Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Z4HvdEav5wjrYXylA2pj3gtKRYk.cer
File:                     Z4HvdEav5wjrYXylA2pj3gtKRYk.cer (raw, json)
Hash identifier:          NiMkrz8g7EIyH3oUDu4nrvzqFRJ5y18D7Ts+pnelyWE=
Subject key identifier:   67:81:EF:74:46:AF:E7:08:EB:61:7C:A5:03:6A:63:DE:0B:4A:45:89
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856CACB1149B7A23E90E72B143AE76E580
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/90/0f91e7-8d3a-4f2c-a2c1-d1614d419b04/1/Z4HvdEav5wjrYXylA2pj3gtKRYk.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/90/0f91e7-8d3a-4f2c-a2c1-d1614d419b04/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 09:32:14 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 194.62.107.0/24
                          IP: 2a11:5e00::/29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6c:ac:b1:14:9b:7a:23:e9:0e:72:b1:43:ae:76:e5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 09:32:14 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=6781ef7446afe708eb617ca5036a63de0b4a4589
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:d2:ae:44:5d:72:78:fb:e3:9c:87:b0:3b:2d:
                    dd:4d:20:bc:7b:fc:8e:a9:ec:59:66:0d:5a:30:73:
                    8c:46:3f:8d:86:b8:3b:ff:0f:b9:e2:64:df:07:1c:
                    9a:66:34:52:3b:97:4f:bc:2e:96:53:cd:2f:63:48:
                    0f:68:c8:93:61:43:51:58:93:ee:cf:51:e4:1f:89:
                    4d:7b:9d:eb:b9:ff:37:c7:3e:f6:89:7a:f1:bb:46:
                    b8:62:d9:b3:2a:0e:23:ea:44:b8:97:5b:f1:16:5f:
                    50:a7:6a:69:11:3a:0b:bb:4b:35:9b:f1:0d:3d:e1:
                    ef:7d:9e:b9:e0:2e:58:23:cf:b2:5a:14:76:59:d7:
                    ad:6a:ba:26:75:e7:01:27:a6:f1:8c:78:ef:9e:2a:
                    0b:cd:8f:d1:ac:6d:9e:c6:cd:f8:4a:38:ab:93:44:
                    a9:e6:e2:3f:67:9e:19:0c:6b:74:75:d4:48:89:60:
                    01:26:0c:24:37:08:61:80:21:4c:1c:9c:f2:39:60:
                    8e:9a:91:ca:fe:81:7d:6e:8b:f1:b1:da:bf:cd:af:
                    4e:eb:20:9c:6d:20:63:e3:51:d1:e3:6f:ed:f2:2d:
                    55:e7:63:36:16:32:d4:74:10:6f:5a:0d:83:31:c2:
                    b4:b2:d7:70:6b:c0:fb:1d:42:ad:f2:c8:31:4f:b4:
                    14:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:81:EF:74:46:AF:E7:08:EB:61:7C:A5:03:6A:63:DE:0B:4A:45:89
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/0f91e7-8d3a-4f2c-a2c1-d1614d419b04/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/0f91e7-8d3a-4f2c-a2c1-d1614d419b04/1/Z4HvdEav5wjrYXylA2pj3gtKRYk.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.62.107.0/24
                IPv6:
                  2a11:5e00::/29

    Signature Algorithm: sha256WithRSAEncryption
         66:50:38:99:47:ed:0e:d1:18:7a:8b:0e:86:2c:f0:8a:f8:31:
         5b:09:9c:66:6d:f4:1e:dd:6e:05:e5:b9:2b:a2:19:e6:56:b2:
         13:c5:3c:98:5d:d4:dd:d7:93:2c:a7:10:5e:98:cf:16:c3:08:
         c9:45:d6:70:53:aa:b4:02:7d:a5:72:d7:1e:f9:9e:9a:4a:0e:
         f8:63:c2:6f:d4:00:ad:4c:9a:c7:51:c1:9f:24:3f:6b:f7:f1:
         36:af:ff:02:58:8e:23:8f:6f:9d:df:4e:36:f3:40:8d:a5:78:
         a5:80:0b:ca:60:15:1f:1c:ad:c0:9a:66:1d:cd:2e:32:ed:6b:
         d3:39:57:8b:ad:df:04:46:bf:93:af:c5:2a:31:0c:b0:20:57:
         80:7c:bc:38:41:cf:94:ee:a4:ee:d6:7a:4f:86:49:4c:a9:c3:
         1a:96:a4:4f:f7:28:0e:97:70:5e:f8:83:c9:b1:7e:c8:6e:bc:
         63:8c:c1:0e:d1:7e:1c:00:66:32:e6:47:25:86:c9:c7:83:cb:
         e9:29:54:a0:0d:7d:2b:f4:e3:95:b1:68:56:32:69:2a:8b:09:
         d1:09:2e:53:0f:09:34:e0:78:9d:17:68:3c:45:c1:f1:c3:b4:
         99:6f:61:c5:30:62:72:d4:78:96:1f:fb:93:f8:91:42:db:73:
         3f:5e:6b:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----