Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/g5yHF4_ygJlHLy9_6XFr_BO2gkA.cer
File:                     g5yHF4_ygJlHLy9_6XFr_BO2gkA.cer (raw, json)
Hash identifier:          QtfdDJrkXzz9ANqRNuEkuFCrOofWd1seujDSmlFs3Bc=
Subject key identifier:   83:9C:87:17:8F:F2:80:99:47:2F:2F:7F:E9:71:6B:FC:13:B6:82:40
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018571D715E5898EF995DBE8A2CC691A29C3
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/f4/d12e2b-4a4a-4d9e-bbc6-72075b203efb/1/g5yHF4_ygJlHLy9_6XFr_BO2gkA.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/f4/d12e2b-4a4a-4d9e-bbc6-72075b203efb/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 02 Jan 2023 09:36:39 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 45.157.160.0/22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:71:d7:15:e5:89:8e:f9:95:db:e8:a2:cc:69:1a:29:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 09:36:39 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=839c87178ff28099472f2f7fe9716bfc13b68240
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:08:52:2a:34:9c:68:b7:54:e8:aa:e0:51:c8:
                    24:cf:22:35:e8:d6:e1:b5:c4:15:6c:22:37:ab:93:
                    0d:60:9a:e8:1e:a7:95:7f:5c:ef:17:37:d3:c1:29:
                    97:b4:f1:31:d7:8c:eb:14:ef:ee:72:a5:14:26:a8:
                    fd:ba:9d:6e:53:25:da:f7:b4:1c:e8:8d:2c:8c:49:
                    2b:b6:26:5f:e7:51:d2:3a:66:0d:16:02:17:ed:e0:
                    7c:0d:6a:2c:1b:62:1c:62:d1:07:dc:bc:ee:d0:15:
                    07:82:7b:eb:c6:07:4e:b7:ff:c3:d8:59:c5:18:2c:
                    b4:2b:78:5a:8b:e1:ac:31:62:19:bb:69:0e:0f:df:
                    b8:a4:0a:1e:ad:fc:79:09:5b:eb:28:9f:38:e9:eb:
                    1b:85:17:3a:08:9c:f3:13:05:2d:23:0f:58:ee:b1:
                    c2:2b:3b:34:0a:6a:fe:9a:6a:87:b5:95:36:29:c3:
                    cf:d9:1e:22:80:1f:e4:6e:36:70:b6:42:62:3e:64:
                    0a:a4:77:33:71:e9:cb:1a:a7:a9:14:29:8c:ea:35:
                    57:d3:b6:2a:d3:3d:aa:d8:e0:4f:f1:82:49:d2:eb:
                    08:46:6d:69:39:88:b9:95:e0:8e:f7:08:2f:98:2e:
                    6b:8b:9f:b8:d8:53:fe:e1:66:fc:8e:c9:d6:fc:99:
                    da:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:9C:87:17:8F:F2:80:99:47:2F:2F:7F:E9:71:6B:FC:13:B6:82:40
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d12e2b-4a4a-4d9e-bbc6-72075b203efb/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d12e2b-4a4a-4d9e-bbc6-72075b203efb/1/g5yHF4_ygJlHLy9_6XFr_BO2gkA.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.157.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         97:5e:47:11:f0:eb:54:f3:4b:b2:46:37:27:61:59:73:4a:37:
         d0:5c:ce:bf:6b:bc:23:bf:f4:56:04:9d:73:3c:fb:8c:3a:dd:
         70:8d:db:8d:27:1a:1e:88:28:e7:a6:6e:4b:5b:61:1e:19:74:
         63:bf:44:7e:e3:c5:b0:1c:77:89:64:44:fd:77:44:bf:9f:a8:
         fd:dd:47:e6:c4:0f:4e:1a:f2:9b:09:4a:a2:b9:e3:b6:56:d4:
         3d:8a:62:67:5c:b1:42:27:b4:d7:06:40:57:5d:7e:58:cc:91:
         e4:7a:58:e7:70:dc:86:ab:a4:7d:1b:4f:80:37:e3:99:dc:9b:
         1a:62:da:b7:12:a4:ac:3a:8d:d4:5b:09:b9:17:52:79:30:a2:
         82:b4:c3:eb:e1:1d:4b:e6:4c:c5:a4:1c:dc:a8:f0:15:27:be:
         12:44:89:f5:ff:03:85:d2:56:ea:19:93:c1:64:99:a2:55:63:
         e9:3a:39:03:6f:91:04:0f:7d:b4:e2:42:4e:00:18:df:53:96:
         e6:57:a8:1f:2a:ec:59:ef:53:e8:29:de:2b:17:31:04:db:7d:
         05:9e:a4:35:01:df:af:c7:20:cc:1f:d4:56:c9:9c:63:cc:42:
         ee:5c:9c:e0:de:a4:ca:83:27:f1:f4:ee:63:22:13:93:ed:98:
         b7:e6:0b:24
-----BEGIN CERTIFICATE-----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Generated at Thu Aug 24 09:41:02 2023 by rpki-client on console-fra.rpki-client.org