Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/V7gYM_NkvGQltCVbfuM94AciALM.cer
File:                     V7gYM_NkvGQltCVbfuM94AciALM.cer (raw, json)
Hash identifier:          fZIrb77Y8S8XfyxStoMQ8EhZp5TkDw/7A13Y2CHLm5I=
Subject key identifier:   57:B8:18:33:F3:64:BC:64:25:B4:25:5B:7E:E3:3D:E0:07:22:00:B3
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01857168B5905A4492E491E2A345E352D335
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/e5/62acce-e639-46df-be35-42ed5030f13c/1/V7gYM_NkvGQltCVbfuM94AciALM.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/e5/62acce-e639-46df-be35-42ed5030f13c/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 02 Jan 2023 07:36:05 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 194.26.142.0/24
                          IP: 2a11:58c0::/29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:71:68:b5:90:5a:44:92:e4:91:e2:a3:45:e3:52:d3:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 07:36:05 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=57b81833f364bc6425b4255b7ee33de0072200b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:2c:69:e2:40:39:ee:2f:e1:91:ec:80:49:63:
                    74:62:af:86:5e:0b:5e:bb:68:c5:84:3e:99:c6:31:
                    a8:89:61:14:9c:26:70:37:9e:9f:40:34:71:e0:6b:
                    e5:61:50:be:b2:ba:00:d7:ec:69:9b:07:53:3a:31:
                    f9:bc:c2:70:08:7c:92:d3:79:c2:33:cb:60:ab:9d:
                    7f:ab:b0:df:24:1b:63:a8:b5:3a:db:ef:e7:13:a5:
                    ac:32:b3:0a:e8:40:27:b4:0f:43:52:fd:02:01:5f:
                    28:cf:c0:18:74:c5:6d:32:d5:4c:b4:5e:50:06:bc:
                    74:74:29:74:fe:3c:e3:22:36:78:7d:89:30:b1:67:
                    ba:4c:95:43:6d:41:f9:ed:36:0c:c5:d0:1d:de:c3:
                    28:b4:95:f0:f9:2c:05:17:58:d7:ac:66:ac:8e:1c:
                    55:11:6e:7e:dc:45:30:b7:e6:81:d0:37:1d:29:80:
                    54:7f:36:67:74:0d:e2:81:c3:2f:18:c3:b8:95:39:
                    fd:e1:b1:b3:bd:98:88:4b:55:79:67:c5:c5:e1:1c:
                    a4:60:52:50:bf:98:29:37:0b:97:57:61:12:5a:b4:
                    ce:ee:b0:01:15:f2:51:44:1e:c0:c0:58:a0:5c:19:
                    25:28:b3:f6:28:56:72:bb:d4:7f:96:73:19:b0:40:
                    32:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:B8:18:33:F3:64:BC:64:25:B4:25:5B:7E:E3:3D:E0:07:22:00:B3
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/62acce-e639-46df-be35-42ed5030f13c/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/62acce-e639-46df-be35-42ed5030f13c/1/V7gYM_NkvGQltCVbfuM94AciALM.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.26.142.0/24
                IPv6:
                  2a11:58c0::/29

    Signature Algorithm: sha256WithRSAEncryption
         26:65:5f:66:e5:01:f9:b9:da:1a:54:ce:76:57:38:08:5f:95:
         0d:cf:97:21:ed:fb:14:58:df:4a:9c:be:7e:fe:a0:a9:9f:bb:
         ae:4c:31:30:2a:a1:90:9f:62:4c:40:11:67:ea:84:3c:95:fa:
         23:42:49:80:fd:7a:bd:13:9b:a3:f0:9e:25:77:33:0e:73:27:
         7c:0d:5d:24:8a:35:40:a7:d1:c2:d1:a9:1e:57:34:ea:2a:43:
         56:87:de:1e:23:b4:fc:7b:8f:31:c0:6a:60:62:2f:3f:b7:f7:
         67:0a:ae:3d:a3:f9:9f:fb:25:b9:2f:b8:b4:f0:f2:6d:b3:5c:
         02:ea:bc:10:c9:6a:a4:9a:c2:db:bd:76:e0:a4:05:69:6d:d5:
         85:5f:c3:36:88:e4:4b:15:56:1d:10:07:07:11:68:d0:ff:25:
         f3:a3:f3:f4:fc:3a:47:67:aa:6b:c1:a7:30:29:33:c8:bc:35:
         cb:a8:92:43:f4:ba:e4:8d:80:83:6e:36:22:dd:53:b1:43:14:
         9d:c2:ac:f4:0a:44:66:24:e9:f4:7e:1f:ac:7e:88:17:aa:ca:
         ac:8a:6a:9c:c8:a2:d9:7d:d1:56:f5:ca:64:ef:d7:b0:0c:64:
         bd:d0:32:64:ec:5a:5e:89:1d:aa:6e:01:f2:0a:b5:4b:30:79:
         2d:bf:69:fe
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgISAYVxaLWQWkSS5JHio0XjUtM1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjMwMTAyMDczNjA1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1N2I4MTgzM2YzNjRiYzY0MjViNDI1NWI3ZWUzM2RlMDA3MjIwMGIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArSxp4kA57i/hkeyASWN0Yq+GXgte
u2jFhD6ZxjGoiWEUnCZwN56fQDRx4GvlYVC+sroA1+xpmwdTOjH5vMJwCHyS03nC
M8tgq51/q7DfJBtjqLU62+/nE6WsMrMK6EAntA9DUv0CAV8oz8AYdMVtMtVMtF5Q
Brx0dCl0/jzjIjZ4fYkwsWe6TJVDbUH57TYMxdAd3sMotJXw+SwFF1jXrGasjhxV
EW5+3EUwt+aB0DcdKYBUfzZndA3igcMvGMO4lTn94bGzvZiIS1V5Z8XF4RykYFJQ
v5gpNwuXV2ESWrTO7rABFfJRRB7AwFigXBklKLP2KFZyu9R/lnMZsEAykwIDAQAB
o4ICkzCCAo8wHQYDVR0OBBYEFFe4GDPzZLxkJbQlW37jPeAHIgCzMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2U1LzYyYWNj
ZS1lNjM5LTQ2ZGYtYmUzNS00MmVkNTAzMGYxM2MvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTUvNjJhY2Nl
LWU2MzktNDZkZi1iZTM1LTQyZWQ1MDMwZjEzYy8xL1Y3Z1lNX05rdkdRbHRDVmJm
dU05NEFjaUFMTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQAwhqOMA0EAgACMAcDBQMqEVjAMA0GCSqGSIb3
DQEBCwUAA4IBAQAmZV9m5QH5udoaVM52VzgIX5UNz5ch7fsUWN9KnL5+/qCpn7uu
TDEwKqGQn2JMQBFn6oQ8lfojQkmA/Xq9E5uj8J4ldzMOcyd8DV0kijVAp9HC0ake
VzTqKkNWh94eI7T8e48xwGpgYi8/t/dnCq49o/mf+yW5L7i08PJts1wC6rwQyWqk
msLbvXbgpAVpbdWFX8M2iORLFVYdEAcHEWjQ/yXzo/P0/DpHZ6prwacwKTPIvDXL
qJJD9LrkjYCDbjYi3VOxQxSdwqz0CkRmJOn0fh+sfogXqsqsimqcyKLZfdFW9cpk
79ewDGS90DJk7FpeiR2qbgHyCrVLMHktv2n+
-----END CERTIFICATE-----