Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/y0ZE3esDkLS2SLabyGCUKu2bu24.cer
File:                     y0ZE3esDkLS2SLabyGCUKu2bu24.cer (raw, json)
Hash identifier:          HVXgj02w6M3o53jzyOs0gTUf2MaRVCSMYbISBaZmTxk=
Subject key identifier:   CB:46:44:DD:EB:03:90:B4:B6:48:B6:9B:C8:60:94:2A:ED:9B:BB:6E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856FAFE2D028F5E33C3E9D1B22FC351A7C
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/e2/a2db06-42e4-4c76-97d1-418c1e3a9436/1/y0ZE3esDkLS2SLabyGCUKu2bu24.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/e2/a2db06-42e4-4c76-97d1-418c1e3a9436/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 23:34:35 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 188.244.123.0/24
                          IP: 2a11:4ec0::/29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:af:e2:d0:28:f5:e3:3c:3e:9d:1b:22:fc:35:1a:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 23:34:35 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=cb4644ddeb0390b4b648b69bc860942aed9bbb6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:63:db:b3:17:d8:76:d2:15:71:81:f2:79:54:
                    66:df:5c:43:e4:02:51:60:43:19:f9:fd:09:c7:1a:
                    26:5b:44:51:d3:f8:b2:f7:47:fa:8b:7e:21:1e:53:
                    54:62:95:ab:8a:49:16:54:ef:45:bc:31:3e:18:11:
                    bc:ec:a7:be:f4:af:9d:ff:7a:12:2a:17:79:7b:4a:
                    08:61:23:be:31:85:95:42:d4:cf:e9:bc:7a:b7:b6:
                    c2:4c:d3:7a:8b:64:09:d8:62:32:d1:7f:bf:b6:be:
                    27:7c:36:4b:3d:a2:11:14:6d:df:22:85:2d:d4:eb:
                    77:60:27:50:15:f3:ad:42:73:c7:6a:36:bb:3f:1c:
                    07:74:05:37:a4:42:be:dd:98:ca:a0:22:45:ba:bb:
                    5e:16:bb:e9:fa:6e:ba:a3:13:5f:8f:ef:d4:4b:fc:
                    86:02:da:c2:57:13:aa:15:06:3c:ba:b0:aa:8e:e9:
                    50:fe:30:f6:b6:cd:a4:93:0c:35:a0:41:c7:48:ab:
                    05:a4:71:5c:23:5e:62:08:18:94:d4:01:3a:eb:82:
                    24:37:32:70:41:9a:54:32:ff:7a:5d:b1:99:f1:ce:
                    c9:a3:62:c4:53:89:1e:0d:e0:a6:40:90:cd:ec:b6:
                    7e:88:d1:d1:af:0a:57:78:c5:16:d0:92:0d:12:2a:
                    d6:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:46:44:DD:EB:03:90:B4:B6:48:B6:9B:C8:60:94:2A:ED:9B:BB:6E
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a2db06-42e4-4c76-97d1-418c1e3a9436/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a2db06-42e4-4c76-97d1-418c1e3a9436/1/y0ZE3esDkLS2SLabyGCUKu2bu24.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  188.244.123.0/24
                IPv6:
                  2a11:4ec0::/29

    Signature Algorithm: sha256WithRSAEncryption
         7f:f4:94:68:d4:fe:9e:e0:45:7d:29:b3:bf:98:04:98:43:47:
         e0:74:f6:90:cd:6a:78:d2:f2:4a:60:24:c3:68:75:22:c6:ed:
         03:9b:2b:86:2a:33:a6:79:52:e6:a6:df:52:f1:b8:7d:94:9b:
         b7:96:0e:a6:bb:0b:68:16:f3:c8:cd:a7:18:b7:5b:3f:8a:c6:
         b1:20:f0:41:8d:e2:72:02:bf:46:90:55:7e:06:9f:10:55:4e:
         ce:b5:8b:5c:a5:49:87:2d:73:c3:b0:05:71:b4:6f:fe:26:40:
         6f:b4:96:43:76:68:0d:55:1f:be:fb:4a:e9:60:d3:14:5d:9b:
         86:8c:54:fc:e5:69:f0:9d:8b:ec:28:4c:bd:94:37:c8:ff:87:
         cc:8f:ae:b6:6e:24:cb:28:1d:2f:88:3f:de:f0:2e:19:3c:71:
         da:e5:ab:43:8f:97:9f:c7:1d:63:1f:10:b9:e2:aa:77:e6:83:
         7f:a7:f5:b9:c8:c1:f3:22:75:19:c0:1f:f1:9f:40:a2:af:58:
         a4:26:67:38:94:9a:1d:3a:1c:30:00:ea:cf:43:02:b3:7c:65:
         f6:0a:11:69:cf:88:e5:ba:c6:dc:50:34:67:a6:54:cc:ed:b3:
         06:56:76:d1:85:d6:dd:3e:79:9a:5c:69:ca:ed:0f:fd:b5:74:
         47:cf:bc:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----