Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/QqHbokIK9pWGpH90JutXwk1ih6I.cer
File:                     QqHbokIK9pWGpH90JutXwk1ih6I.cer (raw, json)
Hash identifier:          m3m5/UlGJa4h2LJzPY1igOIhuuRP22H4+trG69VNieM=
Subject key identifier:   42:A1:DB:A2:42:0A:F6:95:86:A4:7F:74:26:EB:57:C2:4D:62:87:A2
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856AF4FEA094EB35773C28BB3B3D0E029C
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/7a/e90619-1fd8-4b0e-a89c-0cdd9cb26735/1/QqHbokIK9pWGpH90JutXwk1ih6I.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/7a/e90619-1fd8-4b0e-a89c-0cdd9cb26735/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 01:31:59 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 212.18.119.0/24
                          IP: 2a12:2a00::/29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6a:f4:fe:a0:94:eb:35:77:3c:28:bb:3b:3d:0e:02:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 01:31:59 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=42a1dba2420af69586a47f7426eb57c24d6287a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:2a:fd:66:3d:25:7a:cd:26:a2:00:11:9b:c0:
                    a5:51:a7:3f:42:c3:c3:b1:14:f3:17:2b:a5:2a:bc:
                    df:54:77:0c:ee:be:44:77:40:f5:bb:13:38:fa:b7:
                    6b:7c:48:e3:03:7d:02:86:e4:c2:b7:8a:22:b2:ec:
                    e4:b2:ef:33:30:91:c1:06:50:3f:f2:79:9b:ab:8e:
                    44:d6:b6:5e:b0:5a:c1:fb:9d:00:28:df:77:f8:2f:
                    b0:e9:85:94:2b:7b:df:d9:a9:15:d7:5c:d6:9a:23:
                    cf:cf:06:ef:95:f1:86:6e:8c:7c:ae:e6:23:30:c0:
                    4f:a1:17:e7:22:ee:f5:e6:ce:3f:49:9e:33:64:16:
                    c3:d8:8b:38:02:1d:e3:7c:e9:78:e6:c0:ef:fb:5f:
                    28:f4:b7:56:b1:4e:c3:b0:1d:7e:2b:e7:90:c5:f6:
                    b9:50:78:50:4b:79:2b:4d:9d:67:88:bf:38:e6:b1:
                    d0:6a:df:6f:10:0c:a6:18:ba:c4:2f:19:60:05:82:
                    2e:09:08:9a:4f:4f:fb:95:66:b9:ba:9c:27:a1:b9:
                    f7:1f:a5:48:53:71:80:03:3b:a3:47:62:2e:10:7d:
                    b6:e6:a0:dc:50:41:98:11:7f:91:44:63:f6:2a:3a:
                    d0:33:5f:f6:15:48:ec:4a:e0:97:33:12:56:e6:5e:
                    b8:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:A1:DB:A2:42:0A:F6:95:86:A4:7F:74:26:EB:57:C2:4D:62:87:A2
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/e90619-1fd8-4b0e-a89c-0cdd9cb26735/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/e90619-1fd8-4b0e-a89c-0cdd9cb26735/1/QqHbokIK9pWGpH90JutXwk1ih6I.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.18.119.0/24
                IPv6:
                  2a12:2a00::/29

    Signature Algorithm: sha256WithRSAEncryption
         a5:79:af:26:b5:47:79:ed:43:97:7c:70:62:35:26:24:ea:c8:
         81:1d:d7:31:e1:ed:99:ef:c5:5d:ed:dd:40:28:e5:91:d2:d0:
         82:ad:a2:00:a9:c2:82:fa:ad:b2:2c:3d:05:89:dc:5d:48:25:
         3a:21:67:29:95:fc:8e:f6:84:97:95:ce:1d:41:1b:fe:bb:74:
         1d:32:08:f8:76:60:f1:f1:b4:66:64:ef:e8:4b:b5:7d:34:ba:
         25:c9:27:f9:5a:74:cc:2f:6f:3b:84:34:59:16:33:4d:7d:2d:
         ae:d6:8a:ef:63:15:79:a8:ce:94:b1:5c:c4:c4:bc:75:ab:12:
         b2:bb:bf:b6:a2:32:8a:43:ba:f1:27:d6:ba:b3:69:be:4e:3d:
         1b:98:6b:dd:4a:2b:ce:8a:c1:dc:1e:e8:1b:2e:4d:e1:dd:48:
         f8:06:47:55:ed:bc:5e:88:22:35:45:75:0d:eb:57:91:ce:53:
         7f:2d:e7:61:23:1b:95:a4:f2:e2:4f:e9:e5:30:a5:22:3d:66:
         78:6f:91:4a:3e:30:2e:ec:db:58:92:d6:75:1a:c1:e3:b6:9e:
         de:25:bd:9e:82:d3:95:4f:0a:00:3a:21:9c:d3:b4:6b:3d:65:
         6a:4e:3b:28:a8:f4:df:13:be:be:09:cf:cc:0f:b4:56:18:d8:
         77:a8:5c:a6
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgISAYVq9P6glOs1dzwouzs9DgKcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjMwMTAxMDEzMTU5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MmExZGJhMjQyMGFmNjk1ODZhNDdmNzQyNmViNTdjMjRkNjI4N2EyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtyr9Zj0les0mogARm8ClUac/QsPD
sRTzFyulKrzfVHcM7r5Ed0D1uxM4+rdrfEjjA30ChuTCt4oisuzksu8zMJHBBlA/
8nmbq45E1rZesFrB+50AKN93+C+w6YWUK3vf2akV11zWmiPPzwbvlfGGbox8ruYj
MMBPoRfnIu715s4/SZ4zZBbD2Is4Ah3jfOl45sDv+18o9LdWsU7DsB1+K+eQxfa5
UHhQS3krTZ1niL845rHQat9vEAymGLrELxlgBYIuCQiaT0/7lWa5upwnobn3H6VI
U3GAAzujR2IuEH225qDcUEGYEX+RRGP2KjrQM1/2FUjsSuCXMxJW5l64awIDAQAB
o4ICkzCCAo8wHQYDVR0OBBYEFEKh26JCCvaVhqR/dCbrV8JNYoeiMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzdhL2U5MDYx
OS0xZmQ4LTRiMGUtYTg5Yy0wY2RkOWNiMjY3MzUvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvN2EvZTkwNjE5
LTFmZDgtNGIwZS1hODljLTBjZGQ5Y2IyNjczNS8xL1FxSGJva0lLOXBXR3BIOTBK
dXRYd2sxaWg2SS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQA1BJ3MA0EAgACMAcDBQMqEioAMA0GCSqGSIb3
DQEBCwUAA4IBAQClea8mtUd57UOXfHBiNSYk6siBHdcx4e2Z78Vd7d1AKOWR0tCC
raIAqcKC+q2yLD0FidxdSCU6IWcplfyO9oSXlc4dQRv+u3QdMgj4dmDx8bRmZO/o
S7V9NLolySf5WnTML287hDRZFjNNfS2u1orvYxV5qM6UsVzExLx1qxKyu7+2ojKK
Q7rxJ9a6s2m+Tj0bmGvdSivOisHcHugbLk3h3Uj4BkdV7bxeiCI1RXUN61eRzlN/
LedhIxuVpPLiT+nlMKUiPWZ4b5FKPjAu7NtYktZ1GsHjtp7eJb2egtOVTwoAOiGc
07RrPWVqTjsoqPTfE76+Cc/MD7RWGNh3qFym
-----END CERTIFICATE-----
Generated at Wed Nov 15 14:53:17 2023 by rpki-client on console-ams.rpki-client.org