Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/tHMWZWagjQMgU8ys4jBo4ZU_TrI.cer
File:                     tHMWZWagjQMgU8ys4jBo4ZU_TrI.cer (raw, json)
Hash identifier:          93daYHhZa9+8RM4Azry3eBkeijbj68Dr2cktclTpX1Q=
Subject key identifier:   B4:73:16:65:66:A0:8D:03:20:53:CC:AC:E2:30:68:E1:95:3F:4E:B2
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856CAD63A47BAAA7630EA0502ABE037391
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/89/3eef64-90c5-4a2e-bc1e-3633dcd4c9dc/1/tHMWZWagjQMgU8ys4jBo4ZU_TrI.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/89/3eef64-90c5-4a2e-bc1e-3633dcd4c9dc/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 09:33:00 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 185.138.165.0/24
                          IP: 2a0b:3140::/29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6c:ad:63:a4:7b:aa:a7:63:0e:a0:50:2a:be:03:73:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 09:33:00 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=b473166566a08d032053ccace23068e1953f4eb2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:a7:09:25:b7:9c:06:3e:33:7a:5d:a9:2a:a3:
                    c1:16:df:08:8a:9a:4a:3b:c2:91:10:2e:bd:15:8b:
                    58:d3:87:82:56:21:d3:52:94:38:4f:6c:ca:76:b5:
                    f7:ef:4b:3f:ff:04:b0:88:65:cf:03:17:82:b2:fe:
                    7f:58:c7:f5:b5:ee:cb:85:76:a4:43:b6:ef:b0:da:
                    52:39:45:5a:92:54:fe:f4:f4:dc:8e:1f:ba:6c:42:
                    c2:91:ab:ff:b5:04:ab:53:06:90:8a:3e:be:74:b8:
                    7d:8d:ed:f9:c1:c0:68:72:bb:37:03:49:81:36:59:
                    50:c7:c4:cd:2a:84:34:52:2c:e2:62:d8:8b:31:24:
                    f3:b0:95:72:c9:11:8c:da:c7:2d:c4:9c:c4:6c:22:
                    85:38:7a:6b:6e:9b:67:cd:d0:eb:f3:af:7d:69:a3:
                    71:5a:94:ac:a6:2a:01:6d:33:dd:0e:0c:1a:47:82:
                    b0:3e:c1:50:c2:17:58:d6:ee:3c:7f:74:8d:0e:ef:
                    5b:e8:08:66:31:c0:7d:57:42:98:f7:87:43:88:ab:
                    e0:1f:f5:80:1d:c5:90:64:9d:ee:32:f4:dd:fe:25:
                    a8:4f:c2:52:67:0c:b2:3b:0e:83:48:66:37:88:b0:
                    da:44:ea:c1:09:c7:7c:08:b9:ca:dd:47:55:21:3d:
                    a8:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:73:16:65:66:A0:8D:03:20:53:CC:AC:E2:30:68:E1:95:3F:4E:B2
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/3eef64-90c5-4a2e-bc1e-3633dcd4c9dc/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/3eef64-90c5-4a2e-bc1e-3633dcd4c9dc/1/tHMWZWagjQMgU8ys4jBo4ZU_TrI.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.138.165.0/24
                IPv6:
                  2a0b:3140::/29

    Signature Algorithm: sha256WithRSAEncryption
         63:a4:f5:91:5c:5e:c1:65:ff:be:ac:e6:f5:60:a7:d5:aa:9b:
         10:b9:ec:2a:9e:88:0b:f3:f8:a9:c0:08:37:9e:0b:61:97:d9:
         2c:e5:76:c4:8c:d4:66:6c:da:15:4e:07:6c:a3:d0:5a:ec:02:
         6c:2c:9d:ba:58:4c:71:a7:40:d6:47:8b:e0:d2:55:80:00:ba:
         6d:f6:7f:1b:1a:42:e8:00:d9:c4:21:39:f2:97:90:99:13:26:
         0a:c6:e5:38:cc:1c:7e:5e:89:fd:0e:61:57:c7:bb:12:b3:29:
         cb:19:2a:02:3c:5a:53:3f:29:89:2e:70:96:02:f3:c6:a9:1d:
         3a:06:23:79:5f:81:d6:59:7d:47:35:14:7e:5d:0d:1b:e8:fc:
         24:67:ad:91:5d:e1:99:6f:f8:94:1d:c7:20:73:05:08:99:06:
         01:72:03:a6:75:0a:6c:59:fc:3d:0b:c1:05:de:94:2e:53:9b:
         12:de:21:4b:da:f4:57:89:af:0d:ed:22:63:0c:f2:90:03:a7:
         75:8a:b9:97:b1:9b:7f:05:d2:cd:80:21:96:8c:87:2b:44:ea:
         48:35:f8:49:b9:df:27:39:c9:ae:58:63:ab:0e:c3:5e:a3:d2:
         81:76:5f:eb:ee:3e:9a:38:af:c0:32:4b:88:19:cc:84:ae:49:
         00:6b:01:a9
-----BEGIN CERTIFICATE-----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