Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6qodwaOrKLNLx7D21MD7CVTAi4E.cer
File:                     6qodwaOrKLNLx7D21MD7CVTAi4E.cer (raw, json)
Hash identifier:          LUV6h1IBh7rBbKLkUdzRQTGaCKtaJc+lK83b2Fxrx2A=
Subject key identifier:   EA:AA:1D:C1:A3:AB:28:B3:4B:C7:B0:F6:D4:C0:FB:09:54:C0:8B:81
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018572E86DE3B1ED9396991B462552B619EB
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/49/c79f9d-fbb2-42d9-aa12-0e2daf0b9996/1/6qodwaOrKLNLx7D21MD7CVTAi4E.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/49/c79f9d-fbb2-42d9-aa12-0e2daf0b9996/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 02 Jan 2023 14:35:13 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    AS: 211199
                          IP: 185.7.215.0/24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:72:e8:6d:e3:b1:ed:93:96:99:1b:46:25:52:b6:19:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 14:35:13 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=eaaa1dc1a3ab28b34bc7b0f6d4c0fb0954c08b81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:d8:1d:40:04:48:7e:a6:a6:d1:af:78:86:c1:
                    16:a8:07:83:59:e4:b8:89:98:43:43:90:53:0b:b4:
                    33:13:71:f8:35:4f:b7:d9:90:fd:78:82:0b:35:9f:
                    14:70:c3:04:86:10:56:44:d6:f6:9a:42:da:eb:f6:
                    6d:49:6e:35:d3:59:92:af:50:27:3a:41:20:b5:f5:
                    b2:a8:87:c1:83:50:3c:bd:79:7a:f7:fe:94:62:53:
                    c6:69:e7:c8:ad:f8:3a:94:27:54:78:19:cf:00:20:
                    63:93:17:16:f8:f7:6e:ef:ac:f2:aa:93:48:24:45:
                    6b:b6:71:dc:8f:fe:d5:e8:05:69:fc:ca:62:6f:bb:
                    de:dc:32:78:90:65:e6:f0:c3:b8:a6:f9:80:d5:b3:
                    e5:5f:a3:22:92:d3:16:a7:58:4b:0b:f9:e6:3f:4b:
                    c3:b8:cd:be:9f:da:ed:8f:6c:20:70:ea:17:f4:ae:
                    b6:eb:d2:b3:9a:6b:cb:1e:24:ff:70:c7:be:50:32:
                    7a:5f:b6:18:da:a3:db:1b:77:ea:8a:96:8c:a6:dc:
                    8b:23:60:46:f3:f7:ba:d4:70:18:78:46:fa:d6:f0:
                    fb:d4:e7:a9:9f:7d:ef:61:20:85:e0:bf:a0:d2:7a:
                    8b:c0:25:92:65:bc:35:84:d5:ed:ca:98:4a:c7:65:
                    33:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:AA:1D:C1:A3:AB:28:B3:4B:C7:B0:F6:D4:C0:FB:09:54:C0:8B:81
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/c79f9d-fbb2-42d9-aa12-0e2daf0b9996/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/c79f9d-fbb2-42d9-aa12-0e2daf0b9996/1/6qodwaOrKLNLx7D21MD7CVTAi4E.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.7.215.0/24

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  211199

    Signature Algorithm: sha256WithRSAEncryption
         8e:b9:ad:ca:e4:58:48:31:5d:d1:b8:55:ff:4d:a1:5f:9a:73:
         1b:5c:f1:25:d9:1b:37:41:93:d4:3d:c6:82:6e:77:85:d5:77:
         26:ab:83:f7:9e:56:27:9d:64:97:bb:fe:7a:82:80:02:17:60:
         37:af:23:87:5e:c7:cd:1a:57:a4:49:36:ab:7c:c8:b9:5e:a4:
         fd:fc:0e:fe:3c:84:2f:1d:f3:31:2d:05:0b:48:91:99:1b:10:
         b2:d9:8f:50:6a:1a:14:60:32:23:5c:3b:f0:cc:76:20:11:e0:
         7c:cd:22:32:6c:04:b0:d9:55:8c:ba:d3:fa:42:d8:96:5c:f9:
         68:64:34:3a:18:9e:22:41:8e:16:6a:3d:f9:fa:d9:b8:7d:1c:
         9d:60:4d:12:f4:74:e2:eb:d1:dd:62:35:c4:18:4b:2d:80:d8:
         a2:41:06:82:51:f7:70:24:45:b6:5d:c4:7b:85:7a:c7:38:ff:
         d3:34:bb:89:97:09:58:01:e7:9f:38:9d:55:5c:35:3c:30:a8:
         57:af:b9:0e:72:b4:11:2e:ef:8b:4f:9c:90:ee:5f:60:ff:31:
         38:38:56:45:75:88:8c:6d:3d:69:db:36:0c:08:f7:69:43:b1:
         b3:e1:82:2c:a7:6a:c2:a3:04:d2:3b:95:43:92:65:03:fe:fa:
         ce:22:5a:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 12:26:07 2023 by rpki-client on console-ams.rpki-client.org