Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/qqvI4eMfFJAp-aJVsaRGySySL14.cer
File:                     qqvI4eMfFJAp-aJVsaRGySySL14.cer (raw, json)
Hash identifier:          sRrO/q01KO31rpannUW7NSxmu+OcShTRZoxy8jo70sE=
Subject key identifier:   AA:AB:C8:E1:E3:1F:14:90:29:F9:A2:55:B1:A4:46:C9:2C:92:2F:5E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856EFB7F8115EF390FE17C695B929DA037
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/31/4530a1-3fd0-4d04-bd95-a4647ad97ea3/1/qqvI4eMfFJAp-aJVsaRGySySL14.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/31/4530a1-3fd0-4d04-bd95-a4647ad97ea3/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 20:17:34 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 194.104.234.0/24
                          IP: 2a11:67c0::/29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6e:fb:7f:81:15:ef:39:0f:e1:7c:69:5b:92:9d:a0:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 20:17:34 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=aaabc8e1e31f149029f9a255b1a446c92c922f5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:b0:24:b7:31:b4:1e:93:a5:51:cb:84:36:d1:
                    d4:5f:61:5d:a2:80:d4:88:4c:1c:83:39:91:91:7c:
                    a9:95:90:8a:b0:6d:6b:9c:88:95:98:90:3a:6f:5e:
                    ea:dd:99:17:ca:00:e2:89:b1:d1:7d:89:da:b9:7a:
                    b6:92:c0:77:d9:be:fd:7c:30:cd:c5:19:b2:60:3a:
                    71:85:9f:9b:5a:d0:6a:64:14:6a:ed:f8:e7:ae:91:
                    d9:be:68:f6:68:eb:12:ad:2b:f7:40:df:4d:1b:90:
                    f9:a3:28:88:1b:c7:5e:bc:63:21:79:07:db:35:a8:
                    6b:3f:6c:6c:c2:3d:8e:de:5a:22:ca:60:b6:0e:ab:
                    de:ec:1a:e8:2e:c4:60:d2:92:9c:46:b9:3a:90:b2:
                    09:b3:60:46:32:73:e7:39:5f:98:3d:d8:50:99:fd:
                    d0:e4:96:00:41:98:4e:5a:08:7f:9a:a1:e6:9e:07:
                    8c:0e:78:03:b0:37:4b:08:f6:70:27:51:fa:29:5b:
                    18:ad:0a:5a:66:c7:fd:1d:8b:ae:07:e3:e4:53:fe:
                    92:f5:74:6b:d9:0b:6e:53:f9:9f:80:61:c6:c4:62:
                    42:27:be:73:f7:28:8f:fb:d5:88:54:4e:b5:5a:bd:
                    e5:85:09:3a:24:59:36:e4:fa:7c:7a:23:a7:e1:1b:
                    cb:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:AB:C8:E1:E3:1F:14:90:29:F9:A2:55:B1:A4:46:C9:2C:92:2F:5E
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/4530a1-3fd0-4d04-bd95-a4647ad97ea3/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/4530a1-3fd0-4d04-bd95-a4647ad97ea3/1/qqvI4eMfFJAp-aJVsaRGySySL14.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.104.234.0/24
                IPv6:
                  2a11:67c0::/29

    Signature Algorithm: sha256WithRSAEncryption
         a2:73:10:c5:78:39:a8:58:09:be:b1:56:23:32:ac:14:b8:5a:
         75:5b:a7:a5:ae:8d:ce:dd:aa:11:df:93:f2:f0:89:c6:de:d3:
         f3:1c:f1:4a:21:ff:13:85:fa:bb:31:f9:a0:99:25:5f:dd:5b:
         3a:a7:9d:3c:cb:89:eb:42:74:20:cc:d3:98:8d:04:20:fb:41:
         56:04:ac:85:06:ff:8a:a1:ca:e9:fd:a6:1e:9e:4c:a5:59:68:
         9d:83:5b:3f:a3:57:e4:ea:1e:26:0f:aa:af:74:1c:cb:b5:8b:
         52:00:c7:46:bf:82:ac:bf:96:5e:00:03:65:46:ab:4b:f5:c1:
         9b:d0:2c:6e:6e:5c:83:96:d2:6d:11:21:c2:ed:e3:c7:e7:67:
         d7:98:3d:b4:16:48:94:97:fb:7d:31:84:94:a8:44:57:17:5b:
         7b:25:bf:2d:51:4d:36:95:64:10:2d:8a:f4:54:91:e4:86:37:
         8e:4c:c9:ac:72:6f:da:fd:3e:38:bc:16:4a:34:05:b6:dd:50:
         15:c0:0b:c9:76:73:9a:c6:3b:92:fd:44:27:dc:12:79:26:54:
         32:a3:06:72:8b:03:da:ce:de:f5:28:84:8a:61:53:63:65:e5:
         0f:b5:09:22:66:56:cf:83:8d:a9:65:40:da:f9:71:bd:31:02:
         3b:7e:3f:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----