Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
File:                     q9v6uvIB4ruFue201kNZSsMLv-I.cer (raw, json)
Hash identifier:          RQOnYh7PzJqIIItZTsnwHcIxgd5hEYx+MdkLMDznVfo=
Subject key identifier:   AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856EE4292A56A92B2CE5DCB6A0EB38FFEA
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.mft
caRepository:             rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2
Notify URL:               https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 19:52:04 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    AS: 61138
                          AS: 200681
                          AS: 203033
                          AS: 203856 -- 203858
                          IP: 5.253.84.0/22
                          IP: 185.90.60.0/22
                          IP: 185.99.132.0/22
                          IP: 185.121.160.0/22
                          IP: 185.121.168.0/22
                          IP: 185.121.176.0/22
                          IP: 185.147.32.0/22
                          IP: 185.195.236.0/22
                          IP: 185.214.172.0/22
                          IP: 185.236.212.0/22
                          IP: 2a05:dfc0::/29
                          IP: 2a06:1280::/29
                          IP: 2a06:9f40::/29
                          IP: 2a06:9f80::/29
                          IP: 2a06:a000::/29
                          IP: 2a07:54c0::/29
                          IP: 2a09:54c0::/29
                          IP: 2a0a:6040::/29
                          IP: 2a0b:9e40::/29
                          IP: 2a0d:d900::/29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6e:e4:29:2a:56:a9:2b:2c:e5:dc:b6:a0:eb:38:ff:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 19:52:04 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:6c:7d:2d:c2:35:c8:24:f3:13:63:3d:bc:1a:
                    d9:48:28:8b:db:50:e7:c1:10:6a:27:34:7c:1e:59:
                    93:f7:35:1a:cd:95:f2:13:cb:b0:3b:fe:d1:60:5a:
                    d2:df:a5:82:61:0e:e3:09:26:7a:f4:ab:65:1d:7f:
                    95:78:58:50:6f:8f:28:e5:ef:bf:ff:91:2c:a8:a6:
                    42:c3:d3:6a:83:48:ef:b8:b4:8b:1c:ac:cc:7b:7d:
                    21:16:4e:d8:78:48:69:5f:db:c5:0e:29:17:64:c0:
                    dc:d9:87:b8:5c:a3:72:6e:7c:47:b7:28:fc:d1:29:
                    d0:f7:5b:5b:09:bc:58:51:27:88:52:49:72:24:89:
                    18:4d:5a:d7:ba:80:1e:46:f0:b7:f3:13:6a:9e:a1:
                    6b:37:6b:96:ca:77:ce:68:2e:a5:85:71:21:df:82:
                    3a:0a:3d:0e:e8:26:37:c1:69:10:f6:9b:74:7c:de:
                    3a:c3:f7:71:f2:0f:9c:69:d6:b5:28:c6:55:84:89:
                    c4:c3:34:bb:7c:a0:37:80:32:c9:5c:22:46:06:5c:
                    04:a6:6b:b4:e0:0d:dd:54:38:72:ea:44:b1:42:b3:
                    fe:ad:c3:fc:7a:9d:70:22:c1:04:65:42:40:80:3d:
                    b3:7b:ff:fe:ec:4e:8a:3b:29:47:ef:be:b1:1f:c6:
                    73:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2
                RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.mft
                RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.253.84.0/22
                  185.90.60.0/22
                  185.99.132.0/22
                  185.121.160.0/22
                  185.121.168.0/22
                  185.121.176.0/22
                  185.147.32.0/22
                  185.195.236.0/22
                  185.214.172.0/22
                  185.236.212.0/22
                IPv6:
                  2a05:dfc0::/29
                  2a06:1280::/29
                  2a06:9f40::/29
                  2a06:9f80::/29
                  2a06:a000::/29
                  2a07:54c0::/29
                  2a09:54c0::/29
                  2a0a:6040::/29
                  2a0b:9e40::/29
                  2a0d:d900::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61138
                  200681
                  203033
                  203856-203858

    Signature Algorithm: sha256WithRSAEncryption
         93:ea:b6:fb:6d:77:bd:d1:2c:28:1e:86:35:5e:63:ea:7a:57:
         07:4b:f8:bc:36:77:f8:b3:9a:b4:56:df:7c:17:27:9d:ac:f3:
         e5:1d:d0:91:75:6b:66:8e:a9:f2:3f:4b:82:4d:d3:8a:d2:69:
         7f:08:6f:b2:56:7a:bd:b5:37:3e:5b:21:70:6f:1d:d1:28:6f:
         3c:46:b0:15:40:b9:3d:69:dc:5e:3e:80:6e:1d:38:cb:24:b2:
         2f:f0:cf:41:82:81:33:d2:51:96:55:bf:48:80:cc:52:27:83:
         3f:e4:06:ef:59:73:9a:87:ea:eb:d2:3a:52:a8:fd:ae:c7:cb:
         c0:8c:1d:66:6c:e3:cb:f2:e9:6d:1f:32:84:47:c8:94:25:a4:
         b3:44:8d:77:26:40:5c:2a:a3:e2:20:d9:3c:17:0d:b3:3d:f3:
         53:83:90:c9:3a:d1:3b:0f:e2:bf:95:5b:7c:8b:44:1b:c8:fe:
         ef:1f:81:f4:11:15:69:1a:b9:16:34:39:26:7b:f6:94:c1:6f:
         bf:d1:96:d3:c6:4a:d3:6b:86:e7:f7:8b:83:4f:ee:64:ba:2a:
         f0:85:e2:a0:99:2f:39:ad:a9:38:cd:a2:7c:2f:6b:9b:ac:5e:
         88:40:f7:b2:ef:b9:75:bc:86:a2:1c:4c:98:c4:6c:ca:2f:59:
         c2:18:59:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:24 2023 by rpki-client on console-fra.rpki-client.org