Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/QPFuUGrg7GxB7wQ3uFURBHS6R9w.cer
File:                     QPFuUGrg7GxB7wQ3uFURBHS6R9w.cer (raw, json)
Hash identifier:          ShUWvyabeup6D+NMk8je6PuXKoTktvWrmVu/GLOoHAk=
Subject key identifier:   40:F1:6E:50:6A:E0:EC:6C:41:EF:04:37:B8:55:11:04:74:BA:47:DC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018681195DA3B3E5B26C304F706A03D68A44
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/08/2e0c9a-66e1-4850-9abb-cc3efec187b9/1/QPFuUGrg7GxB7wQ3uFURBHS6R9w.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/08/2e0c9a-66e1-4850-9abb-cc3efec187b9/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 24 Feb 2023 01:46:08 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 194.145.237.0/24

Validation:               Failed, certificate revoked on Thu 02 Mar 2023 06:58:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:81:19:5d:a3:b3:e5:b2:6c:30:4f:70:6a:03:d6:8a:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Feb 24 01:46:08 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=40f16e506ae0ec6c41ef0437b855110474ba47dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:a9:1a:2c:4c:4c:64:c6:ab:28:4c:f4:22:7b:
                    71:b4:04:38:9a:ee:ff:09:d9:19:54:68:fe:2a:f1:
                    42:d6:5e:d4:55:02:ff:15:c7:38:44:70:91:02:65:
                    3c:aa:20:6a:1a:a6:2f:e7:23:77:94:d2:79:9a:38:
                    36:db:a8:be:80:4d:7a:f6:03:1f:c2:77:d7:95:4e:
                    f3:a1:9a:8a:5c:f5:28:ee:06:78:f3:47:84:1e:43:
                    c8:dd:a3:61:1c:2e:37:16:6e:07:69:6c:78:f2:8a:
                    85:a0:41:46:12:42:d2:54:b0:c8:42:66:ed:ca:1c:
                    5f:f1:40:ba:b0:d7:5b:c7:1d:fd:b4:86:e9:42:5c:
                    1f:df:a6:62:e2:8f:0a:71:30:5d:4f:bf:f5:fb:8b:
                    c7:ea:9e:a9:d8:99:2e:94:1a:4f:82:48:ef:58:f7:
                    14:3b:7a:00:07:f7:5c:2f:2d:6d:e3:15:b0:c5:a5:
                    d3:16:99:ca:ca:97:a7:7f:10:d4:ff:dc:04:8a:2a:
                    22:e9:3b:10:fa:67:13:54:8c:36:58:e2:b9:61:a1:
                    b2:b4:50:5e:a0:2f:f8:cf:f0:e4:4a:b7:3f:80:23:
                    d3:5b:2f:17:34:37:66:4a:85:bd:ec:79:9d:9d:ae:
                    cd:7d:1b:be:77:67:1b:7b:35:9a:79:8c:06:b8:d2:
                    7a:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:F1:6E:50:6A:E0:EC:6C:41:EF:04:37:B8:55:11:04:74:BA:47:DC
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/2e0c9a-66e1-4850-9abb-cc3efec187b9/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/2e0c9a-66e1-4850-9abb-cc3efec187b9/1/QPFuUGrg7GxB7wQ3uFURBHS6R9w.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.145.237.0/24

    Signature Algorithm: sha256WithRSAEncryption
         16:b7:b7:6f:79:d2:30:74:d5:15:d3:5d:24:8f:f3:c0:7d:27:
         d8:46:67:39:ef:dc:e5:14:e5:b4:c8:77:72:6a:fb:72:d8:bf:
         53:93:13:37:42:a9:16:10:4b:05:00:c9:da:79:01:bc:05:1f:
         fe:87:8c:23:41:74:bd:e8:c7:75:04:a5:60:b4:93:c1:4a:9f:
         7b:e1:e4:c6:e0:6c:d4:8e:d5:f2:a7:3e:bc:e5:f0:9d:40:83:
         d5:7b:f5:4a:31:c3:16:e7:5b:fe:47:88:13:00:f8:a9:ca:59:
         61:e1:98:b1:8b:ec:7c:ef:69:54:9f:2e:1d:89:86:05:89:5d:
         8f:64:75:71:57:7d:1e:ef:71:f7:3b:21:3e:07:d3:eb:9d:39:
         86:21:3d:1b:b5:ee:4c:e7:e4:0b:57:b7:89:75:a5:8d:75:aa:
         97:6a:d2:77:cf:ac:d9:bd:94:e2:f7:03:a2:f5:2b:36:c6:20:
         d6:e0:93:6c:c4:50:16:61:d6:d2:d9:95:45:39:88:d0:38:c5:
         78:0d:a7:35:58:7d:25:4f:bc:4d:89:20:60:02:bb:4f:a0:be:
         bc:e9:ea:3d:ec:cd:2b:63:5c:78:d9:1c:c4:81:d9:0d:c5:48:
         a9:58:3b:62:85:de:7e:29:a3:45:ac:19:dd:10:2f:9e:e3:81:
         d9:4a:d5:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----