Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/pqKx4t4xlBhLPC2Baj7awInBh08.cer
File:                     pqKx4t4xlBhLPC2Baj7awInBh08.cer (raw, json)
Hash identifier:          o4qKH4uaZ589eb2nFP7nzocl5/JtjGCroBdh0VOB83M=
Subject key identifier:   A6:A2:B1:E2:DE:31:94:18:4B:3C:2D:81:6A:3E:DA:C0:89:C1:87:4F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0188456EE62BF57FA71D0539D0C3B822E8F9
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.co/repo/August/3/A6A2B1E2DE3194184B3C2D816A3EDAC089C1874F.mft
caRepository:             rsync://rpki.co/repo/August/3/
Notify URL:               https://rrdp.rpki.co/rrdp/notification.xml
Certificate not before:   Mon 22 May 2023 21:47:55 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    AS: 57481

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:45:6e:e6:2b:f5:7f:a7:1d:05:39:d0:c3:b8:22:e8:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: May 22 21:47:55 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=a6a2b1e2de3194184b3c2d816a3edac089c1874f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:b1:f9:78:3c:fe:dd:f3:1b:e8:9f:02:e3:41:
                    66:3e:ee:0d:40:ad:80:55:51:81:58:94:41:b5:03:
                    16:83:67:03:0e:b3:4c:bb:4d:82:3e:ef:16:1e:38:
                    4b:fb:3d:ed:50:2d:13:4f:80:63:85:da:b8:20:db:
                    79:e6:a1:f7:90:e6:b2:3d:9c:a5:09:bd:5c:1c:76:
                    f1:2e:35:93:ab:69:59:98:77:0f:72:aa:a2:75:b4:
                    26:54:a1:90:a8:7e:b5:ea:69:bf:2e:f4:c3:29:fe:
                    84:85:52:4f:37:f1:af:38:eb:06:05:e5:5d:23:a5:
                    59:67:d0:d4:13:40:1d:80:60:4d:8e:87:c9:ae:85:
                    7d:23:a5:fd:46:02:bb:50:a7:91:95:dc:d8:a4:5e:
                    ee:a7:50:b4:6e:ff:10:0a:53:33:37:9e:ae:9e:09:
                    c9:19:0b:e6:78:1d:50:23:12:b8:b7:14:b2:84:99:
                    25:ae:7a:42:6e:7a:97:1e:88:9b:e1:40:0b:12:51:
                    4a:5d:f5:cd:d9:45:b3:12:9f:e4:48:0c:71:ef:e7:
                    01:fe:94:de:59:46:6d:dd:ae:b7:9f:3b:39:17:0c:
                    c3:27:4f:0c:73:91:80:e0:8d:ca:8b:35:a8:62:76:
                    0f:f9:38:f4:78:58:e8:19:3d:27:2d:55:04:44:56:
                    96:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:A2:B1:E2:DE:31:94:18:4B:3C:2D:81:6A:3E:DA:C0:89:C1:87:4F
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.co/repo/August/3/
                RPKI Manifest - URI:rsync://rpki.co/repo/August/3/A6A2B1E2DE3194184B3C2D816A3EDAC089C1874F.mft
                RPKI Notify - URI:https://rrdp.rpki.co/rrdp/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  57481

    Signature Algorithm: sha256WithRSAEncryption
         11:ec:8e:04:c3:db:ce:89:bb:56:71:a9:4b:9f:bb:36:ec:f7:
         83:62:19:d4:38:8e:16:f4:c6:e1:25:fd:14:b9:b3:5e:34:5a:
         9a:be:f6:5b:f8:35:46:2c:46:29:6e:bc:e2:4c:83:d7:41:37:
         8b:6e:97:88:8d:51:4e:c2:56:85:af:c2:a1:04:09:0b:5a:69:
         e5:ab:7e:30:4b:3e:64:0c:50:37:d2:3d:30:cb:53:09:27:32:
         1a:76:b8:df:52:2b:b9:75:74:03:b6:90:bf:9e:6d:9a:cd:98:
         89:f4:06:6e:2f:61:2f:a8:88:92:82:e6:dd:e5:b3:08:d7:50:
         a7:50:cd:c1:b7:81:7a:a8:27:b4:39:82:0f:87:8e:f9:2d:42:
         03:8b:94:31:9e:85:10:be:f6:28:ee:d9:26:ff:18:a6:06:f9:
         64:c3:13:96:7f:b2:39:a6:de:8d:7e:79:90:51:80:cc:94:51:
         bd:56:94:ad:2d:89:51:74:9f:78:03:b8:38:58:23:d6:27:cb:
         58:1a:0d:8d:6b:c4:58:51:c2:80:c0:cc:4e:2f:54:ef:a7:e5:
         31:7c:32:93:90:01:cb:46:67:f2:a7:87:4d:75:3f:95:e2:b4:
         76:68:37:a4:e7:19:77:70:b0:9e:84:17:75:fc:6e:22:6c:e4:
         0d:db:a6:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 15 04:10:49 2023 by rpki-client on console-fra.rpki-client.org