Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/qg8kkqGEfbRaOjQPG22NMP-qvoo.cer
File:                     qg8kkqGEfbRaOjQPG22NMP-qvoo.cer (raw, json)
Hash identifier:          LuOnWaJPDoMSztCjDrRYXFEOx7O0jtUZrqjyvfi3yco=
Subject key identifier:   AA:0F:24:92:A1:84:7D:B4:5A:3A:34:0F:1B:6D:8D:30:FF:AA:BE:8A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018CC493036864C0CBAECC76B797CF27E6FF
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/6/AA0F2492A1847DB45A3A340F1B6D8D30FFAABE8A.mft
caRepository:             rsync://rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/6/
Notify URL:               https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 10:30:18 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    AS: 211026

Validation:               Failed, certificate revoked on Sun 30 Jun 2024 12:15:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c4:93:03:68:64:c0:cb:ae:cc:76:b7:97:cf:27:e6:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 10:30:18 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=aa0f2492a1847db45a3a340f1b6d8d30ffaabe8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:7f:f4:37:69:ba:0b:aa:0c:1f:a8:0c:ae:e5:
                    55:ce:fb:ed:1c:82:33:86:7f:38:2c:1a:6c:64:da:
                    14:9c:74:dc:f5:1a:be:a3:0a:35:50:f0:26:62:74:
                    55:62:82:6e:99:c2:7a:33:88:4a:28:6c:42:03:2c:
                    8a:8b:5c:03:fc:81:a6:f5:f5:7f:d2:54:be:aa:9d:
                    aa:8f:50:1c:61:90:64:6a:4c:76:9c:46:6f:c7:6d:
                    5b:4c:a6:a6:01:ad:e3:3f:d8:ac:8d:47:57:e1:45:
                    e5:96:07:e2:f5:2b:fd:39:aa:9a:22:cc:06:ce:6f:
                    ae:1d:dc:ed:73:d0:fa:e7:85:23:de:ed:2b:53:33:
                    d4:15:90:ae:fd:3f:8c:48:ec:6a:3a:11:be:ba:d6:
                    bd:2e:c2:c0:8f:e1:4e:d9:6e:7a:d8:2b:58:da:63:
                    c9:f4:c6:c2:48:6a:9e:db:f4:05:04:f5:22:8f:08:
                    89:68:35:7d:79:b9:32:ef:fe:f4:49:15:70:58:be:
                    7a:41:43:9b:33:b7:7e:ff:ce:fb:80:f9:ac:19:ac:
                    bd:cf:4f:32:8c:44:75:15:c4:e5:ab:d2:24:9a:4b:
                    18:d3:6d:a2:5e:00:49:3b:98:cb:71:28:fd:c2:1f:
                    5b:0e:b0:66:30:a5:18:c0:8d:fd:9d:b0:43:87:8d:
                    c6:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:0F:24:92:A1:84:7D:B4:5A:3A:34:0F:1B:6D:8D:30:FF:AA:BE:8A
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/6/
                RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/6/AA0F2492A1847DB45A3A340F1B6D8D30FFAABE8A.mft
                RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  211026

    Signature Algorithm: sha256WithRSAEncryption
         46:7d:be:84:8a:af:60:99:eb:83:cd:51:07:a2:27:f0:e5:95:
         f7:b1:64:fe:e5:32:e5:fd:18:02:fd:ec:ef:12:31:b2:95:e7:
         53:86:4c:2b:ea:1b:33:0d:b5:d5:6e:a8:91:d3:7f:5c:61:32:
         aa:4c:df:87:f1:ff:c6:c2:1c:b8:6b:66:fc:55:ba:be:6a:34:
         f8:94:f9:74:81:0a:19:31:90:22:d3:13:aa:f5:e3:bb:60:47:
         01:43:31:7d:4f:e1:8d:4e:d5:11:f1:2b:d6:a2:db:3d:03:40:
         30:96:14:1c:68:03:0c:80:d1:fc:e0:44:c0:3a:5c:84:ed:72:
         35:c3:a4:bc:0d:13:5e:a2:c9:0b:96:f3:e7:5a:2d:ff:be:87:
         3c:6b:58:e2:29:66:75:ea:8e:f1:61:bd:83:7e:51:fa:83:db:
         b7:41:4f:29:7b:77:73:1a:e9:df:a4:de:92:b9:c3:16:03:22:
         75:1f:e2:f8:28:1a:9e:92:e7:42:7c:28:c5:f6:94:4d:0c:18:
         26:1c:fa:54:fe:81:30:07:3f:03:30:df:9d:91:5e:b4:a0:4d:
         52:c8:36:c7:31:43:21:6c:92:38:e3:ef:f8:fc:80:61:3d:1f:
         6b:34:3c:37:02:d3:2c:99:02:6a:e9:cb:c4:33:53:0a:4e:89:
         a7:81:37:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----