Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/MDel92eXR4OanF10DhCpQRkXV3I.cer
File:                     MDel92eXR4OanF10DhCpQRkXV3I.cer (raw, json)
Hash identifier:          UjuKy0auOKNoAHsAfYl12OQMeHlUKgsgTZ52IRzmuHI=
Subject key identifier:   30:37:A5:F7:67:97:47:83:9A:9C:5D:74:0E:10:A9:41:19:17:57:72
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856C3E5B7CFE009EC9F2BE9A6EFAF570E0
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/00/70337f-65ee-4242-bb29-22f4b9cf8f9f/1/MDel92eXR4OanF10DhCpQRkXV3I.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/00/70337f-65ee-4242-bb29-22f4b9cf8f9f/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 07:31:44 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 194.150.76.0/24
                          IP: 2a11:9200::/29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6c:3e:5b:7c:fe:00:9e:c9:f2:be:9a:6e:fa:f5:70:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 07:31:44 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=3037a5f7679747839a9c5d740e10a94119175772
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:65:84:b6:56:af:89:3b:54:a7:d8:9a:ef:65:
                    87:26:5b:59:99:e0:d4:f4:48:08:f1:4e:5d:25:86:
                    40:73:e7:7d:e3:94:ac:52:a2:d9:51:0d:8b:b9:a2:
                    f3:c7:c3:8b:53:f1:12:11:1a:4f:cc:c7:9a:8f:c7:
                    07:6a:0f:24:e5:c6:61:72:2f:1a:9c:90:95:4f:e1:
                    9e:bd:d2:87:5f:f5:95:cb:86:10:50:92:b8:b0:b8:
                    45:f8:d1:d8:e2:50:bf:b8:51:80:ac:61:a8:47:23:
                    a7:fe:06:54:03:58:8e:97:8f:96:be:6c:9c:f4:6d:
                    ba:6d:7d:ae:7c:ef:fb:41:3b:c2:90:f0:b7:03:24:
                    4e:b6:23:6d:0c:0a:3a:bb:3f:e8:e9:10:89:4b:e3:
                    0b:71:18:d6:64:90:fc:b9:3d:2d:b7:7f:31:4d:0c:
                    01:f2:cc:85:e2:7d:d2:9d:f8:9d:84:b8:8e:5e:70:
                    3b:09:15:82:7b:f6:5a:64:f4:e4:a0:bb:8f:a7:26:
                    f1:70:ed:bc:de:dd:6a:48:ba:86:b3:7a:51:ab:44:
                    95:98:cb:df:73:d0:1e:e1:29:d2:2a:f5:98:40:c6:
                    05:16:01:6f:0d:cc:97:db:09:c1:cd:15:31:ba:17:
                    5a:8a:b9:5d:de:92:1d:5c:84:2d:95:51:22:1d:40:
                    f5:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:37:A5:F7:67:97:47:83:9A:9C:5D:74:0E:10:A9:41:19:17:57:72
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/70337f-65ee-4242-bb29-22f4b9cf8f9f/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/70337f-65ee-4242-bb29-22f4b9cf8f9f/1/MDel92eXR4OanF10DhCpQRkXV3I.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.150.76.0/24
                IPv6:
                  2a11:9200::/29

    Signature Algorithm: sha256WithRSAEncryption
         46:90:9a:0a:b0:24:0f:45:41:82:9b:b0:e5:4c:1c:3f:57:ba:
         45:34:a2:0a:b6:bc:66:6d:fa:c3:27:03:1e:93:4c:d0:b8:e8:
         f6:ba:db:94:f0:ba:b7:15:c3:bf:a5:15:0f:c6:8f:73:e3:bb:
         9e:ff:2f:02:f5:1e:95:85:37:ed:34:1f:ed:0b:2c:af:4f:17:
         28:b8:88:e1:e4:60:02:01:e6:14:3e:66:40:ba:93:19:8a:a1:
         a4:e1:b9:bd:f4:3d:4f:22:1f:29:39:d3:70:42:bc:6b:51:1d:
         3a:f5:5a:5e:12:ba:11:15:9f:07:63:6b:66:ec:25:fd:a9:50:
         a3:75:db:00:8d:76:e2:f7:30:bf:d3:0b:5d:ab:b4:fe:eb:2f:
         67:a5:bf:e0:1f:c0:a8:ff:37:96:a7:cf:56:74:25:dc:d0:72:
         92:dd:66:36:1d:90:85:5e:86:05:74:30:3d:86:25:8c:5c:93:
         87:bd:9e:bd:f5:c5:86:c6:29:8e:7f:f2:1a:0e:23:7b:b3:4c:
         35:61:07:80:7e:d5:31:52:50:09:c9:89:67:29:6d:ed:79:e3:
         55:5b:4c:e2:0b:06:32:ce:e0:cf:6e:84:90:5f:98:92:6d:07:
         83:56:8e:ab:04:88:2c:13:90:8f:27:dd:69:f4:37:ba:80:4b:
         ee:92:de:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----