Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ki2o6dxVUFYSCAs3nR7kkGjw_80.cer
File:                     ki2o6dxVUFYSCAs3nR7kkGjw_80.cer (raw, json)
Hash identifier:          FeGyMR7R7wGDEBjlkOAB3xR9+YDK3VzIFE2WZNbsZZc=
Subject key identifier:   92:2D:A8:E9:DC:55:50:56:12:08:0B:37:9D:1E:E4:90:68:F0:FF:CD
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856D1AF6EBA333C206FFDADD6F70C4B565
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/79/8ba1a1-c861-4f9b-9f4f-e62f58c7c9f4/1/ki2o6dxVUFYSCAs3nR7kkGjw_80.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/79/8ba1a1-c861-4f9b-9f4f-e62f58c7c9f4/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 11:32:41 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 185.76.148.0/24
                          IP: 2a09:9b80::/29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6d:1a:f6:eb:a3:33:c2:06:ff:da:dd:6f:70:c4:b5:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 11:32:41 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=922da8e9dc55505612080b379d1ee49068f0ffcd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:2e:95:d5:07:44:e0:7b:eb:6b:ff:53:aa:7a:
                    a8:66:d3:bd:88:19:59:af:8f:b4:5f:66:c0:10:03:
                    37:ab:a6:8e:04:72:ce:fc:fe:78:61:f4:29:a5:48:
                    23:c6:c7:52:53:a4:d6:ee:14:39:fd:25:c3:61:f5:
                    64:35:76:f2:9a:81:b0:c1:e6:4b:06:80:32:91:4a:
                    b0:cc:41:12:32:b4:f3:80:f4:6b:12:31:de:8d:a3:
                    75:2f:5e:58:01:48:4d:e9:a5:a3:33:f5:c4:f8:30:
                    a8:52:68:75:71:b4:23:ae:5f:a0:85:42:05:42:a9:
                    35:d9:15:75:f2:e9:99:b5:80:be:4d:c4:15:11:ff:
                    1d:55:55:07:8b:01:ba:e3:eb:08:d2:72:fa:b5:1f:
                    61:62:53:a1:a3:c2:fe:20:04:16:20:1f:93:f1:50:
                    d9:4c:7d:9c:50:52:20:3b:0e:d1:1c:c9:09:12:a2:
                    45:97:68:93:dd:b8:f2:6d:20:9a:a8:c1:35:a4:08:
                    36:c7:92:7d:77:8a:9c:20:43:6f:84:cd:43:c5:0b:
                    7c:17:51:e8:c1:44:05:07:d8:b6:aa:b1:67:7b:25:
                    ef:15:9c:47:9c:d5:fd:65:b2:53:85:0f:c3:2c:b7:
                    63:1b:bc:94:68:86:70:04:7c:a8:0d:26:d5:7e:07:
                    fc:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:2D:A8:E9:DC:55:50:56:12:08:0B:37:9D:1E:E4:90:68:F0:FF:CD
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/8ba1a1-c861-4f9b-9f4f-e62f58c7c9f4/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/8ba1a1-c861-4f9b-9f4f-e62f58c7c9f4/1/ki2o6dxVUFYSCAs3nR7kkGjw_80.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.76.148.0/24
                IPv6:
                  2a09:9b80::/29

    Signature Algorithm: sha256WithRSAEncryption
         7f:2a:cf:ac:2a:c2:69:4e:d1:da:d8:0d:a2:02:a7:ab:cf:cb:
         c1:e9:46:42:aa:a3:8e:ac:33:70:f5:01:ee:27:6f:57:e2:db:
         f8:07:b7:53:a6:4c:3e:37:eb:9a:3a:de:da:78:d9:ab:39:cf:
         66:ef:a8:0f:e1:e0:0b:a6:cc:71:57:29:85:2a:1a:5e:29:69:
         fa:51:93:22:36:62:02:ed:7f:d8:b1:49:61:10:11:6e:21:22:
         d8:01:d8:96:e5:c6:c0:11:da:2d:ab:89:34:4e:90:6e:e8:b6:
         d2:5a:f8:98:cd:39:e1:4d:16:04:1e:28:68:be:b0:6b:8a:37:
         11:7b:55:45:24:36:5b:c8:d9:0c:f2:19:c1:41:9c:79:14:8d:
         c8:53:6d:1b:05:65:0c:c6:9c:c6:97:1b:51:39:68:dc:3c:81:
         9f:e4:18:24:e2:dd:ed:3d:7d:65:2e:f2:10:76:7a:a4:c4:47:
         19:73:d7:30:ca:41:4b:57:b7:9f:f4:7e:58:a9:a8:29:62:b5:
         17:e3:b6:02:54:a4:00:24:a8:9b:05:62:17:18:f4:bb:35:6a:
         ff:46:16:cd:24:bd:da:a9:15:ea:56:ba:f0:0b:54:63:f6:2d:
         bd:ef:77:6a:5b:6b:35:ae:6c:38:44:fa:25:ef:bb:fd:ea:93:
         70:a5:d7:9d
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgISAYVtGvbrozPCBv/a3W9wxLVlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjMwMTAxMTEzMjQxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MjJkYThlOWRjNTU1MDU2MTIwODBiMzc5ZDFlZTQ5MDY4ZjBmZmNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5y6V1QdE4Hvra/9TqnqoZtO9iBlZ
r4+0X2bAEAM3q6aOBHLO/P54YfQppUgjxsdSU6TW7hQ5/SXDYfVkNXbymoGwweZL
BoAykUqwzEESMrTzgPRrEjHejaN1L15YAUhN6aWjM/XE+DCoUmh1cbQjrl+ghUIF
Qqk12RV18umZtYC+TcQVEf8dVVUHiwG64+sI0nL6tR9hYlOho8L+IAQWIB+T8VDZ
TH2cUFIgOw7RHMkJEqJFl2iT3bjybSCaqME1pAg2x5J9d4qcIENvhM1DxQt8F1Ho
wUQFB9i2qrFneyXvFZxHnNX9ZbJThQ/DLLdjG7yUaIZwBHyoDSbVfgf8KwIDAQAB
o4ICkzCCAo8wHQYDVR0OBBYEFJItqOncVVBWEggLN50e5JBo8P/NMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzc5LzhiYTFh
MS1jODYxLTRmOWItOWY0Zi1lNjJmNThjN2M5ZjQvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzkvOGJhMWEx
LWM4NjEtNGY5Yi05ZjRmLWU2MmY1OGM3YzlmNC8xL2tpMm82ZHhWVUZZU0NBczNu
Ujdra0dqd184MC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQAuUyUMA0EAgACMAcDBQMqCZuAMA0GCSqGSIb3
DQEBCwUAA4IBAQB/Ks+sKsJpTtHa2A2iAqerz8vB6UZCqqOOrDNw9QHuJ29X4tv4
B7dTpkw+N+uaOt7aeNmrOc9m76gP4eALpsxxVymFKhpeKWn6UZMiNmIC7X/YsUlh
EBFuISLYAdiW5cbAEdotq4k0TpBu6LbSWviYzTnhTRYEHihovrBrijcRe1VFJDZb
yNkM8hnBQZx5FI3IU20bBWUMxpzGlxtROWjcPIGf5Bgk4t3tPX1lLvIQdnqkxEcZ
c9cwykFLV7ef9H5YqagpYrUX47YCVKQAJKibBWIXGPS7NWr/RhbNJL3aqRXqVrrw
C1Rj9i2973dqW2s1rmw4RPol77v96pNwpded
-----END CERTIFICATE-----