Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/RqjMYd4gqQBIgx-sriL6Nw5XaTY.cer
File:                     RqjMYd4gqQBIgx-sriL6Nw5XaTY.cer (raw, json)
Hash identifier:          uAd1xKtsR//EcLHzdlOqRGuFB5gbRmP7olxUqfEnTFk=
Subject key identifier:   46:A8:CC:61:DE:20:A9:00:48:83:1F:AC:AE:22:FA:37:0E:57:69:36
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856AF4EEE35A615691C388350C074F39F4
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/33/a75f60-058e-43c7-9ca5-71d472748b53/1/RqjMYd4gqQBIgx-sriL6Nw5XaTY.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/33/a75f60-058e-43c7-9ca5-71d472748b53/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 01:31:54 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 91.246.63.0/24
                          IP: 2a11:c140::/29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6a:f4:ee:e3:5a:61:56:91:c3:88:35:0c:07:4f:39:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 01:31:54 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=46a8cc61de20a90048831facae22fa370e576936
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:50:67:a6:5e:f8:da:0a:05:be:f5:c6:6b:ed:
                    03:fd:56:60:cd:2d:b5:9d:de:a4:f3:4e:b8:37:65:
                    2f:b1:3b:b1:9b:80:2a:bf:43:b7:be:20:32:d3:11:
                    c0:21:0d:c9:b6:68:69:67:e0:83:b3:5d:be:d2:79:
                    05:e6:69:68:90:f9:39:39:34:c5:26:e1:5d:99:58:
                    b3:34:05:bf:03:0d:db:fe:a4:90:11:e5:d5:38:af:
                    c1:33:13:ff:92:51:3a:01:f0:cb:57:bf:10:8b:04:
                    38:60:62:aa:eb:29:66:31:a4:55:c1:0a:bb:8e:18:
                    b2:69:8e:7c:39:ca:25:e0:96:a8:b8:53:37:9c:b3:
                    80:9f:c4:f4:f3:3d:3d:c1:90:68:af:f6:bc:8a:97:
                    ef:17:a1:94:09:e4:fa:88:36:9c:c4:ea:f0:bc:e7:
                    2a:47:53:bc:7d:c9:cd:cf:b7:6a:ee:99:bb:a9:d8:
                    0b:31:d7:aa:5f:fa:44:72:9a:e1:61:95:63:ed:31:
                    f8:83:f5:99:da:f1:7a:f1:c1:07:c6:81:f8:99:3b:
                    b3:c5:e4:09:d7:63:73:b1:aa:1b:3b:92:da:01:e2:
                    f5:53:86:e0:51:53:4a:30:be:c0:c3:c1:6e:2b:28:
                    1c:53:93:ca:08:ba:86:96:82:66:39:35:10:6a:56:
                    5a:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:A8:CC:61:DE:20:A9:00:48:83:1F:AC:AE:22:FA:37:0E:57:69:36
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/a75f60-058e-43c7-9ca5-71d472748b53/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/a75f60-058e-43c7-9ca5-71d472748b53/1/RqjMYd4gqQBIgx-sriL6Nw5XaTY.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.246.63.0/24
                IPv6:
                  2a11:c140::/29

    Signature Algorithm: sha256WithRSAEncryption
         99:87:3c:7e:48:10:6b:03:95:25:3b:70:91:a8:48:52:08:e9:
         57:34:97:68:90:7a:2f:ae:0a:a1:75:36:ec:eb:82:6a:48:8b:
         b8:61:e5:b1:b4:d1:5a:1e:42:a6:89:54:a7:64:d2:fe:7d:2b:
         e9:52:0d:4d:39:83:aa:07:de:4c:e3:d3:22:bb:54:d8:70:1a:
         c1:b2:cd:d7:7c:0a:ae:3d:ae:11:aa:4e:17:b0:d1:83:a2:59:
         d4:c2:30:96:06:0c:6e:3f:fd:61:85:c3:39:ab:1c:b9:54:56:
         8c:e9:f4:b0:86:4f:f7:92:ff:0d:5e:0f:af:c3:73:51:0e:f2:
         d2:94:b8:94:7c:df:25:31:0e:c6:7e:40:6c:a4:3f:5a:f1:35:
         f9:71:9f:08:2b:4c:05:9d:56:dc:21:d5:d4:55:8f:92:94:78:
         ad:40:7e:a8:ba:6d:67:ed:4d:77:67:e9:f6:8f:65:ba:35:96:
         71:a4:2c:e3:0f:85:2f:df:54:37:84:e1:f9:4b:47:2f:96:0c:
         e7:c3:42:cf:4f:e6:23:57:43:67:0b:c0:04:9b:80:46:00:72:
         82:5a:78:65:a5:83:51:c1:f4:ce:5d:65:d5:3d:82:3c:e9:1d:
         12:28:09:84:09:18:48:10:35:d9:da:70:44:b3:6a:d4:2f:ce:
         95:30:99:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----