Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/amOs49Gr9p9bAhSWjXfp_7zWCW8.cer
File:                     amOs49Gr9p9bAhSWjXfp_7zWCW8.cer (raw, json)
Hash identifier:          yCZaRq33hZw7mcNVeHvvbv9DTQao4Yt1dbqIQjvRkgM=
Subject key identifier:   6A:63:AC:E3:D1:AB:F6:9F:5B:02:14:96:8D:77:E9:FF:BC:D6:09:6F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018571689B356644BA1C2DAD5F20ACBD4CF4
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/bc/f0e1c4-c25d-4a8a-982b-5a87cfda3891/1/amOs49Gr9p9bAhSWjXfp_7zWCW8.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/bc/f0e1c4-c25d-4a8a-982b-5a87cfda3891/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 02 Jan 2023 07:35:59 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 146.19.225.0/24
                          IP: 2a12:780::/29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:71:68:9b:35:66:44:ba:1c:2d:ad:5f:20:ac:bd:4c:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 07:35:59 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=6a63ace3d1abf69f5b0214968d77e9ffbcd6096f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:c3:63:f9:64:c5:8b:04:7a:42:26:95:66:e2:
                    29:61:d2:df:1f:58:0d:48:d9:ab:b0:1b:0e:16:c4:
                    c7:70:ca:4d:ec:e0:83:f2:0f:6a:3b:cd:cb:8c:10:
                    3b:5d:93:f2:c2:4c:c3:34:cb:5d:75:c8:90:d3:82:
                    c8:84:0b:aa:49:aa:cc:53:bd:56:24:ab:96:7c:a1:
                    e3:7b:0a:34:28:99:ae:c2:3d:d5:52:82:28:1a:77:
                    c3:5c:2d:d8:43:cc:7d:f9:41:46:ea:ab:8b:ad:fc:
                    65:d1:ca:7c:58:b0:2e:68:3b:4c:70:8f:6e:a4:99:
                    c9:32:dc:38:1a:9a:3c:24:5a:c8:33:60:6d:d6:ea:
                    fa:6c:17:7a:f0:0a:d0:1e:b9:7f:4c:c8:98:0d:f6:
                    a6:b4:3b:fb:a4:25:89:d5:ea:15:58:f6:1d:7f:bd:
                    22:c4:f7:ff:e6:7e:44:48:4a:4c:de:7c:85:11:df:
                    87:c5:f2:d4:f5:82:6e:3b:27:fb:64:ff:72:e8:98:
                    8a:bb:39:f2:77:ce:7a:36:fa:cb:08:7a:ed:3e:f4:
                    b7:48:3d:af:45:87:82:12:8c:6b:4b:e3:eb:c0:bb:
                    cd:6f:ca:d8:53:06:9a:51:b9:f4:42:fb:ef:b2:32:
                    42:32:70:a7:7d:df:76:88:6f:f8:e8:0f:7f:ce:63:
                    f4:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:63:AC:E3:D1:AB:F6:9F:5B:02:14:96:8D:77:E9:FF:BC:D6:09:6F
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/f0e1c4-c25d-4a8a-982b-5a87cfda3891/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/f0e1c4-c25d-4a8a-982b-5a87cfda3891/1/amOs49Gr9p9bAhSWjXfp_7zWCW8.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.19.225.0/24
                IPv6:
                  2a12:780::/29

    Signature Algorithm: sha256WithRSAEncryption
         33:1a:11:06:71:51:7b:b2:d8:20:67:fc:c1:78:a2:a9:37:42:
         66:1a:db:21:22:39:c7:47:b1:f9:08:a5:36:12:ae:b6:61:2e:
         0b:ff:49:1f:14:7e:1c:10:85:5f:8b:6b:7d:64:0e:65:f4:97:
         4b:e9:ec:a5:e4:42:13:07:b9:20:73:48:f4:dc:d8:67:ce:49:
         f5:6f:d7:a4:52:9f:e1:5d:a6:bb:5b:bf:34:06:6f:02:08:78:
         2f:72:d7:63:9e:9e:8d:dd:50:01:b7:7d:28:4f:36:c8:a8:05:
         b4:bc:0d:4c:2d:3e:1f:37:62:45:e0:3a:48:8c:28:61:b0:26:
         05:32:29:b3:e1:cd:62:ac:08:f3:33:e9:88:ce:b8:da:a8:56:
         21:b5:85:dc:a3:db:cb:50:24:5f:8d:d5:00:cd:59:12:26:59:
         96:b8:a4:a8:3d:6b:bf:98:2a:86:f7:7e:be:11:43:7d:a4:ab:
         7a:54:56:5f:aa:d1:8b:27:20:fe:79:fc:b1:fd:c6:ae:a0:a9:
         43:72:bd:9f:d7:4e:ce:33:41:34:60:70:48:e4:a4:17:96:48:
         6f:da:2a:3d:79:84:68:8a:53:82:af:71:42:91:98:d8:5b:17:
         2c:95:a8:da:6a:39:f9:0e:8d:f2:f2:da:4b:72:b4:f9:0e:1a:
         1d:1f:5a:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 20 12:46:34 2023 by rpki-client on console-ams.rpki-client.org