Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/gNBh_jYoEdznZOaaepm49r5fKgM.cer
File:                     gNBh_jYoEdznZOaaepm49r5fKgM.cer (raw, json)
Hash identifier:          EG+NMxUcO/BHqawQjPV21iQYIFJ/ZznkKl6LQtdSQDQ=
Subject key identifier:   80:D0:61:FE:36:28:11:DC:E7:64:E6:9A:7A:99:B8:F6:BE:5F:2A:03
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856FAE921281F87333076C8BF7EB66925C
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/79/31fa62-cd40-4045-8692-ffea5bcc8d72/1/gNBh_jYoEdznZOaaepm49r5fKgM.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/79/31fa62-cd40-4045-8692-ffea5bcc8d72/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 23:33:09 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 176.126.106.0/24
                          IP: 2a11:e940::/29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:ae:92:12:81:f8:73:33:07:6c:8b:f7:eb:66:92:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 23:33:09 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=80d061fe362811dce764e69a7a99b8f6be5f2a03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:a4:0f:4b:2d:e8:5a:55:d1:6e:e6:da:e4:49:
                    e2:a1:ef:ce:ed:08:4d:65:88:dc:7c:61:ee:3a:af:
                    fb:08:e3:ef:77:bb:67:ba:06:8a:06:5a:f4:bf:c3:
                    ca:96:a7:00:d9:56:e8:7b:33:56:e1:91:18:e7:2d:
                    40:31:51:c6:a5:91:ef:79:f8:42:59:49:0c:68:88:
                    19:1b:f2:df:5b:8c:99:9c:bf:5a:a4:72:9a:2f:87:
                    72:4e:cf:dd:dd:4b:4f:54:68:8d:06:5a:54:bb:f7:
                    a1:bb:1d:bd:75:c8:90:5a:58:ff:9a:92:3b:d5:97:
                    db:7a:78:e2:e1:10:1f:37:b8:5d:86:f5:8a:92:ed:
                    bb:0f:48:5a:74:e1:de:dd:0a:f4:00:b8:64:f5:7e:
                    e8:58:cf:a0:df:01:37:3b:c9:b4:4b:ac:0e:8a:1c:
                    01:bc:21:8b:bc:5a:12:21:8c:99:aa:8e:09:1e:ca:
                    18:f0:aa:91:a2:60:af:e3:67:02:a2:f2:f3:22:4a:
                    bf:7c:f3:b9:5c:a7:24:92:c9:bc:6a:54:fb:fd:b1:
                    bd:0e:1e:af:73:54:09:15:fd:8a:2c:9a:14:7c:81:
                    09:62:88:94:67:91:41:f0:58:13:93:80:a9:90:20:
                    79:30:9a:dd:d1:cb:cf:fd:5c:fa:eb:20:24:27:18:
                    d8:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:D0:61:FE:36:28:11:DC:E7:64:E6:9A:7A:99:B8:F6:BE:5F:2A:03
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/31fa62-cd40-4045-8692-ffea5bcc8d72/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/31fa62-cd40-4045-8692-ffea5bcc8d72/1/gNBh_jYoEdznZOaaepm49r5fKgM.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  176.126.106.0/24
                IPv6:
                  2a11:e940::/29

    Signature Algorithm: sha256WithRSAEncryption
         07:b0:e5:f5:f6:5d:bc:f2:3c:b7:9d:5f:0a:d2:85:7b:42:68:
         da:68:31:0a:d1:86:5a:56:c0:39:12:a0:40:57:a0:b4:a8:28:
         77:2f:4d:9e:1b:6a:2c:2e:4c:63:00:ca:5b:94:68:12:71:f1:
         76:5c:9e:86:d4:0c:b9:fc:82:ea:07:62:91:22:17:6e:40:44:
         96:5c:b4:ee:c6:2e:af:3c:49:5a:c5:ce:eb:f1:20:ed:b6:d2:
         9c:cf:e3:7b:a2:8d:3c:46:f8:82:44:8a:e0:18:52:3e:85:d6:
         ae:64:f5:af:cb:68:28:c2:bd:89:3c:ad:88:24:ad:61:4e:0a:
         0e:71:e5:8d:bf:c6:85:27:6c:23:bb:d1:f4:02:38:a0:08:1b:
         68:09:8e:c7:3b:38:03:62:68:ee:d3:7c:6e:fe:1c:8a:9f:a7:
         5f:54:7c:85:73:9b:77:55:cf:0a:5f:56:d0:4d:d5:51:5f:fd:
         fc:09:3d:f7:48:29:de:ca:ee:ec:2f:0d:ef:ae:14:ff:87:92:
         db:89:9a:bd:4f:d9:8c:06:fd:a5:ad:c8:99:31:c7:ac:ca:2c:
         f9:c9:18:66:03:5f:32:a9:3d:24:cd:61:22:71:67:25:6a:52:
         4f:8e:d6:a1:70:7b:3b:59:a2:99:cf:70:c1:7a:0b:b7:e9:ab:
         c9:69:b8:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----