Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/qYeFpiWfe2r6Pi0eRFNioqvdRA4.cer
File:                     qYeFpiWfe2r6Pi0eRFNioqvdRA4.cer (raw, json)
Hash identifier:          R52C2SG1JkrA64WO4XBfTlC6TiEZvTiklwekoaj6xQ0=
Subject key identifier:   A9:87:85:A6:25:9F:7B:6A:FA:3E:2D:1E:44:53:62:A2:AB:DD:44:0E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0185708B63751F84C467E8195F91A3B5C049
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/c2/5d9918-072f-4af7-8464-934ab1761fcb/1/qYeFpiWfe2r6Pi0eRFNioqvdRA4.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/c2/5d9918-072f-4af7-8464-934ab1761fcb/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 02 Jan 2023 03:34:21 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 185.31.200.0/22
                          IP: 188.65.160.0/21
                          IP: 2a00:c58::/32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:8b:63:75:1f:84:c4:67:e8:19:5f:91:a3:b5:c0:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 03:34:21 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=a98785a6259f7b6afa3e2d1e445362a2abdd440e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:e6:47:e7:e0:24:3c:87:f0:3e:aa:54:a7:66:
                    de:ed:a8:07:0e:e0:b0:c8:ec:4c:71:4e:74:a5:41:
                    70:1d:2f:b6:c3:1b:d3:4a:87:1a:65:57:fd:60:d8:
                    f4:bf:c8:d7:2b:9e:8a:0d:6f:9a:84:1d:9f:84:5b:
                    ee:b9:6d:61:1d:c7:a6:4e:09:68:85:7b:7d:9a:a3:
                    d3:d5:76:ba:df:fa:ae:0e:51:57:54:86:14:fc:aa:
                    23:78:75:b5:ce:e6:45:92:1d:db:80:3f:49:2e:33:
                    30:0b:85:24:33:f7:d6:1c:e9:e7:39:39:32:83:f7:
                    9b:f3:05:a0:88:05:30:da:74:16:14:99:dc:4e:0d:
                    73:00:77:2c:0d:13:85:08:de:c5:cf:3b:84:38:68:
                    58:3a:80:b9:4c:ce:4c:5d:6a:0a:79:48:6c:54:5f:
                    19:da:48:3f:2d:9e:e7:c7:21:f6:84:e0:6e:7e:4c:
                    18:6a:1c:ba:c1:fc:99:62:22:fc:1c:29:3e:62:39:
                    32:bc:8a:c4:e0:3c:05:28:2b:57:47:ea:5c:1c:43:
                    5d:ce:e1:b8:0b:dd:25:3f:ab:a8:32:1b:42:9e:fb:
                    25:e7:db:8a:b3:af:0d:89:9f:90:5d:34:9b:34:cf:
                    e4:6d:ee:7d:b2:63:b4:b8:1f:03:60:93:49:8b:6c:
                    bb:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:87:85:A6:25:9F:7B:6A:FA:3E:2D:1E:44:53:62:A2:AB:DD:44:0E
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/5d9918-072f-4af7-8464-934ab1761fcb/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/5d9918-072f-4af7-8464-934ab1761fcb/1/qYeFpiWfe2r6Pi0eRFNioqvdRA4.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.31.200.0/22
                  188.65.160.0/21
                IPv6:
                  2a00:c58::/32

    Signature Algorithm: sha256WithRSAEncryption
         26:a7:a7:32:27:78:33:a5:c7:95:54:5f:5f:46:75:10:1d:b1:
         38:03:34:16:ec:75:8e:cb:34:1c:92:77:a4:d9:87:21:9c:dc:
         8a:cb:f7:6a:e7:c8:9e:6f:61:b0:c0:a5:94:56:ca:b4:60:72:
         35:cd:d4:ee:a0:65:36:72:9f:ad:dc:93:c0:2d:ac:e3:8a:41:
         89:8b:07:4f:55:ac:6b:e5:2b:f5:3c:d9:c4:a6:9b:b0:9f:c3:
         7b:8a:75:8c:1b:b5:49:fe:0f:a0:45:d4:46:98:22:f0:19:10:
         d5:87:26:54:80:e6:16:84:90:f1:af:d2:c4:3b:c1:9e:05:53:
         52:ff:72:7f:8d:56:e7:f4:a1:c8:e8:09:64:55:64:e7:96:72:
         94:19:ec:2e:da:c0:9d:e3:57:48:fd:df:f8:6c:09:13:c8:c5:
         d3:7e:5d:24:dc:25:a2:21:6f:fc:d2:fe:c7:78:33:f4:fa:6f:
         52:54:9e:50:a1:9a:d3:55:da:0c:cc:c5:1d:1b:11:d1:8e:b9:
         af:8b:67:59:b6:f0:39:d8:3a:ed:9c:5a:70:25:9b:2e:2b:08:
         07:96:4f:86:9b:b9:77:01:cf:c5:aa:9d:1a:ba:99:b9:35:0a:
         c7:d6:44:31:07:7c:c4:cd:37:37:36:1c:2d:f2:1e:7b:40:1e:
         90:20:c4:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----