Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/gOSEhc6bDkJWQIBO3A7SumuPS48.cer
File:                     gOSEhc6bDkJWQIBO3A7SumuPS48.cer (raw, json)
Hash identifier:          xA7NstXirLb2jk0LkWA+F9qLOsC9YiOvbuY+8xiBiLc=
Subject key identifier:   80:E4:84:85:CE:9B:0E:42:56:40:80:4E:DC:0E:D2:BA:6B:8F:4B:8F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0185C4A9112DEBA179158D914A91330AEF09
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/7a/6dc978-bfd6-41ec-8a3a-c03017e98c53/1/gOSEhc6bDkJWQIBO3A7SumuPS48.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/7a/6dc978-bfd6-41ec-8a3a-c03017e98c53/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 18 Jan 2023 11:34:52 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    AS: 35308
                          IP: 45.152.164.0/22
                          IP: 46.254.106.0/24
                          IP: 193.151.164.0/22
                          IP: 2a09:c400::/29
                          IP: 2a0b:1000::/29
                          IP: 2a11:f80::/29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:c4:a9:11:2d:eb:a1:79:15:8d:91:4a:91:33:0a:ef:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan 18 11:34:52 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=80e48485ce9b0e425640804edc0ed2ba6b8f4b8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:01:5b:67:da:2b:8b:9d:08:ea:dc:c5:3d:0a:
                    7b:c6:41:be:df:9d:67:65:73:ad:89:f2:4d:81:eb:
                    e3:6f:4f:e6:81:6d:8b:52:d9:e3:6f:ce:7b:ce:c7:
                    85:a2:62:18:af:f8:97:bd:65:5c:21:3f:13:99:83:
                    e1:f8:53:7d:34:7a:79:20:f4:c6:34:d6:05:59:6d:
                    0c:d1:4d:50:ec:7a:58:bb:e9:09:ee:10:c3:af:c4:
                    2c:ca:6f:32:e2:08:86:5b:ff:e5:d9:4b:66:46:7f:
                    f2:bb:8c:03:49:37:29:ca:db:e3:28:e9:31:9f:01:
                    72:58:b5:79:93:cc:86:16:df:71:6a:c4:f9:f3:02:
                    ad:7f:23:ff:7e:dd:fb:05:62:1b:5a:91:31:11:d1:
                    70:85:4e:6d:7a:1b:a0:10:42:00:6d:7d:49:4f:1b:
                    5b:c1:de:ad:ab:e8:0e:a7:f1:7a:c2:e6:68:b0:2f:
                    d2:d9:74:8e:a3:ec:3b:e1:9b:18:a0:87:1c:a8:79:
                    cc:0b:a4:d8:05:2a:2e:eb:1b:a3:66:5e:1b:cb:be:
                    c5:cc:fb:16:69:82:f7:37:d9:3c:75:15:d9:0f:ae:
                    fc:9b:6e:92:a4:02:64:d3:98:26:46:d0:06:74:99:
                    60:96:cb:5b:d4:ba:63:f6:1a:92:2f:b8:22:b5:f3:
                    e3:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:E4:84:85:CE:9B:0E:42:56:40:80:4E:DC:0E:D2:BA:6B:8F:4B:8F
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/6dc978-bfd6-41ec-8a3a-c03017e98c53/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/6dc978-bfd6-41ec-8a3a-c03017e98c53/1/gOSEhc6bDkJWQIBO3A7SumuPS48.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.152.164.0/22
