Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/xGInsM8rF-CXwK2llYy5hUgTfJM.cer
File:                     xGInsM8rF-CXwK2llYy5hUgTfJM.cer (raw, json)
Hash identifier:          Zw+9MF9y0DbRYEeriHWQeWWd3Nr0CfYqfLtL6HbBHc4=
Subject key identifier:   C4:62:27:B0:CF:2B:17:E0:97:C0:AD:A5:95:8C:B9:85:48:13:7C:93
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0185708C096232B7FE6125A6B9DE6E0A996B
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/c9/c9c01b-16d1-4685-bd72-70e12727a445/1/xGInsM8rF-CXwK2llYy5hUgTfJM.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/c9/c9c01b-16d1-4685-bd72-70e12727a445/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 02 Jan 2023 03:35:03 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    AS: 60227
                          IP: 46.254.176.0/21
                          IP: 93.94.32.0/21
                          IP: 185.34.84.0/22
                          IP: 2a02:6a40::/32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:8c:09:62:32:b7:fe:61:25:a6:b9:de:6e:0a:99:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 03:35:03 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=c46227b0cf2b17e097c0ada5958cb98548137c93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:ec:5f:e1:4e:e4:c6:f8:89:e1:b8:2e:73:a6:
                    97:a8:5a:47:0a:d7:cf:f5:98:9c:d5:92:c3:e8:dd:
                    7e:39:29:95:7f:bf:eb:eb:22:b3:16:44:2b:6d:09:
                    2c:f2:f9:87:6b:15:27:72:61:3e:8f:6e:c7:ad:26:
                    b0:2d:6b:9c:e1:36:f3:63:37:e0:6a:7e:53:16:4e:
                    ba:08:f4:75:38:57:ee:90:44:d4:38:8e:40:33:43:
                    a8:ba:c8:cf:4e:bb:01:72:70:42:b4:e7:29:f7:a0:
                    c9:94:e3:c9:14:05:7a:c1:12:c2:ee:ac:41:6f:f0:
                    fe:4c:af:b4:a8:89:c5:45:08:40:05:53:8a:66:4b:
                    11:b9:b6:00:25:da:36:6a:20:e9:db:5a:ef:4a:5e:
                    6b:ee:2b:b0:b1:c6:e2:6a:ae:ad:64:39:f6:a8:9e:
                    a6:4d:be:9f:6a:9b:cf:92:51:8b:5b:2a:37:e7:60:
                    2b:21:da:a8:f3:55:b2:c0:54:f4:2e:9e:90:87:ca:
                    c1:ae:b5:75:35:01:c1:69:31:89:8c:8a:96:22:46:
                    ca:7f:41:a0:e3:e6:49:62:50:d1:26:7c:20:cf:9a:
                    8a:36:6b:71:42:c8:81:a1:07:73:89:7f:a4:88:ed:
                    88:63:15:ba:c7:41:45:c5:14:3d:1c:ed:f7:7a:c7:
                    3e:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:62:27:B0:CF:2B:17:E0:97:C0:AD:A5:95:8C:B9:85:48:13:7C:93
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/c9c01b-16d1-4685-bd72-70e12727a445/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/c9c01b-16d1-4685-bd72-70e12727a445/1/xGInsM8rF-CXwK2llYy5hUgTfJM.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.254.176.0/21
                  93.94.32.0/21
                  185.34.84.0/22
                IPv6:
                  2a02:6a40::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  60227

    Signature Algorithm: sha256WithRSAEncryption
         1c:10:b7:19:b2:38:da:4b:8a:99:0c:32:67:96:6f:b7:71:56:
         59:d4:ff:f5:51:1e:8f:6f:8a:47:23:ff:48:59:11:16:7a:c7:
         76:51:23:7c:f8:37:a4:75:af:7d:56:ca:2d:56:93:ba:24:1d:
         4d:de:f2:06:ab:7a:69:3a:d1:43:ec:37:8c:23:83:bd:e2:87:
         0b:77:a5:ec:fa:81:29:56:9d:7a:92:ee:fa:5c:0a:38:46:7a:
         44:48:71:6d:c2:a7:92:af:bb:31:39:68:d6:a0:ae:93:42:5e:
         06:3c:b0:df:c1:5a:f5:dc:28:e7:b5:66:eb:21:b5:ad:da:33:
         50:21:0c:cc:12:42:8d:82:c0:3e:52:e6:dd:4f:42:14:51:97:
         07:aa:17:22:50:f3:e7:cf:0d:63:5d:9f:01:08:66:8f:85:4d:
         d0:b8:54:b5:56:3c:cf:7d:d5:31:6c:25:c6:96:83:8f:1e:08:
         cf:c8:42:dc:4a:60:05:da:f7:74:ca:5f:50:e1:08:07:e0:c2:
         75:99:78:4a:3f:e8:cb:21:23:c0:ad:a6:ca:16:d4:09:0b:58:
         6b:09:9b:36:7b:e4:0c:a0:11:d5:94:31:4a:48:67:fc:88:0b:
         ca:5f:4b:2f:da:6c:0f:a1:45:ab:bb:95:e3:f3:67:05:be:d1:
         d9:d3:b1:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----