-ebef8597452d/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/451b53-4152-4ce3-ab98-ebef8597452d/1/LuthaRXW5K05Q06F2g6XKw5oHXU.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.57.213.0/24
                IPv6:
                  2a11:4300::/29

    Signature Algorithm: sha256WithRSAEncryption
         8c:0a:40:a4:d0:29:a7:de:dc:5d:77:de:f4:3b:6e:49:5b:17:
         ba:ad:26:4d:bd:a6:be:8f:ac:3e:e3:0c:8f:20:04:a8:37:5a:
         34:79:b9:77:b3:f8:1c:c9:7e:91:9d:f4:05:83:db:e0:1d:c6:
         40:db:81:b0:56:e2:03:65:f9:ea:b3:2e:87:d5:7c:7f:5c:6b:
         fd:89:1a:56:99:b3:c0:c5:f3:ae:aa:6c:ca:de:cd:c6:af:e1:
         09:71:4b:b8:83:c3:3c:24:68:27:35:5e:54:63:bb:14:2a:c1:
         8f:c7:13:11:41:84:9f:cd:c9:e0:e4:bf:cf:b1:d3:db:17:f6:
         cb:67:01:85:18:58:46:76:e5:7c:d1:c4:50:6a:cf:32:d6:a8:
         fe:f0:55:d5:5e:10:4b:19:11:5e:f5:c9:78:4f:47:42:96:ce:
         f9:ca:d5:c1:84:72:61:e0:00:fc:80:e8:49:2a:84:da:bf:4a:
         83:ab:7b:a5:11:81:22:44:02:c8:87:f0:10:47:d6:58:e9:17:
         53:8c:28:8b:71:61:67:5e:54:dc:27:84:2b:77:2a:4a:9d:1d:
         a6:0c:f5:08:41:c9:57:f3:cb:71:d2:23:cb:2e:e4:f0:41:5e:
         9f:5a:6b:4d:e3:9e:73:89:a1:23:03:06:dc:be:07:5f:e9:76:
         06:cb:41:df
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgISAYVvr8O8IAm1zjMLIo3PpV15MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjMwMTAxMjMzNDI4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZWViNjE2OTE1ZDZlNGFkMzk0MzRlODVkYTBlOTcyYjBlNjgxZDc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArXduEQVkBDUP41XlpY3DJtbUU/3M
B/2tX1OoVJs9SrM5X7cbdhNGTzbkjhBe38/1QfHyFDrSvuh9ZzWtJA9lbCihPH+P
FevrG1aPpdwAMy700HTkhHscQo8vprlohrDXNCaz7MNF6A4FDhihkGxuUer+3GqX
9R3VB7Bz6QK3nOYIzx5oyuTJ++s9evVWWLaITH7e2IaZ1Qfb6agLcI9oSRB3lWSk
TVm3geuo6u790BtnZxspRdrkVp/i1rR8NCbMBe4YMiLr4OldT52tL5Bq2mMjO8Ry
xc5jHPZfe2uC0cWtXj7d4oAMAqt27W1SgDOU+y64VnkDgPTyLNr4ykzH4wIDAQAB
o4ICkzCCAo8wHQYDVR0OBBYEFC7rYWkV1uStOUNOhdoOlysOaB11MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzYxLzQ1MWI1
My00MTUyLTRjZTMtYWI5OC1lYmVmODU5NzQ1MmQvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjEvNDUxYjUz
LTQxNTItNGNlMy1hYjk4LWViZWY4NTk3NDUyZC8xL0x1dGhhUlhXNUswNVEwNkYy
ZzZYS3c1b0hYVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQABTnVMA0EAgACMAcDBQMqEUMAMA0GCSqGSIb3
DQEBCwUAA4IBAQCMCkCk0Cmn3txdd970O25JWxe6rSZNvaa+j6w+4wyPIASoN1o0
ebl3s/gcyX6RnfQFg9vgHcZA24GwVuIDZfnqsy6H1Xx/XGv9iRpWmbPAxfOuqmzK
3s3Gr+EJcUu4g8M8JGgnNV5UY7sUKsGPxxMRQYSfzcng5L/PsdPbF/bLZwGFGFhG
duV80cRQas8y1qj+8FXVXhBLGRFe9cl4T0dCls75ytXBhHJh4AD8gOhJKoTav0qD
q3ulEYEiRALIh/AQR9ZY6RdTjCiLcWFnXlTcJ4QrdypKnR2mDPUIQclX88tx0iPL
LuTwQV6fWmtN455ziaEjAwbcvgdf6XYGy0Hf
-----END CERTIFICATE-----