Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/gp4OirTbg6YtMYxpMEhA5cp2_oY.cer
File:                     gp4OirTbg6YtMYxpMEhA5cp2_oY.cer (raw, json)
Hash identifier:          gB/6+V411Qd4FOs5dZ8ehKl+82oU2qfILAymlQreJbE=
Subject key identifier:   82:9E:0E:8A:B4:DB:83:A6:2D:31:8C:69:30:48:40:E5:CA:76:FE:86
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856EFB48FA8A4B85CFC0567790A20203A2
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/18/a17dac-87b7-42c5-bf5a-d478ca1d4dd0/1/gp4OirTbg6YtMYxpMEhA5cp2_oY.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/18/a17dac-87b7-42c5-bf5a-d478ca1d4dd0/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 20:17:20 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 45.91.184.0/22

Validation:               Failed, certificate revoked on Fri 04 Aug 2023 13:20:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6e:fb:48:fa:8a:4b:85:cf:c0:56:77:90:a2:02:03:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 20:17:20 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=829e0e8ab4db83a62d318c69304840e5ca76fe86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:16:d3:c0:c3:df:4b:a5:ce:83:8c:5a:93:a1:
                    f8:0e:40:2c:0c:b6:9b:07:df:82:1a:a3:89:57:11:
                    0c:4d:06:38:7d:74:9f:24:fe:7d:a6:00:dc:5b:9f:
                    86:85:48:d2:c9:76:6d:2a:45:98:c4:5b:9e:5f:ce:
                    2a:80:eb:6b:09:2c:8a:50:dd:e0:f2:d0:83:83:d5:
                    cf:03:e3:5e:2c:05:bb:49:91:28:e7:7e:78:6a:0c:
                    e5:9b:3a:9c:0a:1f:0f:10:98:3a:1e:45:a2:15:da:
                    c8:88:4b:a3:18:54:96:c1:0d:44:03:fc:ed:1b:63:
                    a7:55:ed:f3:6d:67:2f:9b:80:66:73:95:78:da:52:
                    26:cb:b6:b1:3b:58:a5:09:e7:bb:d2:3a:d6:02:7e:
                    f6:dd:96:51:56:97:22:39:da:4f:b2:9b:da:6c:6e:
                    27:da:da:58:07:22:e5:5e:d4:bb:ff:59:7e:30:4a:
                    1a:36:08:7d:2a:d8:d2:59:76:00:bf:ea:04:da:cf:
                    a5:4a:a5:70:ae:96:ee:93:c1:c0:fa:0b:c2:0c:99:
                    f2:1b:1a:cb:89:76:2d:7e:4a:24:eb:0b:9e:41:4f:
                    54:d6:1a:38:b5:42:df:4b:75:2b:9b:3f:fe:0d:6d:
                    57:31:67:94:0f:15:16:d8:bf:97:39:fc:f8:28:0b:
                    a7:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:9E:0E:8A:B4:DB:83:A6:2D:31:8C:69:30:48:40:E5:CA:76:FE:86
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/a17dac-87b7-42c5-bf5a-d478ca1d4dd0/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/a17dac-87b7-42c5-bf5a-d478ca1d4dd0/1/gp4OirTbg6YtMYxpMEhA5cp2_oY.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.91.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         29:51:1b:64:12:71:8e:ce:c3:8b:02:3e:c2:8b:c0:80:e3:f8:
         55:54:ad:ce:7f:91:2d:de:b1:86:db:f0:24:a3:07:bb:61:a4:
         b6:dd:78:88:ce:79:1a:24:c1:ea:e9:f3:74:32:a1:b6:32:4e:
         ec:14:59:bb:52:c5:9a:fd:40:ab:f2:e7:9f:53:0c:82:db:43:
         74:46:dc:b6:7c:ac:de:56:b3:2a:26:81:4b:37:33:34:76:65:
         f3:98:b9:bb:86:fd:4e:74:eb:58:07:81:f5:60:3b:7a:95:ad:
         31:0c:33:c9:c8:9a:96:d2:be:c6:f9:4b:90:05:0e:4c:d6:1d:
         a0:e8:4f:2b:f2:6e:46:05:da:6f:18:71:a6:ce:b4:28:83:e2:
         f2:1e:22:25:32:96:19:d0:9f:fa:b5:4b:ba:f7:1a:7b:bb:08:
         51:47:b6:7d:5e:1b:02:36:0f:e5:ff:7e:47:18:b7:40:64:79:
         81:7b:1c:bf:8d:ec:10:91:1a:2d:83:75:bc:92:28:0e:5c:c8:
         2d:4e:c0:5d:d5:cb:f3:74:c4:6f:b0:b2:b8:65:6d:72:39:3f:
         7d:1a:17:42:db:29:1a:f8:76:38:1d:28:6b:f0:2c:c2:11:ef:
         02:4f:ba:05:4e:bf:83:2f:e2:3f:68:5b:a3:8c:5c:07:20:79:
         08:b7:57:bf
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAYVu+0j6ikuFz8BWd5CiAgOiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjMwMTAxMjAxNzIwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MjllMGU4YWI0ZGI4M2E2MmQzMThjNjkzMDQ4NDBlNWNhNzZmZTg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxBbTwMPfS6XOg4xak6H4DkAsDLab
B9+CGqOJVxEMTQY4fXSfJP59pgDcW5+GhUjSyXZtKkWYxFueX84qgOtrCSyKUN3g
8tCDg9XPA+NeLAW7SZEo5354agzlmzqcCh8PEJg6HkWiFdrIiEujGFSWwQ1EA/zt
G2OnVe3zbWcvm4Bmc5V42lImy7axO1ilCee70jrWAn723ZZRVpciOdpPspvabG4n
2tpYByLlXtS7/1l+MEoaNgh9KtjSWXYAv+oE2s+lSqVwrpbuk8HA+gvCDJnyGxrL
iXYtfkok6wueQU9U1ho4tULfS3Urmz/+DW1XMWeUDxUW2L+XOfz4KAunlwIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFIKeDoq024OmLTGMaTBIQOXKdv6GMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzE4L2ExN2Rh
Yy04N2I3LTQyYzUtYmY1YS1kNDc4Y2ExZDRkZDAvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTgvYTE3ZGFj
LTg3YjctNDJjNS1iZjVhLWQ0NzhjYTFkNGRkMC8xL2dwNE9pclRiZzZZdE1ZeHBN
RWhBNWNwMl9vWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQCLVu4MA0GCSqGSIb3DQEBCwUAA4IBAQApURtk
EnGOzsOLAj7Ci8CA4/hVVK3Of5Et3rGG2/Akowe7YaS23XiIznkaJMHq6fN0MqG2
Mk7sFFm7UsWa/UCr8uefUwyC20N0Rty2fKzeVrMqJoFLNzM0dmXzmLm7hv1OdOtY
B4H1YDt6la0xDDPJyJqW0r7G+UuQBQ5M1h2g6E8r8m5GBdpvGHGmzrQog+LyHiIl
MpYZ0J/6tUu69xp7uwhRR7Z9XhsCNg/l/35HGLdAZHmBexy/jewQkRotg3W8kigO
XMgtTsBd1cvzdMRvsLK4ZW1yOT99GhdC2yka+HY4HShr8CzCEe8CT7oFTr+DL+I/
aFujjFwHIHkIt1e/
-----END CERTIFICATE-----