Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/k8fcX3J0XcEYkasG7ku26gTb9E0.cer
File:                     k8fcX3J0XcEYkasG7ku26gTb9E0.cer (raw, json)
Hash identifier:          Mf6ZG5tVwNnsSCFpFW77YNUvu0b/0d5xjAlnt2VYRv8=
Subject key identifier:   93:C7:DC:5F:72:74:5D:C1:18:91:AB:06:EE:4B:B6:EA:04:DB:F4:4D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856AF4F3F1D04BBF1293F3F11CB2CCC307
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/ba/0472d7-4d1f-4618-b0a8-006b83e10438/1/k8fcX3J0XcEYkasG7ku26gTb9E0.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/ba/0472d7-4d1f-4618-b0a8-006b83e10438/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 01:31:56 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 91.247.186.0/24
                          IP: 2a11:cb40::/29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6a:f4:f3:f1:d0:4b:bf:12:93:f3:f1:1c:b2:cc:c3:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 01:31:56 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=93c7dc5f72745dc11891ab06ee4bb6ea04dbf44d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:79:f8:4b:c1:96:4c:6d:f3:b7:f0:b0:23:3d:
                    d9:fa:d3:5f:ca:14:d8:58:72:f7:99:de:06:74:98:
                    58:ad:5e:3a:0e:96:ed:97:13:f0:c0:63:69:59:27:
                    c8:f6:9c:8c:cf:93:32:32:cb:dd:d0:74:37:0c:04:
                    59:79:f2:1c:56:86:4f:78:51:64:52:2e:6b:91:99:
                    02:36:ce:82:00:aa:7c:ee:23:e5:51:4d:74:d4:8f:
                    cd:72:0b:df:ae:63:98:fe:ad:c5:44:6d:84:c2:8a:
                    ee:47:b5:92:78:bc:40:11:69:ae:b0:73:0f:4b:a1:
                    9d:24:20:9e:6f:f7:32:07:70:08:28:73:33:0c:75:
                    87:d3:8d:b9:3d:06:77:b4:bc:de:ec:3e:0a:e6:52:
                    df:1f:46:42:0e:3b:f7:fd:06:6b:b7:06:87:56:fe:
                    d5:70:e2:d3:f0:9c:f2:0b:b0:33:36:0b:4d:58:ba:
                    d8:20:9a:a6:5c:8f:c0:14:c6:f1:50:84:1c:09:34:
                    6f:92:1e:43:b5:1c:c5:83:ef:be:87:16:72:cb:dd:
                    0b:b6:64:d5:05:fb:05:bd:0a:af:6d:f6:35:bf:05:
                    8f:76:c6:d6:9a:32:7d:28:d4:f3:47:0c:2e:ac:43:
                    0e:84:54:6d:8a:d7:97:bc:1e:b1:63:52:ab:f1:6e:
                    e9:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:C7:DC:5F:72:74:5D:C1:18:91:AB:06:EE:4B:B6:EA:04:DB:F4:4D
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/0472d7-4d1f-4618-b0a8-006b83e10438/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/0472d7-4d1f-4618-b0a8-006b83e10438/1/k8fcX3J0XcEYkasG7ku26gTb9E0.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.247.186.0/24
                IPv6:
                  2a11:cb40::/29

    Signature Algorithm: sha256WithRSAEncryption
         3e:56:2f:02:5d:fb:2e:73:7b:b4:e7:03:12:aa:aa:9c:fb:7c:
         0d:65:d2:3d:79:64:3c:ed:9e:00:d8:78:87:0d:47:6b:4e:e4:
         9b:23:72:a8:22:7d:c7:d9:bd:56:83:6f:e5:42:4d:22:67:08:
         47:70:c9:c3:ba:bc:03:6a:3e:86:fd:8d:23:77:ec:34:37:40:
         65:31:57:00:9f:1f:58:9c:54:15:c8:b3:fc:97:4f:be:ba:fe:
         96:54:5a:29:66:5b:60:c7:fb:43:6d:89:e7:27:90:cd:a0:f7:
         b5:4f:74:61:fa:2c:b4:df:70:60:63:a9:b3:a7:fe:fa:8d:91:
         91:bf:36:57:a0:a9:2d:95:01:fd:10:71:82:bb:4b:4b:37:f3:
         60:90:36:93:93:de:09:4b:44:01:a6:bb:4f:b3:b3:4c:fb:73:
         ee:ab:51:e0:ba:62:a1:2b:f2:26:57:71:bb:df:59:98:88:f1:
         ca:18:de:11:1b:a2:a1:48:d9:6f:65:87:7e:48:96:de:2c:54:
         62:fe:b9:77:14:45:a0:14:2e:b8:21:1d:b6:da:ce:e5:47:ef:
         d8:26:0e:35:46:7a:7a:d3:b3:32:e4:ba:97:5e:e6:53:c2:81:
         b6:67:16:ed:7d:8b:97:ab:46:12:15:bd:4e:ff:8e:6d:f3:6b:
         4b:f7:69:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----