Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/RHTPPi-okrX90_MNyCde4QYuHQY.cer
File:                     RHTPPi-okrX90_MNyCde4QYuHQY.cer (raw, json)
Hash identifier:          /Iec+sfgnmhf3QRDA3hGyiH4LBijp9RlkJ4lfb52pWo=
Subject key identifier:   44:74:CF:3E:2F:A8:92:B5:FD:D3:F3:0D:C8:27:5E:E1:06:2E:1D:06
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018ABC44D9E485D6AACD82D5A6326D61A028
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/d3/e20ba1-6ae8-4b43-a709-7545c04e1578/1/RHTPPi-okrX90_MNyCde4QYuHQY.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/d3/e20ba1-6ae8-4b43-a709-7545c04e1578/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 22 Sep 2023 09:42:23 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 185.127.164.0/22
                          IP: 2a10:b140::/32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:bc:44:d9:e4:85:d6:aa:cd:82:d5:a6:32:6d:61:a0:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Sep 22 09:42:23 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=4474cf3e2fa892b5fdd3f30dc8275ee1062e1d06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:c0:76:33:6e:ed:83:9b:20:e2:b3:09:73:f7:
                    e5:d1:72:39:28:4f:a5:8c:93:29:b3:cf:f0:0b:20:
                    96:87:35:87:49:7f:f8:28:ae:3f:6c:43:43:58:73:
                    22:23:64:ed:58:01:b0:44:0a:e4:f5:c6:93:e4:a6:
                    eb:89:7f:10:8f:77:f7:9f:39:2d:1a:84:59:c0:b9:
                    b5:71:10:e2:8c:f0:c8:e0:4a:8d:be:50:39:47:7c:
                    1a:fb:b0:95:17:25:9a:6f:54:01:ac:00:81:a8:ca:
                    83:8c:5b:fa:b9:3c:a5:38:79:01:eb:33:58:fb:24:
                    1e:19:50:62:c2:4c:52:f9:09:c6:aa:e7:26:1d:32:
                    f9:d0:82:e8:c8:59:54:b7:a0:b2:5a:25:1e:08:77:
                    c4:84:a8:97:ad:4c:2c:75:6f:78:42:97:d5:05:cc:
                    98:4d:61:03:42:37:06:2c:a1:a2:a0:6b:0c:02:cb:
                    2f:44:cb:46:aa:5a:af:68:ea:01:71:d2:f7:44:51:
                    ef:9a:f8:f5:c2:67:a3:a8:f9:c8:e4:ba:86:51:01:
                    d4:87:eb:3a:7c:a7:fd:94:d7:6a:1a:84:89:29:0d:
                    c4:06:99:6a:bb:c0:7f:0f:0d:da:26:b2:71:d1:2a:
                    a1:b5:f7:fc:94:c4:b9:cb:bf:2e:a3:da:2d:6a:6a:
                    5b:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:74:CF:3E:2F:A8:92:B5:FD:D3:F3:0D:C8:27:5E:E1:06:2E:1D:06
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/e20ba1-6ae8-4b43-a709-7545c04e1578/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/e20ba1-6ae8-4b43-a709-7545c04e1578/1/RHTPPi-okrX90_MNyCde4QYuHQY.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.127.164.0/22
                IPv6:
                  2a10:b140::/32

    Signature Algorithm: sha256WithRSAEncryption
         03:95:56:b5:9c:ef:6a:a5:fb:65:c2:9e:4c:5d:43:94:f6:6c:
         25:ea:24:9f:bc:c9:b2:50:63:1c:10:12:93:f8:03:89:ba:7f:
         ca:36:39:f5:af:82:32:0e:25:d7:58:f0:67:cd:95:e3:0b:9e:
         ed:31:58:2a:29:59:e9:c8:a3:87:31:d2:86:55:93:35:33:3d:
         b9:32:c0:70:37:87:d9:ea:23:b3:69:39:69:6e:a3:cc:a3:3b:
         5f:07:21:7f:29:92:0a:ea:69:46:d3:f2:be:21:55:bb:9c:d1:
         aa:ee:46:a3:01:e2:ff:b3:60:7f:07:07:ed:39:2e:a0:4b:c5:
         ad:9a:6a:f2:90:8d:1d:63:96:73:31:fa:a2:36:f7:37:98:6e:
         2d:30:f4:43:3c:1f:f0:2d:51:da:0e:4f:52:6e:6f:6b:12:f1:
         3e:55:4c:9b:f8:82:94:c5:dd:b1:30:8b:22:01:f0:3a:7e:e9:
         e9:91:a7:c1:c4:c7:82:16:33:1f:4e:8b:23:cd:b8:2d:e3:12:
         38:6d:03:32:89:81:7c:7c:f4:b4:f5:d6:8f:b0:64:c0:47:35:
         a0:d4:ab:c9:db:8d:ab:d4:7c:46:5e:22:38:be:4c:e3:a7:d9:
         78:d6:2e:9f:dc:8d:56:63:d9:89:ba:5f:13:6b:0f:d2:1a:13:
         b0:4b:56:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----