Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/pkc5Wv4m1vDQByxHCEl9S3QoRjk.cer
File:                     pkc5Wv4m1vDQByxHCEl9S3QoRjk.cer (raw, json)
Hash identifier:          xkV21vjJiMWdaBD5LghwrGyNzti6wjPmQ2FG7byRFWE=
Subject key identifier:   A6:47:39:5A:FE:26:D6:F0:D0:07:2C:47:08:49:7D:4B:74:28:46:39
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018570FAEB893A1FFE659F172CC23D4E4459
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/99/af94f6-b440-4cbe-80c6-52bbdfb65e19/1/pkc5Wv4m1vDQByxHCEl9S3QoRjk.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/99/af94f6-b440-4cbe-80c6-52bbdfb65e19/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 02 Jan 2023 05:36:10 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 109.234.73.0/24

Validation:               Failed, certificate revoked on Fri 10 Nov 2023 13:35:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:fa:eb:89:3a:1f:fe:65:9f:17:2c:c2:3d:4e:44:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 05:36:10 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=a647395afe26d6f0d0072c4708497d4b74284639
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:e9:01:6e:a4:1d:41:87:c5:d4:5a:82:ab:c8:
                    a4:92:d1:63:25:7a:1a:1b:60:88:b0:c8:ba:dc:04:
                    33:09:18:82:26:04:37:53:2d:d9:0c:91:e8:ac:41:
                    6d:80:20:b9:e2:ba:43:3d:08:55:3f:e1:15:a4:b5:
                    25:0d:52:7f:6c:68:bc:dd:44:e5:a7:04:88:e3:99:
                    ac:70:17:0d:e5:7b:b5:a0:85:98:fd:b9:58:97:27:
                    14:96:4e:99:7b:97:36:35:44:71:a1:36:75:ea:5d:
                    48:2e:4d:8a:08:37:71:61:1d:67:b3:33:85:08:a8:
                    6a:98:88:5a:e8:2d:52:5c:44:fc:be:15:2e:80:10:
                    4b:dd:ce:c5:17:ec:42:31:22:02:77:e7:dd:c2:a0:
                    9b:ed:2f:7a:56:ce:1d:87:8b:eb:62:ec:b4:03:ef:
                    ee:25:15:21:43:e8:c7:43:9d:d5:d6:3b:f5:e4:d1:
                    0e:38:55:0e:a1:2d:f7:40:fc:ce:0a:a7:c3:2f:31:
                    fe:4b:84:44:fd:a9:52:90:d2:70:e8:a2:ea:11:75:
                    9a:80:a7:19:b1:82:4f:0f:e1:12:f7:96:40:06:90:
                    ad:75:29:4b:7c:15:d2:96:a0:69:3b:55:37:70:e6:
                    96:33:dd:83:2a:b3:e6:9d:ad:f7:d9:b8:e9:c9:24:
                    14:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:47:39:5A:FE:26:D6:F0:D0:07:2C:47:08:49:7D:4B:74:28:46:39
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/af94f6-b440-4cbe-80c6-52bbdfb65e19/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/af94f6-b440-4cbe-80c6-52bbdfb65e19/1/pkc5Wv4m1vDQByxHCEl9S3QoRjk.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  109.234.73.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8f:a9:ef:32:fc:bc:5a:1c:91:45:d5:47:9d:c3:97:05:bb:b1:
         60:28:00:0c:ff:88:88:78:f3:71:2e:80:f0:02:a9:e5:95:85:
         7e:a7:ca:e6:01:e1:43:7e:18:db:1f:7d:98:aa:b9:69:e0:03:
         e2:bf:29:4d:7d:07:d4:2e:63:bc:97:1f:26:53:7b:ba:7c:4d:
         6e:ae:f3:54:c7:74:42:1f:3f:65:5b:7c:66:b4:4d:17:c2:38:
         f7:c2:c6:0a:ea:7b:ac:b7:6c:ac:63:46:86:4b:1e:65:d1:4f:
         6e:fe:9c:57:35:ee:6b:dc:26:a0:dc:08:ca:13:ff:f9:85:6d:
         ea:31:f5:1d:b9:8e:24:5d:4d:a7:2f:88:0c:d0:bc:5f:ac:a1:
         f0:f9:a6:93:4a:17:ae:65:6c:38:74:9b:66:40:47:47:d5:7d:
         0f:b6:f3:8f:42:87:f4:c7:fc:8e:ad:89:9e:71:f9:d3:2f:68:
         17:c0:c9:4c:ac:f9:16:75:fa:76:9e:df:d1:2b:d4:f8:b0:91:
         58:5a:69:e7:1d:8e:f8:88:c1:6c:c9:a4:19:68:5f:ca:36:49:
         5d:22:63:84:b9:af:d5:b2:bb:46:b3:6f:49:7f:9a:ec:89:51:
         23:43:54:23:8f:87:51:77:1e:6d:e6:37:29:04:dc:0f:9e:37:
         8a:ed:88:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----