Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/iTz63G28Hdm6DkdAbO2zBsaoWVc.cer
File:                     iTz63G28Hdm6DkdAbO2zBsaoWVc.cer (raw, json)
Hash identifier:          C0/SZm94RdwpQstU47SuC5i/wULxnLizZBvajhUNkjc=
Subject key identifier:   89:3C:FA:DC:6D:BC:1D:D9:BA:0E:47:40:6C:ED:B3:06:C6:A8:59:57
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856AF5034284152406CF7C9C8E777ED86C
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/e6/9653e5-79bd-48ae-86ed-f9bd384f6215/1/iTz63G28Hdm6DkdAbO2zBsaoWVc.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/e6/9653e5-79bd-48ae-86ed-f9bd384f6215/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 01:32:00 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 37.72.141.0/24
                          IP: 2a12:ef80::/29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6a:f5:03:42:84:15:24:06:cf:7c:9c:8e:77:7e:d8:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 01:32:00 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=893cfadc6dbc1dd9ba0e47406cedb306c6a85957
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:85:a6:3e:48:d5:fe:17:c6:a2:31:ff:29:92:
                    40:e8:13:2b:46:e0:68:48:9f:c3:c4:2e:ad:16:f6:
                    cf:b3:cb:91:0e:85:b6:ff:7a:b1:bc:be:94:25:c5:
                    c9:f3:8a:3f:51:bf:b6:54:9a:84:b4:98:ef:2b:f6:
                    a3:a4:98:aa:ef:f4:79:46:ac:2b:e8:f8:64:7a:06:
                    c9:59:1a:5a:4d:f9:52:9f:a4:b6:8c:12:fc:10:31:
                    57:a5:cb:52:20:33:b5:91:bf:d8:e4:34:a6:3e:34:
                    4b:21:f0:d1:1d:6c:c1:9a:b2:ca:c9:af:6e:98:06:
                    ab:44:43:e0:25:fe:38:14:1e:d5:b4:b2:f6:f3:3e:
                    a3:74:a7:5c:d9:8c:77:c6:99:9c:57:3b:d6:11:a1:
                    54:61:c4:25:e6:3e:45:82:92:f7:f6:79:66:61:b7:
                    13:4b:33:06:75:03:ef:a8:12:4f:96:9f:85:b2:66:
                    bf:e3:10:47:0d:92:d0:1a:65:dc:2f:90:41:85:b2:
                    10:1a:dd:7c:ce:b3:33:eb:b9:fc:11:d7:6a:19:64:
                    22:14:b5:17:9b:2a:6b:30:87:10:01:c1:e5:12:25:
                    4c:ec:ba:8b:f6:41:77:31:97:25:d5:d9:71:c9:4c:
                    85:97:dd:8e:73:5b:e9:db:7d:d4:59:89:16:d7:98:
                    7f:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:3C:FA:DC:6D:BC:1D:D9:BA:0E:47:40:6C:ED:B3:06:C6:A8:59:57
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/9653e5-79bd-48ae-86ed-f9bd384f6215/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/9653e5-79bd-48ae-86ed-f9bd384f6215/1/iTz63G28Hdm6DkdAbO2zBsaoWVc.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  37.72.141.0/24
                IPv6:
                  2a12:ef80::/29

    Signature Algorithm: sha256WithRSAEncryption
         78:3d:39:1e:ef:af:c1:90:9f:c5:bd:71:31:b1:93:07:d2:96:
         af:56:bd:d1:a8:c7:e6:b6:91:90:63:ec:18:4c:1a:f0:99:8c:
         51:4f:69:71:9e:6e:10:0a:c7:8a:57:d9:51:65:59:d4:77:5a:
         95:65:07:39:51:d5:38:7b:0a:90:dd:2c:70:ee:54:a8:ef:88:
         5f:73:11:4a:a8:08:4f:38:b7:fc:65:81:07:d1:83:e5:7c:5a:
         34:3f:1a:12:06:79:7e:82:93:05:37:a1:bf:29:9c:c7:0d:87:
         44:ad:ad:17:fc:37:4d:58:93:11:e5:8e:d9:62:08:5e:d5:3a:
         6a:6f:6e:bc:ff:d7:4c:63:05:0b:7b:a4:95:26:5d:b0:5e:d4:
         ce:8a:29:ef:7c:30:fe:4d:3a:72:46:66:af:02:9c:0d:aa:58:
         07:9e:85:ea:07:02:6d:a6:74:59:5d:c0:cf:5e:05:87:dd:81:
         1f:aa:bd:5f:2d:0d:77:83:54:40:11:16:b0:f0:62:ca:e7:91:
         eb:be:1c:2e:5e:0d:6a:dd:77:c7:a7:dc:23:86:b5:c1:3b:fd:
         5e:57:28:3c:2c:41:a4:81:78:ef:b4:24:21:d3:0e:8f:59:29:
         34:68:f9:ae:c7:8f:09:39:2c:4f:d7:15:d0:6d:d1:83:72:a6:
         c4:f8:42:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----