Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/wAlzpDG0G2Ac6BhJ1NXf0mVPdqc.cer
File:                     wAlzpDG0G2Ac6BhJ1NXf0mVPdqc.cer (raw, json)
Hash identifier:          mAZVjV027sOLnnvx1zriYvCCpDL5jQmT6egZGib0Xw0=
Subject key identifier:   C0:09:73:A4:31:B4:1B:60:1C:E8:18:49:D4:D5:DF:D2:65:4F:76:A7
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018964788EA22707126AAB9B871430A82B29
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/a7/d5d899-4def-4ddb-ab95-9c65100e8084/1/wAlzpDG0G2Ac6BhJ1NXf0mVPdqc.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/a7/d5d899-4def-4ddb-ab95-9c65100e8084/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 17 Jul 2023 15:29:29 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    AS: 51711
                          IP: 109.94.163.0/24
                          IP: 2a11:2980::/29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:64:78:8e:a2:27:07:12:6a:ab:9b:87:14:30:a8:2b:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jul 17 15:29:29 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=c00973a431b41b601ce81849d4d5dfd2654f76a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:e0:f7:75:3f:9d:2f:a5:a3:d3:8d:c6:0b:1d:
                    55:51:62:f6:df:68:d1:0f:fc:74:ac:f1:8f:4d:00:
                    e9:36:9a:a6:6e:4c:2e:ea:43:82:83:70:b1:d2:be:
                    40:6d:0c:28:30:9d:a1:8d:fb:46:c5:10:9f:7f:fd:
                    88:6d:a7:b3:2f:12:ec:4c:9b:09:25:3f:25:87:ed:
                    65:1d:cb:7a:ab:9e:62:84:54:0f:93:e7:ea:bb:61:
                    25:1e:98:17:b7:7e:04:ce:80:9d:5b:1e:1c:10:ce:
                    3c:e1:27:ae:fc:e0:a6:e5:1e:14:ad:05:c2:48:25:
                    b5:39:bd:43:c4:ce:c8:53:22:29:2a:43:62:1a:0d:
                    e3:0a:66:54:5a:47:09:b8:05:6d:b1:c8:53:7b:a2:
                    89:49:e9:6a:31:ac:b6:fa:e4:d3:4d:6c:fc:6e:fa:
                    bb:44:91:5e:b9:4e:d7:e3:62:57:5e:18:a8:9e:95:
                    3d:49:89:30:70:a4:52:83:3f:e7:82:dd:c6:6b:ad:
                    2a:1d:00:bb:7b:aa:0f:ce:e5:86:3a:c8:3c:df:d9:
                    b5:ea:99:f7:8b:cb:ab:3f:c2:b0:a6:e7:48:81:b8:
                    dc:fc:9e:fb:16:5b:5a:fc:7a:26:43:d6:c9:ec:87:
                    7d:ed:48:20:5b:ea:b5:d2:d9:b1:e6:92:cf:a0:8e:
                    72:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:09:73:A4:31:B4:1B:60:1C:E8:18:49:D4:D5:DF:D2:65:4F:76:A7
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/d5d899-4def-4ddb-ab95-9c65100e8084/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/d5d899-4def-4ddb-ab95-9c65100e8084/1/wAlzpDG0G2Ac6BhJ1NXf0mVPdqc.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  109.94.163.0/24
                IPv6:
                  2a11:2980::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  51711

    Signature Algorithm: sha256WithRSAEncryption
         1a:a9:21:97:a1:cd:34:ca:a5:5f:92:e1:1e:b8:8d:58:6d:bb:
         9b:cb:ad:f4:d0:64:9e:63:74:e8:be:f5:97:3d:19:af:b9:84:
         18:72:39:2a:42:d6:7b:2f:80:1c:4e:9e:7a:76:dd:f0:a5:89:
         42:b9:c5:31:99:a1:71:7d:3d:89:d8:04:09:f3:44:e0:db:42:
         b2:2d:53:12:fb:ac:05:78:da:4e:e8:ac:da:38:84:bd:7d:26:
         80:b5:d5:99:13:b3:eb:8a:d5:74:05:ea:da:7d:06:ed:f1:bc:
         50:d0:33:64:be:80:2c:1b:89:bf:41:e2:e6:f2:b4:c9:c2:e9:
         80:13:4c:5d:a6:ec:1f:fb:51:b6:13:46:ac:9a:de:fe:a5:41:
         45:2c:1e:08:c1:cd:da:8a:3b:98:97:f5:48:7a:0c:29:0d:6b:
         82:02:1b:b6:d3:d5:56:3e:b0:bd:e1:de:60:94:00:30:fb:cd:
         bc:85:85:f9:a9:1e:4b:3c:63:b5:c4:db:d5:6e:28:05:a5:c5:
         94:c0:de:86:05:bd:19:4d:ec:81:ba:25:6b:84:50:c3:a9:15:
         6e:7e:cb:7e:6f:e2:20:5b:23:26:af:bc:53:ef:e6:c4:fc:1b:
         13:4d:a5:3e:ce:fe:01:a6:17:90:78:53:7a:04:68:8c:11:77:
         d6:db:5f:fb
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgISAYlkeI6iJwcSaqubhxQwqCspMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjMwNzE3MTUyOTI5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMDA5NzNhNDMxYjQxYjYwMWNlODE4NDlkNGQ1ZGZkMjY1NGY3NmE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtuD3dT+dL6Wj043GCx1VUWL232jR
D/x0rPGPTQDpNpqmbkwu6kOCg3Cx0r5AbQwoMJ2hjftGxRCff/2IbaezLxLsTJsJ
JT8lh+1lHct6q55ihFQPk+fqu2ElHpgXt34EzoCdWx4cEM484Seu/OCm5R4UrQXC
SCW1Ob1DxM7IUyIpKkNiGg3jCmZUWkcJuAVtschTe6KJSelqMay2+uTTTWz8bvq7
RJFeuU7X42JXXhionpU9SYkwcKRSgz/ngt3Ga60qHQC7e6oPzuWGOsg839m16pn3
i8urP8KwpudIgbjc/J77Flta/HomQ9bJ7Id97UggW+q10tmx5pLPoI5ybwIDAQAB
o4ICrzCCAqswHQYDVR0OBBYEFMAJc6QxtBtgHOgYSdTV39JlT3anMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2E3L2Q1ZDg5
OS00ZGVmLTRkZGItYWI5NS05YzY1MTAwZTgwODQvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTcvZDVkODk5
LTRkZWYtNGRkYi1hYjk1LTljNjUxMDBlODA4NC8xL3dBbHpwREcwRzJBYzZCaEox
TlhmMG1WUGRxYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQAbV6jMA0EAgACMAcDBQMqESmAMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwDJ/zANBgkqhkiG9w0BAQsFAAOCAQEAGqkhl6HNNMql
X5LhHriNWG27m8ut9NBknmN06L71lz0Zr7mEGHI5KkLWey+AHE6eenbd8KWJQrnF
MZmhcX09idgECfNE4NtCsi1TEvusBXjaTuis2jiEvX0mgLXVmROz64rVdAXq2n0G
7fG8UNAzZL6ALBuJv0Hi5vK0ycLpgBNMXabsH/tRthNGrJre/qVBRSweCMHN2oo7
mJf1SHoMKQ1rggIbttPVVj6wveHeYJQAMPvNvIWF+akeSzxjtcTb1W4oBaXFlMDe
hgW9GU3sgbola4RQw6kVbn7Lfm/iIFsjJq+8U+/mxPwbE02lPs7+AaYXkHhTegRo
jBF31ttf+w==
-----END CERTIFICATE-----