Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1_wQs3D-2SPhg7rzc137-gqUIpo.cer
File:                     1_wQs3D-2SPhg7rzc137-gqUIpo.cer (raw, json)
Hash identifier:          0edWkxU5sSqy7bZQ0OwTIdTLFQGdJci+4L5ejEq9rTQ=
Subject key identifier:   D7:FC:10:B3:70:FE:D9:23:E1:83:BA:F3:73:5D:FB:FA:0A:94:22:9A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0185701D7C6BCCCCE93AB32E3A292FF0C968
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/c4/65d7b9-ccf9-4b73-b669-3533a512fcf7/1/1_wQs3D-2SPhg7rzc137-gqUIpo.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/c4/65d7b9-ccf9-4b73-b669-3533a512fcf7/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 02 Jan 2023 01:34:18 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    AS: 211942

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:1d:7c:6b:cc:cc:e9:3a:b3:2e:3a:29:2f:f0:c9:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 01:34:18 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=d7fc10b370fed923e183baf3735dfbfa0a94229a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:4a:22:2a:fb:24:eb:a5:92:12:ef:ff:9c:68:
                    23:d1:16:46:fd:5e:b9:15:f2:9b:ef:b7:63:33:28:
                    26:9b:68:1d:a5:3b:d8:b9:96:a0:d8:d8:8d:7b:24:
                    0b:c1:93:ca:8f:5c:2c:12:96:4d:d7:b3:4f:67:78:
                    23:a6:05:17:e7:7d:d4:ca:bd:de:31:da:ea:10:57:
                    f1:15:83:c7:e7:b9:91:a5:3d:2c:e4:dd:61:d6:0b:
                    ee:eb:78:a4:7f:ec:4c:62:57:f2:1e:34:97:21:59:
                    c9:cf:f2:5d:8c:97:5f:f7:5f:9c:ef:9b:72:79:99:
                    c1:0d:53:39:ff:1b:1e:0e:17:60:19:6a:18:f7:73:
                    f8:09:37:53:ff:33:4a:58:53:d8:48:60:af:9f:fe:
                    0b:1a:f0:55:c5:71:6b:cb:18:d7:ee:b2:b4:95:01:
                    51:a7:87:9e:03:73:c8:87:86:12:24:e7:d0:31:4e:
                    65:2e:aa:b7:46:9c:32:85:c2:3a:14:56:2c:ea:4b:
                    68:f9:19:91:75:b2:22:2a:90:60:5a:8e:d8:3f:5c:
                    5a:00:45:93:f3:3d:91:55:03:e5:5e:9a:b3:3a:00:
                    15:1a:a2:f6:46:a5:69:c2:79:de:da:34:e4:db:89:
                    da:9b:c7:9c:6f:a9:e0:be:fb:c8:1f:3d:cd:07:77:
                    c7:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:FC:10:B3:70:FE:D9:23:E1:83:BA:F3:73:5D:FB:FA:0A:94:22:9A
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/65d7b9-ccf9-4b73-b669-3533a512fcf7/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/65d7b9-ccf9-4b73-b669-3533a512fcf7/1/1_wQs3D-2SPhg7rzc137-gqUIpo.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  211942

    Signature Algorithm: sha256WithRSAEncryption
         60:91:c2:ea:a0:e7:90:53:e8:26:60:8d:aa:22:3c:57:3a:97:
         0a:6d:d3:58:b8:6f:04:f2:0a:73:41:2b:b8:b9:f6:5d:14:0b:
         e0:0f:63:91:76:d2:93:34:09:2f:32:15:31:47:d0:b2:b0:bc:
         f4:d8:44:c4:e5:58:2e:44:ac:a6:b0:6c:e3:d1:81:02:39:d3:
         1c:80:b1:8c:05:b0:24:b2:9f:d9:12:c6:7d:3c:8d:db:ae:07:
         11:62:84:5a:eb:50:b9:a8:2c:26:88:53:2f:d3:40:bd:3d:23:
         1b:80:4f:df:83:19:44:07:4b:16:0a:c6:0a:67:da:cc:5c:3f:
         d8:c7:ca:72:4d:2f:46:32:2d:3a:02:d0:81:b3:65:d5:e5:77:
         96:86:ff:8b:e3:b2:44:b2:0f:3c:f8:7e:f9:4c:c8:89:58:6d:
         13:65:79:10:24:c8:5a:04:61:76:09:3a:d2:43:cf:f1:e3:33:
         5d:27:ce:d9:4e:34:f1:81:58:ee:40:37:c8:8b:f5:1b:a4:0c:
         8e:04:70:b2:06:01:26:57:fe:5e:20:90:ca:2e:68:38:d3:0c:
         bd:0c:af:09:db:c2:9b:33:6f:da:ef:c1:78:8e:e0:1f:f8:59:
         cc:e6:9f:77:1f:94:36:ef:1c:0c:38:b7:b4:cc:26:d9:a3:1b:
         9c:2b:60:d3
-----BEGIN CERTIFICATE-----
MIIFczCCBFugAwIBAgISAYVwHXxrzMzpOrMuOikv8MloMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjMwMTAyMDEzNDE4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkN2ZjMTBiMzcwZmVkOTIzZTE4M2JhZjM3MzVkZmJmYTBhOTQyMjlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtEoiKvsk66WSEu//nGgj0RZG/V65
FfKb77djMygmm2gdpTvYuZag2NiNeyQLwZPKj1wsEpZN17NPZ3gjpgUX533Uyr3e
MdrqEFfxFYPH57mRpT0s5N1h1gvu63ikf+xMYlfyHjSXIVnJz/JdjJdf91+c75ty
eZnBDVM5/xseDhdgGWoY93P4CTdT/zNKWFPYSGCvn/4LGvBVxXFryxjX7rK0lQFR
p4eeA3PIh4YSJOfQMU5lLqq3RpwyhcI6FFYs6kto+RmRdbIiKpBgWo7YP1xaAEWT
8z2RVQPlXpqzOgAVGqL2RqVpwnne2jTk24nam8ecb6ngvvvIHz3NB3fHEwIDAQAB
o4ICfzCCAnswHQYDVR0OBBYEFNf8ELNw/tkj4YO683Nd+/oKlCKaMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2M0LzY1ZDdi
OS1jY2Y5LTRiNzMtYjY2OS0zNTMzYTUxMmZjZjcvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzQvNjVkN2I5
LWNjZjktNGI3My1iNjY5LTM1MzNhNTEyZmNmNy8xLzFfd1FzM0QtMlNQaGc3cnpj
MTM3LWdxVUlwby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwM75jANBgkqhkiG9w0BAQsFAAOCAQEAYJHC6qDnkFPo
JmCNqiI8VzqXCm3TWLhvBPIKc0EruLn2XRQL4A9jkXbSkzQJLzIVMUfQsrC89NhE
xOVYLkSsprBs49GBAjnTHICxjAWwJLKf2RLGfTyN264HEWKEWutQuagsJohTL9NA
vT0jG4BP34MZRAdLFgrGCmfazFw/2MfKck0vRjItOgLQgbNl1eV3lob/i+OyRLIP
PPh++UzIiVhtE2V5ECTIWgRhdgk60kPP8eMzXSfO2U408YFY7kA3yIv1G6QMjgRw
sgYBJlf+XiCQyi5oONMMvQyvCdvCmzNv2u/BeI7gH/hZzOafdx+UNu8cDDi3tMwm
2aMbnCtg0w==
-----END CERTIFICATE-----