Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/qksLftqY7ypCHMhIvkfJPoac1Cc.cer
File:                     qksLftqY7ypCHMhIvkfJPoac1Cc.cer (raw, json)
Hash identifier:          1mVqLIQ8HbvoBbXwa+siCdlv4Le0n+DDVy9Z4pK4WHI=
Subject key identifier:   AA:4B:0B:7E:DA:98:EF:2A:42:1C:C8:48:BE:47:C9:3E:86:9C:D4:27
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856D897FC6CE72426614AA6F207986263E
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/c8/c20e8e-562a-4969-a6c6-64d2710a3ca6/1/qksLftqY7ypCHMhIvkfJPoac1Cc.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/c8/c20e8e-562a-4969-a6c6-64d2710a3ca6/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 13:33:25 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 194.62.160.0/24
                          IP: 2a11:6200::/29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6d:89:7f:c6:ce:72:42:66:14:aa:6f:20:79:86:26:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 13:33:25 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=aa4b0b7eda98ef2a421cc848be47c93e869cd427
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:a7:d1:71:a0:73:20:6f:b9:d3:a8:97:0e:e1:
                    c9:56:2f:11:60:0b:71:bf:c2:35:10:9b:c0:55:99:
                    6a:47:de:52:73:36:8e:2e:cf:7c:17:04:49:02:66:
                    2c:47:8d:07:e5:74:31:69:e7:ab:f1:79:06:8d:13:
                    1a:bf:20:25:a2:79:0a:c0:2c:09:03:29:48:d6:86:
                    e5:7b:33:7f:0b:cb:49:00:e6:68:09:ff:c8:41:c7:
                    e2:da:69:e0:cd:d1:0e:65:da:88:8d:80:0c:c0:ab:
                    b9:cd:dd:5d:d5:af:cd:71:08:ef:7f:0b:c5:b0:b9:
                    cd:16:3c:d1:3a:a2:19:74:85:3a:5a:f6:a0:e6:d2:
                    b0:7f:1f:45:2e:ed:9f:5f:d1:1f:fc:83:5a:26:98:
                    61:50:28:53:23:c7:21:fa:87:5d:9a:2b:86:d4:74:
                    9d:d3:e5:f0:4e:c5:d7:b6:ae:4c:8a:97:53:d1:f5:
                    f0:aa:ca:57:1b:d8:0e:a8:99:5e:6d:f8:eb:45:e4:
                    30:9a:25:c9:93:ee:98:7c:c4:06:34:b0:0a:37:4d:
                    7f:e0:bf:85:c1:15:4e:16:cd:26:d2:1b:c4:13:b8:
                    c1:a7:c8:c7:94:62:de:15:ec:43:e1:68:a3:e1:4b:
                    b5:e4:b9:d5:82:08:00:47:26:f3:26:0d:f6:9f:e2:
                    bb:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:4B:0B:7E:DA:98:EF:2A:42:1C:C8:48:BE:47:C9:3E:86:9C:D4:27
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/c20e8e-562a-4969-a6c6-64d2710a3ca6/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/c20e8e-562a-4969-a6c6-64d2710a3ca6/1/qksLftqY7ypCHMhIvkfJPoac1Cc.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.62.160.0/24
                IPv6:
                  2a11:6200::/29

    Signature Algorithm: sha256WithRSAEncryption
         7e:92:57:47:50:af:db:a8:4d:25:5b:10:fe:86:12:a4:22:7f:
         d9:56:9d:47:4c:97:77:14:b3:7d:24:12:8b:e8:29:e6:5d:2a:
         41:ca:91:67:b8:ed:91:ef:a0:f2:6f:04:b9:90:c3:0a:a5:14:
         5b:a9:7c:6b:8e:3e:d0:d0:65:9a:aa:7a:ba:6c:a8:a7:88:cb:
         7a:04:9a:63:d0:ca:c0:89:2d:62:13:1d:13:ef:37:81:12:4c:
         10:77:70:74:ca:9b:be:e2:43:dd:30:ef:56:86:16:3e:84:0a:
         1d:2f:15:a8:01:e6:54:d9:d8:7d:7a:cc:38:58:78:36:44:bc:
         2e:ec:03:0c:fc:de:c6:0b:49:9c:89:79:80:a5:97:fa:30:66:
         95:bc:4a:9b:d8:54:6e:c9:2d:7d:ce:ed:15:aa:d6:fc:f2:68:
         06:a0:b6:26:24:72:b7:59:96:42:59:8f:64:d9:f9:dd:47:57:
         16:39:49:14:01:de:55:50:7f:40:df:be:19:bb:4b:a7:e0:09:
         73:99:49:64:3c:c0:04:02:46:7d:49:be:f2:64:67:0b:09:8d:
         50:11:18:13:bb:b0:9a:df:87:e7:96:52:d5:24:4a:6b:fa:9d:
         ae:cc:36:fc:70:34:76:48:4c:37:49:16:c7:f3:36:9a:a3:6a:
         c0:c7:ec:f8
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgISAYVtiX/GznJCZhSqbyB5hiY+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjMwMTAxMTMzMzI1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYTRiMGI3ZWRhOThlZjJhNDIxY2M4NDhiZTQ3YzkzZTg2OWNkNDI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqafRcaBzIG+506iXDuHJVi8RYAtx
v8I1EJvAVZlqR95SczaOLs98FwRJAmYsR40H5XQxaeer8XkGjRMavyAlonkKwCwJ
AylI1oblezN/C8tJAOZoCf/IQcfi2mngzdEOZdqIjYAMwKu5zd1d1a/NcQjvfwvF
sLnNFjzROqIZdIU6Wvag5tKwfx9FLu2fX9Ef/INaJphhUChTI8ch+oddmiuG1HSd
0+XwTsXXtq5MipdT0fXwqspXG9gOqJlebfjrReQwmiXJk+6YfMQGNLAKN01/4L+F
wRVOFs0m0hvEE7jBp8jHlGLeFexD4Wij4Uu15LnVgggARybzJg32n+K7BQIDAQAB
o4ICkzCCAo8wHQYDVR0OBBYEFKpLC37amO8qQhzISL5HyT6GnNQnMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2M4L2MyMGU4
ZS01NjJhLTQ5NjktYTZjNi02NGQyNzEwYTNjYTYvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzgvYzIwZThl
LTU2MmEtNDk2OS1hNmM2LTY0ZDI3MTBhM2NhNi8xL3Frc0xmdHFZN3lwQ0hNaEl2
a2ZKUG9hYzFDYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQAwj6gMA0EAgACMAcDBQMqEWIAMA0GCSqGSIb3
DQEBCwUAA4IBAQB+kldHUK/bqE0lWxD+hhKkIn/ZVp1HTJd3FLN9JBKL6CnmXSpB
ypFnuO2R76DybwS5kMMKpRRbqXxrjj7Q0GWaqnq6bKiniMt6BJpj0MrAiS1iEx0T
7zeBEkwQd3B0ypu+4kPdMO9WhhY+hAodLxWoAeZU2dh9esw4WHg2RLwu7AMM/N7G
C0mciXmApZf6MGaVvEqb2FRuyS19zu0Vqtb88mgGoLYmJHK3WZZCWY9k2fndR1cW
OUkUAd5VUH9A374Zu0un4AlzmUlkPMAEAkZ9Sb7yZGcLCY1QERgTu7Ca34fnllLV
JEpr+p2uzDb8cDR2SEw3SRbH8zaao2rAx+z4
-----END CERTIFICATE-----
Generated at Thu Jul 20 15:53:48 2023 by rpki-client on console-ams.rpki-client.org