Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e04fYDDUc1kJ7H73w6Vkn3YsSe8.cer
File:                     e04fYDDUc1kJ7H73w6Vkn3YsSe8.cer (raw, json)
Hash identifier:          TN8zCy77++uKfPqbSjBsUov5l/iseFd1jSl+P4Rwy7Q=
Subject key identifier:   7B:4E:1F:60:30:D4:73:59:09:EC:7E:F7:C3:A5:64:9F:76:2C:49:EF
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018571D6DEAB43DEBF4FE2257FBE1F2CFDCA
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/7a/ee92c8-eb89-4e24-8083-c07b0d796923/1/e04fYDDUc1kJ7H73w6Vkn3YsSe8.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/7a/ee92c8-eb89-4e24-8083-c07b0d796923/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 02 Jan 2023 09:36:25 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 185.83.231.0/24
                          IP: 2a07:dd80::/29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:71:d6:de:ab:43:de:bf:4f:e2:25:7f:be:1f:2c:fd:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 09:36:25 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=7b4e1f6030d4735909ec7ef7c3a5649f762c49ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:dc:b9:3a:ef:e2:36:a6:5d:53:43:dd:1f:c6:
                    fd:02:20:ae:f3:4d:58:53:04:fd:a6:95:92:3a:b2:
                    8f:1e:df:17:f6:c5:87:53:4f:21:21:70:ef:ba:09:
                    2a:8f:53:f3:61:9b:49:47:e6:2e:33:51:80:9d:63:
                    86:5f:09:9d:dc:40:00:be:0c:a3:9c:3d:fc:8a:80:
                    5d:aa:89:2d:30:2c:eb:ce:7d:26:ff:d9:96:81:b7:
                    5c:a6:35:3b:4f:25:6d:c7:e1:73:75:e8:e9:c2:8a:
                    b0:fe:fa:d4:3d:6f:7e:fa:94:55:7e:f6:f7:28:b4:
                    f3:67:7e:78:6c:0e:f6:76:a9:c9:b4:8b:05:36:4b:
                    dd:87:f8:fa:ce:dd:32:87:ac:ab:bf:ac:33:ef:0f:
                    51:34:b3:b1:35:17:d3:f8:2c:70:8f:be:99:b3:79:
                    74:f6:d9:57:e7:ac:24:dd:71:78:7e:ac:70:4a:37:
                    72:84:8e:d8:c5:f4:2c:a0:a9:f8:ea:ec:63:26:8d:
                    16:b1:b1:73:3c:bb:3e:c3:3b:01:33:31:3d:1b:47:
                    ca:ec:9d:ba:51:9b:70:48:4d:f0:b1:19:49:3b:ae:
                    9e:1b:4c:76:39:e2:06:51:97:b1:9e:21:cf:7f:1a:
                    fb:d0:5a:9e:c2:b0:09:32:b7:8f:d7:94:47:90:5f:
                    7c:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:4E:1F:60:30:D4:73:59:09:EC:7E:F7:C3:A5:64:9F:76:2C:49:EF
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/ee92c8-eb89-4e24-8083-c07b0d796923/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/ee92c8-eb89-4e24-8083-c07b0d796923/1/e04fYDDUc1kJ7H73w6Vkn3YsSe8.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.83.231.0/24
                IPv6:
                  2a07:dd80::/29

    Signature Algorithm: sha256WithRSAEncryption
         25:0c:89:ad:27:1c:00:1e:43:42:9a:df:27:49:95:fa:7e:85:
         94:79:d1:61:a4:e4:a1:68:4b:a7:a9:b5:90:1d:dd:36:4f:9c:
         11:21:d3:4e:a6:a9:87:0f:38:92:22:d8:f4:20:53:b2:da:00:
         c5:2b:09:fe:d6:c9:cb:c0:58:88:eb:d4:84:0b:7d:5a:56:54:
         cc:43:46:50:23:a2:71:54:7c:e3:3c:8d:7d:64:96:83:a4:a8:
         e9:2b:b9:67:b8:0e:63:b0:cf:11:e7:71:a3:4a:34:38:df:cd:
         72:21:2d:58:71:9e:cb:59:b6:99:76:24:fc:20:fb:02:f2:08:
         53:47:9d:6e:7c:94:19:07:81:d5:be:23:f7:e8:8e:85:fa:78:
         bd:2f:68:9a:00:b4:11:61:03:23:de:8d:7b:5b:63:7f:d6:06:
         cb:0c:9c:b8:6e:d0:7c:ba:2d:29:f3:1a:6d:bc:66:54:ba:45:
         31:39:18:bb:11:79:54:93:5f:8a:7d:c2:5a:ae:9f:de:9f:1b:
         01:30:8d:bc:d2:76:3a:44:34:b4:22:1f:c4:e2:ac:57:21:4e:
         bb:99:b4:29:36:29:c6:eb:03:85:ca:07:65:6b:ee:74:b3:75:
         56:19:20:0e:15:b3:42:f5:6b:f7:9d:a3:95:42:21:dd:d7:05:
         01:b0:9c:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----