Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ePjiRs_C9-F9Jwh5q5Oz3ocM31Y.cer
File:                     ePjiRs_C9-F9Jwh5q5Oz3ocM31Y.cer (raw, json)
Hash identifier:          YnyF+PmfRENdmT1sMIyHeR1vGXwp/8FwrlEi3X9HmxI=
Subject key identifier:   78:F8:E2:46:CF:C2:F7:E1:7D:27:08:79:AB:93:B3:DE:87:0C:DF:56
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018570FAAF6004C4F2A29CB7CD86B3913CB7
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/33/f61617-ef2e-4831-be5a-882856677eba/1/ePjiRs_C9-F9Jwh5q5Oz3ocM31Y.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/33/f61617-ef2e-4831-be5a-882856677eba/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 02 Jan 2023 05:35:55 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 91.242.251.0/24
                          IP: 2a11:b340::/29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:fa:af:60:04:c4:f2:a2:9c:b7:cd:86:b3:91:3c:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 05:35:55 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=78f8e246cfc2f7e17d270879ab93b3de870cdf56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:dc:62:85:79:ae:49:a4:ab:e1:79:1d:c4:4d:
                    2f:c2:bc:54:5c:87:4b:25:aa:29:aa:ce:b0:fe:a4:
                    8b:8d:18:fc:81:23:c0:d3:df:77:d0:1d:54:5c:f0:
                    85:74:5e:f5:14:13:b0:ad:eb:ab:28:a3:2c:4a:6f:
                    52:75:b5:65:08:36:82:e5:38:5c:48:27:3e:a6:f4:
                    59:c1:41:45:fc:bb:67:d3:7e:9c:a7:68:cd:91:11:
                    af:d1:ee:00:99:30:99:8d:22:cd:9e:eb:9a:82:ab:
                    5c:d7:00:6b:22:93:a2:bd:26:cf:23:f9:71:3c:98:
                    3a:c2:7b:2d:66:54:2a:4c:b3:86:3d:90:5e:75:60:
                    cf:00:25:d5:2e:1e:60:04:a1:4a:5a:61:2c:f9:38:
                    13:96:55:2d:07:4b:fd:73:9f:86:fa:f5:1b:54:8c:
                    df:7f:f3:4c:17:83:a7:37:ae:82:bf:f9:d5:d0:4e:
                    8e:19:7a:2b:b2:0b:3e:11:bb:c4:56:bd:99:5f:16:
                    6b:33:54:35:3b:78:e9:1f:89:22:04:8a:56:56:3e:
                    ec:3a:ba:f8:a2:eb:f4:8f:8f:6a:f5:88:8a:d8:3e:
                    eb:f9:a3:21:5a:9f:bf:81:d1:9a:1f:c3:86:19:c4:
                    1c:da:86:8d:91:88:63:ef:2b:d2:97:d7:f5:ab:4d:
                    50:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:F8:E2:46:CF:C2:F7:E1:7D:27:08:79:AB:93:B3:DE:87:0C:DF:56
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/f61617-ef2e-4831-be5a-882856677eba/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/f61617-ef2e-4831-be5a-882856677eba/1/ePjiRs_C9-F9Jwh5q5Oz3ocM31Y.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.242.251.0/24
