Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/qqQFWuFYk40kDxvUxhZun_JR5qU.cer
File:                     qqQFWuFYk40kDxvUxhZun_JR5qU.cer (raw, json)
Hash identifier:          8s30KOk/zcpHbVPo46UUOzxBsrzwYBbY7lRvLMZ5hfw=
Subject key identifier:   AA:A4:05:5A:E1:58:93:8D:24:0F:1B:D4:C6:16:6E:9F:F2:51:E6:A5
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0185716872CF9D0CB7E9B0FE565E8879C9DA
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/46/3fd213-f593-4297-a8cc-f10a9c5bcb2d/1/qqQFWuFYk40kDxvUxhZun_JR5qU.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/46/3fd213-f593-4297-a8cc-f10a9c5bcb2d/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 02 Jan 2023 07:35:48 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 145.70.0.0/16

Validation:               Failed, certificate revoked on Fri 27 Jan 2023 12:55:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:71:68:72:cf:9d:0c:b7:e9:b0:fe:56:5e:88:79:c9:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 07:35:48 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=aaa4055ae158938d240f1bd4c6166e9ff251e6a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:dd:d0:56:20:14:3e:d7:6f:0c:77:72:c3:85:
                    e9:68:14:3b:46:95:55:eb:d1:3f:11:73:5c:8a:6f:
                    7a:66:22:e7:27:cd:88:76:f9:85:96:f1:d0:5e:80:
                    80:a9:ac:d8:64:81:e1:6b:7c:24:b0:8d:e3:6d:7c:
                    27:6a:37:00:96:cf:54:06:cb:b1:55:7f:55:ac:db:
                    29:cf:f6:f9:d3:11:80:38:23:8b:df:ae:fa:bf:20:
                    c7:f4:09:14:20:07:e5:6b:d4:f9:fe:83:5a:e2:de:
                    85:18:db:38:47:58:16:6a:27:f3:74:8d:df:36:6d:
                    72:8f:b6:72:03:b0:5c:6a:90:68:5c:c1:73:ca:5f:
                    d3:f7:c0:e3:ca:51:b8:b0:bd:c6:e7:62:d8:2a:b4:
                    5b:ff:af:46:4d:0d:0b:d9:a5:c7:9f:fe:5c:0e:44:
                    ba:39:83:53:99:ff:98:7f:1e:ae:be:80:0c:9f:1f:
                    01:2f:ca:63:5e:7e:e1:d6:4e:46:81:7f:d9:44:36:
                    ff:a5:ed:d5:a4:01:5a:ec:26:6d:24:40:67:55:c1:
                    74:34:e0:17:4f:59:00:7d:f9:ad:e0:05:c4:9a:af:
                    97:12:79:9a:2b:de:ba:d7:cf:0c:2f:a4:77:31:df:
                    10:be:6a:1c:29:19:89:18:c8:06:dd:6a:00:e4:db:
                    17:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:A4:05:5A:E1:58:93:8D:24:0F:1B:D4:C6:16:6E:9F:F2:51:E6:A5
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/3fd213-f593-4297-a8cc-f10a9c5bcb2d/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/3fd213-f593-4297-a8cc-f10a9c5bcb2d/1/qqQFWuFYk40kDxvUxhZun_JR5qU.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  145.70.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         7e:f3:d0:9c:2e:6d:5d:cb:b4:25:44:af:7a:5a:f0:82:cf:1e:
         f7:93:1c:e9:e2:f5:e9:65:e3:d5:ed:e9:7f:c5:aa:d3:a0:bd:
         15:ff:02:c4:c0:9b:98:09:11:8e:f5:02:fe:86:29:68:8b:c3:
         4d:0e:d2:be:e9:fd:a8:2d:b2:d5:b6:a1:95:70:26:17:94:60:
         9c:58:2e:89:cf:d4:dc:ae:8e:34:2d:02:4c:37:eb:47:c7:e3:
         be:34:53:f5:48:4c:1c:c7:81:17:86:32:f3:df:79:d6:86:14:
         11:39:6b:36:46:10:ea:e0:e8:52:c2:92:e6:60:4c:fd:c8:a6:
         f5:e5:7b:cc:98:cc:0b:cb:41:35:91:4a:d9:88:94:33:ec:d9:
         73:e2:b0:07:34:47:c4:2a:02:6e:ea:99:30:ea:ab:91:69:48:
         41:5f:f1:c7:ee:b4:37:1c:6e:33:8f:79:fa:2d:a7:ff:04:38:
         ca:01:a1:81:ee:6d:3a:e2:90:cd:3c:e0:fb:cf:f1:64:1a:89:
         4a:2f:d6:be:9a:11:6e:b4:c6:17:d5:76:18:e7:ba:bd:31:96:
         de:3e:06:33:bb:34:e9:7d:b2:ce:3f:c2:27:5e:1b:8d:35:13:
         16:5a:7f:02:d0:39:30:55:cc:19:b7:a3:82:0a:12:ec:95:d7:
         02:a1:08:bc
-----BEGIN CERTIFICATE-----
MIIFdzCCBF+gAwIBAgISAYVxaHLPnQy36bD+Vl6IecnaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjMwMTAyMDczNTQ4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYWE0MDU1YWUxNTg5MzhkMjQwZjFiZDRjNjE2NmU5ZmYyNTFlNmE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwd3QViAUPtdvDHdyw4XpaBQ7RpVV
69E/EXNcim96ZiLnJ82IdvmFlvHQXoCAqazYZIHha3wksI3jbXwnajcAls9UBsux
VX9VrNspz/b50xGAOCOL3676vyDH9AkUIAfla9T5/oNa4t6FGNs4R1gWaifzdI3f
Nm1yj7ZyA7BcapBoXMFzyl/T98DjylG4sL3G52LYKrRb/69GTQ0L2aXHn/5cDkS6
OYNTmf+Yfx6uvoAMnx8BL8pjXn7h1k5GgX/ZRDb/pe3VpAFa7CZtJEBnVcF0NOAX
T1kAffmt4AXEmq+XEnmaK966188ML6R3Md8QvmocKRmJGMgG3WoA5NsXlQIDAQAB
o4ICgzCCAn8wHQYDVR0OBBYEFKqkBVrhWJONJA8b1MYWbp/yUealMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzQ2LzNmZDIx
My1mNTkzLTQyOTctYThjYy1mMTBhOWM1YmNiMmQvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDYvM2ZkMjEz
LWY1OTMtNDI5Ny1hOGNjLWYxMGE5YzViY2IyZC8xL3FxUUZXdUZZazQwa0R4dlV4
aFp1bl9KUjVxVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB4GCCsGAQUF
BwEHAQH/BA8wDTALBAIAATAFAwMAkUYwDQYJKoZIhvcNAQELBQADggEBAH7z0Jwu
bV3LtCVEr3pa8ILPHveTHOni9ell49Xt6X/FqtOgvRX/AsTAm5gJEY71Av6GKWiL
w00O0r7p/agtstW2oZVwJheUYJxYLonP1NyujjQtAkw360fH4740U/VITBzHgReG
MvPfedaGFBE5azZGEOrg6FLCkuZgTP3IpvXle8yYzAvLQTWRStmIlDPs2XPisAc0
R8QqAm7qmTDqq5FpSEFf8cfutDccbjOPefotp/8EOMoBoYHubTrikM084PvP8WQa
iUov1r6aEW60xhfVdhjnur0xlt4+BjO7NOl9ss4/wideG401ExZafwLQOTBVzBm3
o4IKEuyV1wKhCLw=
-----END CERTIFICATE-----