Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0eAM_O2eO6VceewiWB7xs0vgHK4.cer
File:                     0eAM_O2eO6VceewiWB7xs0vgHK4.cer (raw, json)
Hash identifier:          VKSZeQdsOmAddnuKCNRRJN2xm1lLWMJ+43UUaaS5/nM=
Subject key identifier:   D1:E0:0C:FC:ED:9E:3B:A5:5C:79:EC:22:58:1E:F1:B3:4B:E0:1C:AE
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018CC348C77C3E43729C24223FED16BD0F5F
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/e5/c8a364-e897-446f-89f7-5df99d28eb4b/1/0eAM_O2eO6VceewiWB7xs0vgHK4.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/e5/c8a364-e897-446f-89f7-5df99d28eb4b/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 04:29:35 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    IP: 80.68.148.0/24
                          IP: 2a07:5340::/29

Validation:               Failed, certificate revoked on Thu 15 Feb 2024 14:15:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c3:48:c7:7c:3e:43:72:9c:24:22:3f:ed:16:bd:0f:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 04:29:35 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=d1e00cfced9e3ba55c79ec22581ef1b34be01cae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:d4:b7:b5:dd:b3:d6:23:03:6e:0a:1f:d6:f8:
                    0f:00:b8:7b:ae:5d:40:32:ce:8f:38:bd:49:e6:66:
                    46:05:48:32:7a:fc:36:30:84:ff:91:e1:e7:fa:83:
                    6a:7c:3b:76:93:b2:6a:15:db:34:30:d3:c9:2f:25:
                    a1:bc:b0:81:8e:f0:2d:d2:0b:47:d5:ee:ae:62:e2:
                    ca:c5:80:20:5c:8a:09:38:80:fb:ee:c7:97:93:5f:
                    33:32:cc:59:fa:94:1e:1b:bd:54:40:b8:b7:24:98:
                    57:fe:74:2c:b8:fa:05:ba:76:81:07:4a:0a:fc:41:
                    2f:09:fa:a2:3e:15:60:35:f3:89:8f:2a:6a:82:b4:
                    d0:5c:27:53:13:f1:15:ca:b7:3c:d7:2d:72:c9:08:
                    46:b1:96:19:d9:1e:23:02:69:b0:ee:13:8e:11:90:
                    3d:cf:78:ba:c0:56:b2:d1:07:53:ae:b3:e6:9e:33:
                    cf:07:b0:b2:1a:2e:47:6a:50:af:9f:8e:29:a5:1a:
                    4b:77:53:79:f0:e6:5b:ec:23:9f:bd:dd:e8:9d:76:
                    c8:3d:9b:b5:06:d6:93:49:b3:f8:17:e9:3c:f0:a9:
                    23:e1:ed:79:33:66:11:a7:ee:c2:05:14:e8:2c:61:
                    7f:fa:e1:6e:e0:fc:92:71:57:21:17:38:20:17:c2:
                    7b:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:E0:0C:FC:ED:9E:3B:A5:5C:79:EC:22:58:1E:F1:B3:4B:E0:1C:AE
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/c8a364-e897-446f-89f7-5df99d28eb4b/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/c8a364-e897-446f-89f7-5df99d28eb4b/1/0eAM_O2eO6VceewiWB7xs0vgHK4.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.68.148.0/24
                IPv6:
                  2a07:5340::/29

    Signature Algorithm: sha256WithRSAEncryption
         3b:23:71:e7:3b:05:3c:63:8c:0a:99:71:61:09:ea:87:b6:a2:
         49:89:80:91:bf:26:bf:b3:30:d2:d4:d3:56:7e:e0:dc:dc:ba:
         94:f2:c1:73:86:5d:21:ae:f4:ad:1e:92:fd:2d:83:c2:1d:df:
         63:ca:31:88:10:92:33:da:e8:70:bc:2c:3e:8b:80:ce:9c:26:
         e3:39:83:3c:33:55:58:54:8c:93:6e:d3:5d:4b:31:39:ab:28:
         4c:a1:e9:b9:36:5f:05:a1:63:7f:97:d4:f5:cc:0d:8d:48:c4:
         12:89:2e:de:b2:50:09:6d:1d:48:95:04:54:73:e7:10:15:61:
         91:87:3d:c9:00:b5:f8:b9:8c:b1:e2:5b:4c:12:2c:98:ee:64:
         c4:98:7e:7d:4f:db:e7:3e:0e:d1:49:35:28:c7:9c:8f:24:7d:
         8e:98:db:54:1b:c4:b9:1a:2b:8b:21:6d:07:62:4d:16:3c:a6:
         1a:93:73:dd:3c:d4:4b:22:79:36:0f:91:6a:70:47:98:af:ca:
         c6:e6:4b:d8:74:de:3c:fa:13:50:2d:2a:26:bc:fd:94:d2:70:
         8f:7a:c3:df:03:6b:26:cd:2d:94:09:60:4e:ff:46:33:2b:4e:
         18:1b:31:14:fc:7c:56:b5:a4:77:ce:f6:5e:09:76:c7:2d:43:
         dd:a7:16:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----