Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/PqP19mW7VL1e_OkKJWVhCYY_h4Y.cer
File:                     PqP19mW7VL1e_OkKJWVhCYY_h4Y.cer (raw, json)
Hash identifier:          //j3ZvLIq8M0HWcaJx1E4Dci75jIu80ScHXh3bihkVM=
Subject key identifier:   3E:A3:F5:F6:65:BB:54:BD:5E:FC:E9:0A:25:65:61:09:86:3F:87:86
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856EFBD53837DED48483BDB4D6412726B0
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/72/d342b8-f64d-43f3-875c-1d64b21d3c74/1/PqP19mW7VL1e_OkKJWVhCYY_h4Y.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/72/d342b8-f64d-43f3-875c-1d64b21d3c74/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 20:17:56 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 212.18.116.0/24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6e:fb:d5:38:37:de:d4:84:83:bd:b4:d6:41:27:26:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 20:17:56 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=3ea3f5f665bb54bd5efce90a25656109863f8786
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:db:0e:ab:c7:39:34:be:c3:8b:87:b2:44:ec:
                    3b:94:99:b5:69:5b:56:0b:0d:27:06:c8:f8:17:c1:
                    f4:51:49:bf:0a:ba:62:f9:81:da:97:bf:d5:72:8b:
                    d6:48:d3:0a:e4:9e:fe:8e:a5:b3:c3:98:09:c7:da:
                    69:32:b5:7d:58:8e:d6:dd:a2:b3:32:d3:2e:78:f4:
                    b9:85:97:83:5d:55:10:ea:f1:57:a9:b7:0d:5d:7e:
                    db:ad:85:4d:a3:46:3a:f7:19:23:6c:aa:db:b9:c9:
                    58:b3:cd:58:81:11:dd:0b:f4:ed:3b:9d:cb:fd:65:
                    43:a0:6a:51:af:44:b1:81:60:fd:8a:68:c5:cd:b1:
                    dd:dd:c5:43:09:53:d2:14:a3:94:64:52:61:49:a5:
                    36:66:9b:b4:5d:d3:89:d7:a3:fd:df:b1:35:c1:12:
                    27:57:8c:4a:5c:0b:e3:7c:b3:38:2b:9a:b8:5f:4c:
                    49:b2:f5:48:b3:79:1c:a2:94:fc:ef:40:0f:8b:4d:
                    70:3c:5d:0f:fb:c9:99:85:28:6b:cd:9c:a0:53:cb:
                    90:93:fb:be:61:82:db:64:0a:42:ea:68:dd:e9:a7:
                    6a:0e:38:86:05:b5:e9:56:83:11:ac:dc:c7:99:77:
                    dd:f6:59:10:28:23:a5:8b:8b:9f:8a:7e:4c:77:ea:
                    68:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:A3:F5:F6:65:BB:54:BD:5E:FC:E9:0A:25:65:61:09:86:3F:87:86
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/d342b8-f64d-43f3-875c-1d64b21d3c74/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/d342b8-f64d-43f3-875c-1d64b21d3c74/1/PqP19mW7VL1e_OkKJWVhCYY_h4Y.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.18.116.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1e:b4:d0:1c:27:f2:62:b7:4e:1d:a3:b1:7e:65:49:f7:d2:cb:
         50:f3:fc:90:ab:85:f9:26:31:de:6c:6a:79:07:eb:d2:88:70:
         8e:b0:46:99:11:21:0e:21:5a:a4:ce:6a:2b:a3:da:86:15:75:
         3b:a1:de:f2:53:25:9a:33:75:78:36:92:53:38:4b:9d:0f:c1:
         a6:8d:6b:f2:f7:1f:35:b0:b4:e2:2c:c8:61:61:bb:4c:25:fd:
         81:9a:b2:d0:d9:25:84:87:44:89:79:1c:cf:f0:00:ba:0d:1d:
         8e:f5:87:72:fb:aa:7d:1e:5b:ff:63:8a:ed:b2:1b:a3:8c:d0:
         ef:f3:e0:51:b3:22:9e:e5:2f:2d:6f:67:ae:5f:63:e6:67:c7:
         74:c3:a9:6b:79:a7:7b:f0:c4:de:75:4f:14:a1:b3:c0:07:30:
         0e:f6:a1:44:20:f3:e2:23:db:5e:da:7d:fa:78:7d:9b:1b:e9:
         80:11:02:3d:d8:07:2b:e4:d8:bf:d0:59:35:37:8c:ed:b7:32:
         2c:6d:d7:42:85:7b:c0:e9:85:56:26:9b:ce:2c:2e:87:13:60:
         30:c9:2a:14:d9:8e:4f:85:94:69:46:b8:36:b8:da:e4:f3:b5:
         6f:68:57:41:02:81:d6:84:6e:b9:b2:53:38:09:65:ba:94:52:
         8b:b3:0e:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:00:57 2023 by rpki-client on console-fra.rpki-client.org