Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/yXxrGDkX8miA3HkjgCodDkTXuCI.cer
File:                     yXxrGDkX8miA3HkjgCodDkTXuCI.cer (raw, json)
Hash identifier:          DP6EBVaFOu8y6khwA9vak17d9HiW9orf7KE+JbOejz8=
Subject key identifier:   C9:7C:6B:18:39:17:F2:68:80:DC:79:23:80:2A:1D:0E:44:D7:B8:22
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856C3E6E91D71C8AEF641CEA992A613550
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/23/de9c4e-bb97-47ca-a449-513d846cf7ac/1/yXxrGDkX8miA3HkjgCodDkTXuCI.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/23/de9c4e-bb97-47ca-a449-513d846cf7ac/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 07:31:49 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 176.118.35.0/24
                          IP: 2a11:cd80::/29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6c:3e:6e:91:d7:1c:8a:ef:64:1c:ea:99:2a:61:35:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 07:31:49 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=c97c6b183917f26880dc7923802a1d0e44d7b822
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:c4:eb:86:0c:1b:24:d1:57:b1:52:f3:a7:b1:
                    f7:b9:86:98:dc:cf:4a:77:7b:d8:97:d1:d4:f7:15:
                    b1:21:66:56:92:ff:32:3f:04:8a:41:89:9c:46:9b:
                    99:a6:ed:70:9d:db:9d:1e:ec:79:b6:d0:41:65:33:
                    ca:c0:94:cd:b5:48:9d:f4:f5:c8:6e:a1:7d:f1:3b:
                    05:7d:22:77:a6:69:a8:1b:50:3d:c2:30:5d:c5:3a:
                    f1:7e:a8:a8:3f:f1:5b:0a:af:fa:0f:73:c8:12:49:
                    16:6e:6a:1c:62:07:97:d1:64:a8:9a:eb:00:d2:40:
                    d6:a2:3b:eb:e6:95:f1:87:99:c1:4c:10:c6:17:95:
                    0b:66:eb:e6:23:ae:03:dc:22:4f:37:73:70:d6:c4:
                    39:86:30:b1:fc:35:4a:d8:f4:d8:21:cc:b7:a9:30:
                    0a:a8:cc:62:a7:00:c5:6e:f5:fe:05:40:74:f9:e7:
                    67:24:20:a6:99:0e:ba:f9:4e:b1:d1:2b:3d:1e:63:
                    8d:1b:37:d7:ed:3d:36:b1:9b:4a:82:09:2d:a5:d4:
                    67:e6:50:9c:5c:70:5a:84:fc:bc:7a:13:52:fb:c6:
                    3f:1c:c9:20:78:4c:dd:a5:b1:a4:be:85:63:96:aa:
                    1a:e4:b0:71:7d:5b:4d:03:0d:8c:31:da:f5:ab:8a:
                    d1:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:7C:6B:18:39:17:F2:68:80:DC:79:23:80:2A:1D:0E:44:D7:B8:22
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/de9c4e-bb97-47ca-a449-513d846cf7ac/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/de9c4e-bb97-47ca-a449-513d846cf7ac/1/yXxrGDkX8miA3HkjgCodDkTXuCI.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  176.118.35.0/24
                IPv6:
                  2a11:cd80::/29

    Signature Algorithm: sha256WithRSAEncryption
         38:82:f4:32:38:d1:58:f5:6b:cd:6f:78:74:5e:74:c8:2a:25:
         73:11:94:20:ee:a5:4f:6a:82:68:0c:4c:a6:30:ca:0e:83:7a:
         2a:5e:2f:5c:9b:63:92:ba:53:9c:04:7c:1f:1e:fe:2b:57:d3:
         10:85:27:4a:9a:74:96:e0:77:f3:71:e8:91:3a:f7:24:3c:76:
         e1:9b:5f:df:31:82:57:fc:98:a7:cc:1e:eb:e8:ef:ce:79:9f:
         1b:0b:b9:f4:9d:74:90:be:c8:9f:87:e2:6e:59:70:6a:87:8c:
         f4:ba:75:1f:16:a4:59:a6:47:5d:d7:33:f2:4c:0e:89:1b:2c:
         21:0f:6c:65:62:d1:29:c5:10:80:a8:cb:65:cc:2b:4e:77:1f:
         8a:0f:13:08:1e:53:19:9a:4e:96:ae:3c:8b:54:73:53:81:ca:
         5d:c7:5a:74:b3:06:eb:33:e4:90:69:4b:17:39:7c:f9:66:55:
         06:44:5d:db:b8:39:a3:34:4c:13:7e:9a:1a:ae:31:64:5d:30:
         a8:2f:82:0c:22:91:d5:28:71:3d:e7:f6:36:89:9f:24:e8:35:
         cc:56:36:ed:d2:d0:54:c4:d0:7a:1b:ce:c5:0e:58:00:be:0a:
         de:4a:2d:0e:ff:df:43:c0:c2:ac:26:97:e7:f1:12:10:19:32:
         df:02:37:f4
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgISAYVsPm6R1xyK72Qc6pkqYTVQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjMwMTAxMDczMTQ5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjOTdjNmIxODM5MTdmMjY4ODBkYzc5MjM4MDJhMWQwZTQ0ZDdiODIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6sTrhgwbJNFXsVLzp7H3uYaY3M9K
d3vYl9HU9xWxIWZWkv8yPwSKQYmcRpuZpu1wndudHux5ttBBZTPKwJTNtUid9PXI
bqF98TsFfSJ3pmmoG1A9wjBdxTrxfqioP/FbCq/6D3PIEkkWbmocYgeX0WSomusA
0kDWojvr5pXxh5nBTBDGF5ULZuvmI64D3CJPN3Nw1sQ5hjCx/DVK2PTYIcy3qTAK
qMxipwDFbvX+BUB0+ednJCCmmQ66+U6x0Ss9HmONGzfX7T02sZtKggktpdRn5lCc
XHBahPy8ehNS+8Y/HMkgeEzdpbGkvoVjlqoa5LBxfVtNAw2MMdr1q4rRQQIDAQAB
o4ICkzCCAo8wHQYDVR0OBBYEFMl8axg5F/JogNx5I4AqHQ5E17giMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzIzL2RlOWM0
ZS1iYjk3LTQ3Y2EtYTQ0OS01MTNkODQ2Y2Y3YWMvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjMvZGU5YzRl
LWJiOTctNDdjYS1hNDQ5LTUxM2Q4NDZjZjdhYy8xL3lYeHJHRGtYOG1pQTNIa2pn
Q29kRGtUWHVDSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQAsHYjMA0EAgACMAcDBQMqEc2AMA0GCSqGSIb3
DQEBCwUAA4IBAQA4gvQyONFY9WvNb3h0XnTIKiVzEZQg7qVPaoJoDEymMMoOg3oq
Xi9cm2OSulOcBHwfHv4rV9MQhSdKmnSW4HfzceiROvckPHbhm1/fMYJX/JinzB7r
6O/OeZ8bC7n0nXSQvsifh+JuWXBqh4z0unUfFqRZpkdd1zPyTA6JGywhD2xlYtEp
xRCAqMtlzCtOdx+KDxMIHlMZmk6WrjyLVHNTgcpdx1p0swbrM+SQaUsXOXz5ZlUG
RF3buDmjNEwTfpoarjFkXTCoL4IMIpHVKHE95/Y2iZ8k6DXMVjbt0tBUxNB6G87F
DlgAvgreSi0O/99DwMKsJpfn8RIQGTLfAjf0
Generated at Wed Oct 4 08:18:27 2023 by rpki-client on console-ams.rpki-client.org