Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/P-inMgXXZxDnFT_HFG9qYh7nwtU.cer
File:                     P-inMgXXZxDnFT_HFG9qYh7nwtU.cer (raw, json)
Hash identifier:          lhYTiR+PVO/i5yKm9qaPmYkfD/8rziBc1pKA8SNf7zI=
Subject key identifier:   3F:E8:A7:32:05:D7:67:10:E7:15:3F:C7:14:6F:6A:62:1E:E7:C2:D5
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0185708C2442B92B7F043FD07D2BA3FBBEF0
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/6c/9ecaeb-1658-41f2-83c6-4e3ec2655284/1/P-inMgXXZxDnFT_HFG9qYh7nwtU.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/6c/9ecaeb-1658-41f2-83c6-4e3ec2655284/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 02 Jan 2023 03:35:10 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 185.252.213.0/24
                          IP: 2a11:d40::/29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:8c:24:42:b9:2b:7f:04:3f:d0:7d:2b:a3:fb:be:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 03:35:10 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=3fe8a73205d76710e7153fc7146f6a621ee7c2d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:f6:2a:6e:ea:87:fe:a0:ae:f7:84:32:31:3f:
                    31:cd:1b:ce:1c:51:d6:c8:14:a4:c0:58:d2:f8:a9:
                    38:31:a0:75:ba:2f:1a:98:93:78:48:af:85:2e:98:
                    b9:92:81:7a:9b:91:54:92:12:d7:44:41:15:61:44:
                    c9:2c:34:2a:65:40:6c:cc:80:25:9c:44:5e:0e:43:
                    9b:81:be:29:27:55:2c:8f:48:3c:45:02:be:1c:cf:
                    eb:85:94:5f:e3:8a:39:d4:1a:8b:4e:97:84:76:d8:
                    78:0b:44:8d:81:ba:87:bf:68:1d:8e:b0:f8:0f:71:
                    bc:af:89:a6:a9:c3:c8:1c:1f:4e:a8:46:9c:f8:62:
                    da:e3:21:19:6a:08:74:d1:89:75:1d:d2:8b:0b:86:
                    ae:58:16:ee:64:d8:13:36:04:0b:78:01:8a:54:b6:
                    01:3a:43:d4:bc:99:6e:e1:ae:6e:fa:8c:8f:3e:2e:
                    fe:0a:af:49:56:fe:1a:30:af:89:67:5c:55:42:84:
                    30:35:31:c4:32:0e:22:4b:7c:a0:12:56:06:38:b2:
                    ab:9d:a3:3d:a3:ff:d5:18:6f:98:46:25:a0:be:9d:
                    af:f5:b6:46:21:eb:a5:ca:7c:84:4f:50:1f:0e:16:
                    b2:1a:bb:5e:c3:12:d0:25:f1:ab:bf:5a:e3:25:a0:
                    68:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:E8:A7:32:05:D7:67:10:E7:15:3F:C7:14:6F:6A:62:1E:E7:C2:D5
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/9ecaeb-1658-41f2-83c6-4e3ec2655284/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/9ecaeb-1658-41f2-83c6-4e3ec2655284/1/P-inMgXXZxDnFT_HFG9qYh7nwtU.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.252.213.0/24
