Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/kSQtl2m3WTScgBjJCHNuVN_8DLU.cer
File:                     kSQtl2m3WTScgBjJCHNuVN_8DLU.cer (raw, json)
Hash identifier:          eYjvytau25sdzIzp3NvyZeriyrt4dND3dPjbIpDGciY=
Subject key identifier:   91:24:2D:97:69:B7:59:34:9C:80:18:C9:08:73:6E:54:DF:FC:0C:B5
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01857168F6E0ED204A51E51446917A8258ED
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/d9/1c3b20-c966-4840-8be2-2e10a1e7198e/1/kSQtl2m3WTScgBjJCHNuVN_8DLU.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/d9/1c3b20-c966-4840-8be2-2e10a1e7198e/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 02 Jan 2023 07:36:22 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 185.249.55.0/24
                          IP: 2a11:a400::/29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:71:68:f6:e0:ed:20:4a:51:e5:14:46:91:7a:82:58:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 07:36:22 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=91242d9769b759349c8018c908736e54dffc0cb5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:88:be:f5:0f:95:fd:5e:66:3e:60:c9:f6:17:
                    31:6f:7d:37:22:32:14:32:a1:e3:0a:ba:d2:3e:bf:
                    04:2b:64:01:df:8f:ef:35:5a:38:34:1f:dd:3f:80:
                    28:1c:81:f6:db:2a:cf:b1:61:14:14:84:06:81:61:
                    13:c8:d2:18:4d:b1:46:9a:4f:11:87:44:df:80:1d:
                    29:16:43:e3:4e:10:10:0e:8b:ff:e8:0b:d9:b9:c5:
                    1a:bd:00:73:2a:61:b0:60:22:22:07:c9:27:5b:e3:
                    9b:42:f6:8d:fa:44:23:8f:01:8e:5f:a4:ae:bc:01:
                    7d:1d:ee:46:a2:7c:e6:a8:99:8e:3e:ab:ed:c3:ca:
                    31:b8:ea:1b:56:81:f2:94:8f:26:a0:59:c1:07:31:
                    eb:f4:d5:04:55:d4:c4:24:bf:33:b0:75:f5:d2:15:
                    04:cb:04:be:f5:63:1e:bb:07:c3:02:b2:1f:39:8e:
                    7c:e3:16:e5:37:0a:73:f1:f4:8f:46:98:65:8c:96:
                    70:51:2a:9e:44:21:98:38:b8:63:9c:c1:4e:2b:8c:
                    39:cf:35:96:7d:03:85:f1:75:1b:4a:10:49:1f:09:
                    8a:68:59:2c:3d:af:6d:b2:a1:19:ef:50:c8:f2:81:
                    5f:1c:15:6d:2b:ee:90:cc:76:dc:7a:30:26:f7:3a:
                    4d:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:24:2D:97:69:B7:59:34:9C:80:18:C9:08:73:6E:54:DF:FC:0C:B5
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/1c3b20-c966-4840-8be2-2e10a1e7198e/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/1c3b20-c966-4840-8be2-2e10a1e7198e/1/kSQtl2m3WTScgBjJCHNuVN_8DLU.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.249.55.0/24
                IPv6:
                  2a11:a400::/29

    Signature Algorithm: sha256WithRSAEncryption
         91:2e:b9:98:6b:35:47:ed:87:e1:e8:9b:53:0d:44:6b:ec:de:
         11:2e:c4:0d:c3:cb:b3:d3:30:d1:56:d1:9f:b1:64:11:3a:3f:
         22:e4:33:de:b3:68:e9:61:fc:bc:22:80:1b:f7:34:b0:c0:2c:
         7e:25:63:09:fb:45:23:2d:32:06:e8:4e:e4:d0:84:72:14:e8:
         1f:17:cc:c3:6c:b0:c4:b9:0c:cd:67:fc:70:07:ed:eb:46:97:
         21:87:7a:ee:5e:84:b8:7a:1c:2d:13:f7:12:42:f2:24:b3:12:
         51:52:7a:d5:4d:c6:29:e4:16:98:4b:5a:e2:58:97:c9:ec:2c:
         dc:a6:a7:4e:08:a2:3e:aa:5d:94:99:dc:c1:c6:7f:3a:6a:91:
         10:65:60:14:31:d2:70:e6:03:f4:d4:3f:40:41:68:47:2e:08:
         96:c9:78:47:f4:72:3e:80:3c:d0:79:92:e9:44:9a:63:7f:98:
         64:d3:5d:52:63:ec:20:7e:1f:e9:37:31:ee:9d:5b:96:04:11:
         96:c4:67:fb:d1:df:76:3e:2a:bd:22:5c:62:34:97:d1:dc:04:
         f5:dc:25:11:16:87:4b:03:dc:9f:5e:79:b8:0d:95:6c:8b:ea:
         90:0f:7a:ec:ec:2e:5d:d6:3c:96:5b:9d:4c:42:b6:b4:60:39:
         1c:6c:81:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----