Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/xs0xb3nSzT9_nMQreVaY69xPrQ8.cer
File:                     xs0xb3nSzT9_nMQreVaY69xPrQ8.cer (raw, json)
Hash identifier:          Kj5x0k32FZ6/Ai4wIZrth5BmRa3A01h6+81xCgyf9pI=
Subject key identifier:   C6:CD:31:6F:79:D2:CD:3F:7F:9C:C4:2B:79:56:98:EB:DC:4F:AD:0F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018571D64229B1A244119FC5FFC65C35818D
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/5b/0a50a5-a1bf-4eaf-94ba-3844c0150a36/1/xs0xb3nSzT9_nMQreVaY69xPrQ8.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/5b/0a50a5-a1bf-4eaf-94ba-3844c0150a36/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 02 Jan 2023 09:35:45 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 185.182.107.0/24

Validation:               Failed, certificate revoked on Wed 19 Jul 2023 07:53:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:71:d6:42:29:b1:a2:44:11:9f:c5:ff:c6:5c:35:81:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 09:35:45 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=c6cd316f79d2cd3f7f9cc42b795698ebdc4fad0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:ed:d3:13:a2:06:f4:db:a5:fe:89:58:bd:53:
                    ea:47:ea:5b:b0:ef:cc:53:95:ac:44:f2:90:51:f9:
                    81:8e:7e:d8:27:b8:25:4d:68:e2:41:38:74:10:af:
                    05:85:5e:24:72:4f:6a:95:df:78:bf:bb:c2:ed:0b:
                    20:a1:68:ff:81:99:b7:41:5b:4c:e0:5f:7e:26:3e:
                    52:ce:2f:2f:c1:12:8d:a8:3b:b2:7a:48:0f:2e:38:
                    dc:5b:3f:a6:4f:3a:af:5d:a4:36:02:57:90:d4:7c:
                    ba:30:be:f6:4c:d8:d8:b7:0c:26:f3:02:bc:85:a9:
                    21:a0:97:c0:ef:ce:a8:57:95:b8:19:01:c3:46:e7:
                    45:27:f5:9f:99:83:da:29:73:59:3b:5b:4c:f4:34:
                    e3:57:67:60:d0:d5:0f:36:a3:74:22:5e:ef:4f:d5:
                    d5:a7:47:ca:fd:13:fa:a9:f8:ca:a3:1f:18:e0:5f:
                    c5:b4:1d:9c:80:5b:86:20:fe:05:30:cc:ac:da:61:
                    03:42:c5:56:9b:1d:51:28:a8:aa:c6:9c:b8:cb:b0:
                    f7:55:0a:41:2f:8e:51:99:19:c5:e4:f5:db:c9:7a:
                    60:e9:fe:f5:b3:35:ca:1e:50:7b:3b:0e:78:2b:6b:
                    64:e4:26:a9:74:62:d3:0a:ea:2c:5d:69:89:70:ca:
                    73:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:CD:31:6F:79:D2:CD:3F:7F:9C:C4:2B:79:56:98:EB:DC:4F:AD:0F
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/0a50a5-a1bf-4eaf-94ba-3844c0150a36/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/0a50a5-a1bf-4eaf-94ba-3844c0150a36/1/xs0xb3nSzT9_nMQreVaY69xPrQ8.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.182.107.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5b:65:e2:ae:b0:4b:5b:10:56:43:b5:70:3f:d8:a6:25:cd:70:
         a0:d7:28:78:64:18:a6:77:49:f8:7a:3c:6a:c3:53:c8:70:09:
         6e:0f:ec:65:a2:7e:a2:e7:ef:1a:81:6c:db:8b:5f:3e:b2:e6:
         e8:a6:cb:3f:ab:56:c0:8a:8f:89:62:17:02:23:46:9a:04:90:
         ee:d8:53:5b:80:8f:88:19:9c:83:e2:9a:24:5d:52:c9:5b:6c:
         fb:d0:cd:c9:90:83:0d:4f:df:db:0a:63:2c:f3:37:2e:b4:a3:
         ea:a1:a2:73:48:5f:97:52:9a:6b:2f:ae:99:9b:66:25:ed:3f:
         61:c5:ce:76:bb:b0:50:24:5a:62:60:ae:11:c8:ab:68:a7:cf:
         e9:94:72:32:b6:c4:2b:c4:dd:c6:80:4b:49:94:60:88:b6:f7:
         a1:a6:4f:b9:71:a9:c9:03:4a:46:73:cc:cd:8c:65:84:0a:83:
         6a:38:da:a5:40:07:7f:30:99:11:89:a1:d0:96:e1:ec:f8:61:
         a4:62:79:85:ad:3f:9e:0f:f1:ff:40:96:28:a3:63:38:aa:eb:
         82:af:c9:a2:56:28:39:2b:fc:ea:16:fb:34:c9:e9:5c:eb:ec:
         68:be:76:f0:b6:84:89:21:a0:63:1b:52:0d:4e:bb:99:ff:05:
         2f:f0:1a:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----