                IPv6:
                  2a11:d40::/29

    Signature Algorithm: sha256WithRSAEncryption
         60:48:35:32:65:f6:37:ee:b6:49:bf:3c:88:eb:92:1f:77:56:
         eb:03:e7:c6:db:50:af:b1:5b:1b:e1:b4:61:59:63:88:55:af:
         30:fa:2b:41:1c:09:81:06:01:20:dd:1d:15:15:03:58:d0:89:
         bd:62:2e:c2:2a:d2:80:6c:fb:7b:c3:ac:39:f8:e6:dc:0c:57:
         5d:1c:25:23:03:24:b6:63:f0:54:78:7d:1a:ac:87:c6:ad:86:
         bf:95:ef:48:08:3d:c7:29:a7:fa:ef:c0:be:fb:90:c5:40:7c:
         ba:6e:4b:dc:6e:e4:1b:6e:f8:ee:36:a0:8c:69:a6:86:ed:14:
         c6:c2:af:ae:5b:7a:d9:6b:22:11:54:6d:b4:d3:7c:f1:08:7d:
         81:a9:9a:0f:61:3e:dc:e5:bc:23:24:62:23:37:4d:8f:5c:6c:
         fe:ec:f1:72:b7:86:5b:f9:1a:94:77:19:b1:b5:51:54:7f:d7:
         8e:a5:8e:3f:a9:84:ac:8d:31:aa:86:af:b9:de:fc:44:74:ed:
         85:10:7d:78:8b:dd:26:f0:af:34:1b:2a:6b:ec:04:ac:27:d1:
         f3:8b:b1:6b:cc:d9:95:3c:da:bf:94:bc:fe:47:3b:a8:f4:b1:
         bd:65:4a:4c:87:c4:b6:23:57:74:dc:2c:30:6e:cf:82:c8:10:
         9c:00:08:e6
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgISAYVwjCRCuSt/BD/QfSuj+77wMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjMwMTAyMDMzNTEwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZmU4YTczMjA1ZDc2NzEwZTcxNTNmYzcxNDZmNmE2MjFlZTdjMmQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyvYqbuqH/qCu94QyMT8xzRvOHFHW
yBSkwFjS+Kk4MaB1ui8amJN4SK+FLpi5koF6m5FUkhLXREEVYUTJLDQqZUBszIAl
nEReDkObgb4pJ1Usj0g8RQK+HM/rhZRf44o51BqLTpeEdth4C0SNgbqHv2gdjrD4
D3G8r4mmqcPIHB9OqEac+GLa4yEZagh00Yl1HdKLC4auWBbuZNgTNgQLeAGKVLYB
OkPUvJlu4a5u+oyPPi7+Cq9JVv4aMK+JZ1xVQoQwNTHEMg4iS3ygElYGOLKrnaM9
o//VGG+YRiWgvp2v9bZGIeulynyET1AfDhayGrtewxLQJfGrv1rjJaBoEwIDAQAB
o4ICkzCCAo8wHQYDVR0OBBYEFD/opzIF12cQ5xU/xxRvamIe58LVMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzZjLzllY2Fl
Yi0xNjU4LTQxZjItODNjNi00ZTNlYzI2NTUyODQvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNmMvOWVjYWVi
LTE2NTgtNDFmMi04M2M2LTRlM2VjMjY1NTI4NC8xL1AtaW5NZ1hYWnhEbkZUX0hG
RzlxWWg3bnd0VS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQAufzVMA0EAgACMAcDBQMqEQ1AMA0GCSqGSIb3
DQEBCwUAA4IBAQBgSDUyZfY37rZJvzyI65Ifd1brA+fG21CvsVsb4bRhWWOIVa8w
+itBHAmBBgEg3R0VFQNY0Im9Yi7CKtKAbPt7w6w5+ObcDFddHCUjAyS2Y/BUeH0a
rIfGrYa/le9ICD3HKaf678C++5DFQHy6bkvcbuQbbvjuNqCMaaaG7RTGwq+uW3rZ
ayIRVG2003zxCH2BqZoPYT7c5bwjJGIjN02PXGz+7PFyt4Zb+RqUdxmxtVFUf9eO
pY4/qYSsjTGqhq+53vxEdO2FEH14i90m8K80Gypr7ASsJ9Hzi7FrzNmVPNq/lLz+
Rzuo9LG9ZUpMh8S2I1d03Cwwbs+CyBCcAAjm
-----END CERTIFICATE-----
Generated at Wed Oct 4 08:18:27 2023 by rpki-client on console-ams.rpki-client.org