                  46.254.106.0/24
                  193.151.164.0/22
                IPv6:
                  2a09:c400::/29
                  2a0b:1000::/29
                  2a11:f80::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  35308

    Signature Algorithm: sha256WithRSAEncryption
         63:0e:53:23:99:7d:58:45:06:33:b5:5c:b5:ba:29:dd:47:fc:
         c9:f6:57:ca:cf:9a:bd:41:c6:57:15:e7:68:b8:7f:aa:67:bf:
         74:66:39:d8:ee:4d:ae:93:4a:2b:f4:1a:33:18:21:b5:9c:bf:
         40:bb:f2:38:39:49:c5:b7:c9:1f:d5:3a:b1:94:fd:cd:35:7d:
         2e:4e:7d:73:64:3d:0f:8b:fe:b4:02:94:3e:94:29:f2:5f:4e:
         00:31:b5:66:d7:a4:28:2b:ed:d5:a2:be:9d:26:88:a1:f8:a6:
         fb:9f:94:85:23:95:53:cf:35:7d:1c:31:2b:9e:76:50:69:0c:
         f4:db:49:b0:d9:0e:de:89:7d:3f:4e:c1:7d:b9:36:ef:ec:85:
         5d:c2:3a:b2:0c:a4:1b:0b:e6:ed:33:f1:20:eb:f2:cf:72:09:
         9f:cf:8a:48:19:94:16:75:15:cf:85:0f:17:22:d9:b7:50:cd:
         00:73:9a:4a:32:9c:b0:10:40:99:8d:cf:5d:14:22:14:76:6e:
         2c:51:78:ae:9c:aa:34:d3:59:c5:f6:47:5e:70:7c:4a:d8:06:
         23:00:2b:1e:ab:0e:4f:4e:f3:0f:d3:d7:2c:aa:2a:98:70:69:
         d9:80:f9:31:d0:52:22:9b:42:48:5d:9e:07:92:db:24:21:28:
         58:1a:83:e2
-----BEGIN CERTIFICATE-----
MIIFvTCCBKWgAwIBAgISAYXEqREt66F5FY2RSpEzCu8JMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjMwMTE4MTEzNDUyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MGU0ODQ4NWNlOWIwZTQyNTY0MDgwNGVkYzBlZDJiYTZiOGY0YjhmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtgFbZ9ori50I6tzFPQp7xkG+351n
ZXOtifJNgevjb0/mgW2LUtnjb857zseFomIYr/iXvWVcIT8TmYPh+FN9NHp5IPTG
NNYFWW0M0U1Q7HpYu+kJ7hDDr8Qsym8y4giGW//l2UtmRn/yu4wDSTcpytvjKOkx
nwFyWLV5k8yGFt9xasT58wKtfyP/ft37BWIbWpExEdFwhU5tehugEEIAbX1JTxtb
wd6tq+gOp/F6wuZosC/S2XSOo+w74ZsYoIccqHnMC6TYBSou6xujZl4by77FzPsW
aYL3N9k8dRXZD678m26SpAJk05gmRtAGdJlglstb1Lpj9hqSL7gitfPjeQIDAQAB
o4ICyTCCAsUwHQYDVR0OBBYEFIDkhIXOmw5CVkCATtwO0rprj0uPMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzdhLzZkYzk3
OC1iZmQ2LTQxZWMtOGEzYS1jMDMwMTdlOThjNTMvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvN2EvNmRjOTc4
LWJmZDYtNDFlYy04YTNhLWMwMzAxN2U5OGM1My8xL2dPU0VoYzZiRGtKV1FJQk8z
QTdTdW11UFM0OC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEgGCCsGAQUF
BwEHAQH/BDkwNzAYBAIAATASAwQCLZikAwQALv5qAwQCwZekMBsEAgACMBUDBQMq
CcQAAwUDKgsQAAMFAyoRD4AwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDAInsMA0G
CSqGSIb3DQEBCwUAA4IBAQBjDlMjmX1YRQYztVy1uindR/zJ9lfKz5q9QcZXFedo
uH+qZ790ZjnY7k2uk0or9BozGCG1nL9Au/I4OUnFt8kf1TqxlP3NNX0uTn1zZD0P
i/60ApQ+lCnyX04AMbVm16QoK+3Vor6dJoih+Kb7n5SFI5VTzzV9HDErnnZQaQz0
20mw2Q7eiX0/TsF9uTbv7IVdwjqyDKQbC+btM/Eg6/LPcgmfz4pIGZQWdRXPhQ8X
Itm3UM0Ac5pKMpywEECZjc9dFCIUdm4sUXiunKo001nF9kdecHxK2AYjACseqw5P
TvMP09csqiqYcGnZgPkx0FIim0JIXZ4HktskIShYGoPi