Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bPqEFiGq_FL4jEkB4fGPrc4eHWU.cer
File:                     bPqEFiGq_FL4jEkB4fGPrc4eHWU.cer (raw, json)
Hash identifier:          zoE9vd+N5iK/G92g7pbg8PH9vl4FSN1Db/qtkS+enMQ=
Subject key identifier:   6C:FA:84:16:21:AA:FC:52:F8:8C:49:01:E1:F1:8F:AD:CE:1E:1D:65
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856F40BCD76A7D2DB197B45B1068F9D3E1
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/c2/717d61-4127-4db6-a089-e79129e4ddef/1/bPqEFiGq_FL4jEkB4fGPrc4eHWU.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/c2/717d61-4127-4db6-a089-e79129e4ddef/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 21:33:11 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    AS: 208214
                          IP: 45.152.80.0/22
                          IP: 2a0f:8d00::/29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:40:bc:d7:6a:7d:2d:b1:97:b4:5b:10:68:f9:d3:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 21:33:11 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=6cfa841621aafc52f88c4901e1f18fadce1e1d65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:e8:6c:44:69:67:b1:6f:5b:68:c2:be:cc:2e:
                    90:7a:f5:63:ba:6f:c3:67:59:95:34:f9:a6:e5:b1:
                    ad:46:39:56:7f:5b:ad:bb:56:98:19:c3:61:7d:30:
                    74:e8:e7:c8:6b:9b:87:f2:a2:10:20:5a:6a:00:8a:
                    06:43:e1:01:25:06:da:5a:4f:a9:78:45:38:57:8f:
                    cd:b1:64:8f:31:c7:f7:d7:ce:b4:b0:55:14:51:ec:
                    9e:45:c6:f7:b1:e9:21:10:03:bd:af:44:5b:3c:c4:
                    42:80:c7:79:c6:24:a2:8c:90:0e:fa:f9:72:4a:38:
                    9b:d7:fe:88:31:6b:73:4b:4b:c2:ea:05:c7:43:cd:
                    5c:22:a4:73:9d:d3:63:6b:47:7e:e9:b8:f9:52:f7:
                    97:40:d7:92:7c:51:72:18:f3:51:8d:d0:51:df:16:
                    f3:e5:30:e4:cd:8f:58:bc:64:55:0a:c7:fe:f3:4b:
                    94:96:8c:47:a6:32:ab:f1:4d:ce:3b:85:d2:33:e1:
                    78:2c:b4:43:61:c8:0f:9f:55:f8:92:b8:9d:00:9e:
                    a2:ec:b9:1e:56:f2:26:8c:a0:5e:b5:c7:1f:4a:50:
                    f3:c9:75:ca:ac:13:7e:d7:fe:20:c1:10:7e:98:38:
                    a4:0d:51:08:aa:5b:58:b9:44:7a:ca:5e:2c:96:f4:
                    07:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:FA:84:16:21:AA:FC:52:F8:8C:49:01:E1:F1:8F:AD:CE:1E:1D:65
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/717d61-4127-4db6-a089-e79129e4ddef/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/717d61-4127-4db6-a089-e79129e4ddef/1/bPqEFiGq_FL4jEkB4fGPrc4eHWU.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.152.80.0/22
                IPv6:
                  2a0f:8d00::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  208214

    Signature Algorithm: sha256WithRSAEncryption
         17:e3:00:48:ed:d4:0d:17:15:98:73:ec:a7:0b:7c:d6:17:b3:
         b3:02:03:1c:46:d0:83:e9:dd:fc:85:f5:43:08:9e:ac:ac:2b:
         2b:8d:a8:a8:28:f7:eb:4b:26:c8:f0:15:9d:90:43:a0:48:7a:
         d2:29:01:15:c5:5c:34:18:19:ea:8e:fa:44:6f:20:e1:8a:16:
         66:37:e1:16:97:38:18:45:72:54:0f:34:cf:2e:7c:cd:95:6e:
         e3:6f:0a:33:70:a8:2c:82:0b:1b:83:67:f9:a5:af:4a:35:b8:
         c5:ad:8d:c4:5b:fb:02:d1:83:92:ae:07:90:0a:0c:fe:57:b8:
         93:8d:1d:5b:62:35:8d:5d:1a:67:e2:c3:d5:4e:e2:2b:05:3c:
         d4:02:fe:b9:03:de:02:53:85:96:10:43:54:b8:50:da:7d:d7:
         a6:f6:b0:0a:bc:8d:56:12:e5:7d:0d:df:0f:bb:72:0c:28:be:
         d4:e1:44:f9:01:2e:31:79:26:8d:04:a5:9e:b0:69:0d:ec:e7:
         67:83:7e:81:ed:2d:84:03:a6:bc:60:13:33:ff:96:3b:f2:a0:
         5a:8a:4b:20:10:25:46:a0:52:91:eb:3e:b2:91:cb:4d:0d:1a:
         b3:38:c8:2a:55:45:4a:9a:8a:99:2a:61:7c:4c:02:fc:40:97:
         59:b6:03:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----