Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Y3OXW9Cz8yn_lU-VHP_n2GfCyjY.cer
File:                     Y3OXW9Cz8yn_lU-VHP_n2GfCyjY.cer (raw, json)
Hash identifier:          IxxyUSofjp7vOTIm9m39utKC5s18/FKhP/sOui0xhcs=
Subject key identifier:   63:73:97:5B:D0:B3:F3:29:FF:95:4F:95:1C:FF:E7:D8:67:C2:CA:36
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01864A4D9B7AC365BC09379603A2A4B8D6C1
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/ec/ffec15-7525-4b11-9ced-aabe41da64d9/1/Y3OXW9Cz8yn_lU-VHP_n2GfCyjY.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/ec/ffec15-7525-4b11-9ced-aabe41da64d9/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 13 Feb 2023 10:24:05 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 212.23.210.0/24
                          IP: 2a13:b900::/29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:4a:4d:9b:7a:c3:65:bc:09:37:96:03:a2:a4:b8:d6:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Feb 13 10:24:05 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=6373975bd0b3f329ff954f951cffe7d867c2ca36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:58:e1:56:bd:83:cd:05:c5:ed:e1:25:97:2f:
                    49:81:09:d3:13:98:f5:3c:d2:14:d8:3f:47:8a:6b:
                    f4:50:9a:59:28:71:cc:42:4c:34:cf:b4:28:91:22:
                    55:4c:91:a4:3d:41:85:23:17:fb:a5:8e:70:15:c5:
                    4e:ab:9c:3b:34:10:7a:a7:2e:73:7d:cd:13:df:af:
                    c3:c3:92:9d:f7:9b:19:22:6d:8c:2f:1b:c4:9f:46:
                    ed:29:51:d1:3e:6c:e1:de:cf:e9:85:eb:b6:bc:d9:
                    a6:02:06:41:1a:fb:ed:04:2d:f3:3f:12:dd:88:4c:
                    3c:6e:e1:e6:0e:de:41:49:b4:4e:61:c3:ca:cd:3f:
                    c5:88:f0:a4:ad:1d:a5:41:34:92:15:fc:94:14:98:
                    58:ca:b0:cd:03:bb:06:e8:10:a0:3e:9e:58:d9:72:
                    e0:d2:44:7c:3c:b4:c8:e4:69:c0:fd:34:63:a2:e4:
                    ac:70:ae:46:91:cf:06:7f:17:ff:20:d1:0f:5a:84:
                    a8:ea:07:a9:45:cb:58:76:8c:30:ac:0b:c5:92:16:
                    6c:14:2c:c4:22:eb:1a:94:24:a8:d6:dc:34:7f:91:
                    b7:be:21:ee:6b:2e:d6:83:96:04:cf:5f:de:b3:e0:
                    c5:95:7f:5f:b3:e7:65:50:77:95:a7:6d:fd:80:cb:
                    15:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:73:97:5B:D0:B3:F3:29:FF:95:4F:95:1C:FF:E7:D8:67:C2:CA:36
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/ffec15-7525-4b11-9ced-aabe41da64d9/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/ffec15-7525-4b11-9ced-aabe41da64d9/1/Y3OXW9Cz8yn_lU-VHP_n2GfCyjY.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.23.210.0/24
                IPv6:
                  2a13:b900::/29

    Signature Algorithm: sha256WithRSAEncryption
         72:e6:6d:7e:31:0d:3f:36:a4:85:f7:41:ee:65:61:7f:8b:dd:
         5d:bd:30:27:d8:33:7b:9f:f5:0a:43:b7:cb:e9:d3:04:a3:11:
         83:fd:e2:8a:ac:a7:f9:9f:02:ca:7f:9c:c3:77:92:fd:29:62:
         23:44:f0:07:f4:be:5c:ea:6d:21:91:58:6c:75:2d:d2:e6:fc:
         1f:f0:06:d2:b2:da:46:c7:e0:96:60:51:71:98:c1:1b:70:df:
         1c:de:30:c6:46:b1:1e:12:74:fe:4b:f0:b4:c7:58:b3:94:91:
         f7:a0:c2:41:bb:63:ec:7a:8f:f6:84:ed:ba:92:db:d0:17:9b:
         71:e3:2c:b9:4d:65:25:9c:a8:35:f9:7e:05:fb:93:3c:b7:0d:
         ef:6d:53:c0:54:da:b7:09:8a:d0:ca:5a:e5:a3:fa:b6:73:d9:
         e5:bb:76:37:61:c1:11:e6:6c:52:d7:02:75:49:51:4a:32:30:
         41:7b:fd:26:a1:61:a0:be:90:6a:15:f9:74:d0:d8:10:fc:49:
         54:a6:35:23:f0:fc:78:39:ab:23:91:0a:ba:02:52:71:af:3a:
         11:8d:52:de:e4:ee:61:1c:02:28:31:66:ab:87:8d:7b:d9:e0:
         ca:b9:2b:e4:98:f3:29:28:f9:99:7d:02:9e:ed:31:95:04:58:
         fd:2b:1f:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----