Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/NQSk8r1D4PSgZzuHQ_FfvVFFmf4.cer
File:                     NQSk8r1D4PSgZzuHQ_FfvVFFmf4.cer (raw, json)
Hash identifier:          ITCrDT1Vle5iAIxO2ThQzSKlBnLfiRyWFEFLA4sAQ2c=
Subject key identifier:   35:04:A4:F2:BD:43:E0:F4:A0:67:3B:87:43:F1:5F:BD:51:45:99:FE
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856CAD24DD42F74B961E7621754235871B
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/6e/ba9884-818c-4bfc-b77d-1fcda48abe53/1/NQSk8r1D4PSgZzuHQ_FfvVFFmf4.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/6e/ba9884-818c-4bfc-b77d-1fcda48abe53/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 09:32:44 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 62.3.18.0/24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6c:ad:24:dd:42:f7:4b:96:1e:76:21:75:42:35:87:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 09:32:44 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=3504a4f2bd43e0f4a0673b8743f15fbd514599fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:1c:7c:67:2c:e8:5f:82:c1:a3:91:65:3f:cd:
                    72:9a:51:0a:20:cb:10:8b:f5:fe:e0:84:1e:89:0d:
                    aa:7d:b5:b1:0e:2f:c3:91:a0:8a:f2:e5:2c:9d:50:
                    06:41:7a:aa:db:04:0a:92:a4:4d:81:9e:01:e9:35:
                    ed:28:04:bf:92:70:a7:2b:57:11:20:a3:65:c3:9d:
                    60:0a:d6:d3:75:e3:d7:e9:c4:7c:e5:c9:32:73:00:
                    f8:73:f8:48:54:8b:08:51:ea:f5:58:e7:f8:05:b5:
                    d0:a2:49:63:3b:b4:73:05:72:1a:cf:88:ca:3b:83:
                    03:20:34:67:89:8b:af:35:af:cd:7a:84:9e:ee:11:
                    21:96:dc:67:12:86:5b:bd:45:56:f8:19:d8:83:98:
                    31:a7:b5:60:92:ea:c6:45:da:3a:bd:c9:0e:16:71:
                    5f:04:72:cc:4e:c8:80:bc:97:c0:6f:28:85:3c:f8:
                    fb:81:f7:37:5d:a9:39:a5:d2:c4:ac:76:c3:d4:8e:
                    5b:33:3f:9d:fe:d7:dd:19:4e:f2:28:b4:0b:a4:7c:
                    80:04:b1:9e:02:30:fb:e4:77:27:91:c4:e4:83:55:
                    87:f8:89:ab:7f:14:30:0b:91:f8:53:52:22:7d:7d:
                    b6:d1:67:e5:7b:35:85:46:b6:74:ef:aa:4d:02:db:
                    e5:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:04:A4:F2:BD:43:E0:F4:A0:67:3B:87:43:F1:5F:BD:51:45:99:FE
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/ba9884-818c-4bfc-b77d-1fcda48abe53/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/ba9884-818c-4bfc-b77d-1fcda48abe53/1/NQSk8r1D4PSgZzuHQ_FfvVFFmf4.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.3.18.0/24

    Signature Algorithm: sha256WithRSAEncryption
         12:54:f1:1a:24:86:c4:98:4c:43:a4:7c:9d:bf:b2:41:64:a4:
         65:13:61:de:10:cf:01:82:d8:1a:41:c9:b6:7a:eb:fe:38:0b:
         0e:97:bb:25:71:d4:4f:e2:d4:e4:35:f6:29:4d:12:ed:15:a9:
         79:b1:f1:08:e9:17:b7:3d:1d:30:99:ed:1a:91:c6:03:f9:dd:
         44:d2:c4:bb:a2:09:ef:7e:4c:46:b9:81:20:8f:f6:45:f0:e4:
         17:86:c0:71:d0:ef:1f:5e:36:09:00:73:97:9b:42:ae:9d:5f:
         9a:99:22:8d:9a:3a:03:3d:71:39:e0:17:7d:41:bc:32:d9:b6:
         b1:a1:5a:23:06:aa:89:e5:9f:b3:8c:fa:aa:f6:23:12:c0:c5:
         2c:b5:43:33:84:83:33:6d:14:d1:f0:55:01:44:7c:a7:ba:49:
         2d:5e:aa:41:eb:6d:f8:44:32:d2:d3:c6:01:c6:4a:08:f9:22:
         c5:7f:fc:a1:fb:7b:1a:ae:c8:1c:b2:4d:aa:bb:ba:82:69:1f:
         cd:8f:ee:6c:07:73:da:8b:db:aa:ec:a6:01:fc:a3:d9:53:3e:
         78:be:e3:66:19:0c:22:43:c3:c7:ff:f6:e0:68:f9:50:c5:22:
         53:c4:1e:09:6c:b9:6d:f5:8b:d0:85:d7:b1:e8:59:fe:88:c3:
         36:30:89:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----