                IPv6:
                  2a11:b340::/29

    Signature Algorithm: sha256WithRSAEncryption
         2c:dd:e3:9a:20:04:f7:69:b6:33:3c:88:37:8e:fc:03:fa:62:
         ff:ce:16:9d:f5:7e:be:01:07:47:bf:54:2d:4e:cc:4e:b9:8b:
         42:3c:f1:d1:f4:8c:99:19:98:1d:3e:e6:d8:e8:2e:5c:f9:75:
         16:c7:1a:71:58:ec:cc:26:5b:e0:3d:90:d2:21:83:da:55:e7:
         0a:0c:5e:79:a1:1b:76:72:3e:48:ed:91:05:76:d8:2b:4d:c0:
         35:b2:45:3b:79:ea:5a:78:ca:6b:2f:4b:f3:48:f1:72:87:4f:
         f0:9b:e8:93:8e:23:ce:e0:c4:34:31:c8:a4:98:bc:71:fe:2d:
         c5:2c:20:97:60:99:5c:74:c4:a9:94:18:8a:1f:99:01:36:fe:
         8d:2c:ca:e4:c2:08:c7:1e:96:35:d2:66:68:08:da:e1:ca:a8:
         c5:04:28:77:9c:63:41:18:88:53:97:33:38:f1:f9:a0:96:d9:
         5d:9f:93:af:1e:54:06:0f:03:e7:58:a3:1c:fa:21:7a:c2:88:
         45:3a:d5:ad:24:ff:23:d4:dc:4d:f4:08:4e:9b:07:8d:c5:13:
         c0:9c:ca:5e:bc:4e:7a:b9:46:0b:d6:b5:ff:8c:24:8d:54:71:
         a2:8b:1a:98:e5:70:1c:02:fd:75:b3:33:c0:36:ff:87:64:b7:
         d3:45:44:56
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgISAYVw+q9gBMTyopy3zYazkTy3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjMwMTAyMDUzNTU1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3OGY4ZTI0NmNmYzJmN2UxN2QyNzA4NzlhYjkzYjNkZTg3MGNkZjU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs9xihXmuSaSr4XkdxE0vwrxUXIdL
Jaopqs6w/qSLjRj8gSPA09930B1UXPCFdF71FBOwreurKKMsSm9SdbVlCDaC5Thc
SCc+pvRZwUFF/Ltn036cp2jNkRGv0e4AmTCZjSLNnuuagqtc1wBrIpOivSbPI/lx
PJg6wnstZlQqTLOGPZBedWDPACXVLh5gBKFKWmEs+TgTllUtB0v9c5+G+vUbVIzf
f/NMF4OnN66Cv/nV0E6OGXorsgs+EbvEVr2ZXxZrM1Q1O3jpH4kiBIpWVj7sOrr4
ouv0j49q9YiK2D7r+aMhWp+/gdGaH8OGGcQc2oaNkYhj7yvSl9f1q01QQQIDAQAB
o4ICkzCCAo8wHQYDVR0OBBYEFHj44kbPwvfhfScIeauTs96HDN9WMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzMzL2Y2MTYx
Ny1lZjJlLTQ4MzEtYmU1YS04ODI4NTY2NzdlYmEvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzMvZjYxNjE3
LWVmMmUtNDgzMS1iZTVhLTg4Mjg1NjY3N2ViYS8xL2VQamlSc19DOS1GOUp3aDVx
NU96M29jTTMxWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQAW/L7MA0EAgACMAcDBQMqEbNAMA0GCSqGSIb3
DQEBCwUAA4IBAQAs3eOaIAT3abYzPIg3jvwD+mL/zhad9X6+AQdHv1QtTsxOuYtC
PPHR9IyZGZgdPubY6C5c+XUWxxpxWOzMJlvgPZDSIYPaVecKDF55oRt2cj5I7ZEF
dtgrTcA1skU7eepaeMprL0vzSPFyh0/wm+iTjiPO4MQ0McikmLxx/i3FLCCXYJlc
dMSplBiKH5kBNv6NLMrkwgjHHpY10mZoCNrhyqjFBCh3nGNBGIhTlzM48fmgltld
n5OvHlQGDwPnWKMc+iF6wohFOtWtJP8j1NxN9AhOmweNxRPAnMpevE56uUYL1rX/
jCSNVHGiixqY5XAcAv11szPANv+HZLfTRURW
-----END CERTIFICATE-----
Generated at Fri Nov 3 11:32:14 2023 by rpki-client on console-fra.rpki-client.org