Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0yAndLfeZB2OoYvlanX_YJh0dhg.cer
File:                     0yAndLfeZB2OoYvlanX_YJh0dhg.cer (raw, json)
Hash identifier:          u4Bk0yWiVPkb5K5acuzFS7NgN4KldFrPqw2vbYbZDco=
Subject key identifier:   D3:20:27:74:B7:DE:64:1D:8E:A1:8B:E5:6A:75:FF:60:98:74:76:18
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018E8030976BD0A3695450F9FD879EB1E037
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/ca/cb4b6b-18aa-4e2c-a405-e7e77b6fac1e/1/0yAndLfeZB2OoYvlanX_YJh0dhg.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/ca/cb4b6b-18aa-4e2c-a405-e7e77b6fac1e/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 27 Mar 2024 13:54:11 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    IP: 109.95.124.0/22

Validation:               Failed, certificate revoked on Wed 05 Jun 2024 09:50:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8e:80:30:97:6b:d0:a3:69:54:50:f9:fd:87:9e:b1:e0:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Mar 27 13:54:11 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=d3202774b7de641d8ea18be56a75ff6098747618
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:61:6f:d1:14:99:fb:2b:d7:36:6c:2c:56:5b:
                    3f:ed:80:a5:ce:d4:e1:21:aa:ee:99:24:25:d4:6b:
                    51:be:93:44:35:7c:51:c9:3c:a9:6b:60:e6:99:2f:
                    19:d0:ab:d7:cd:df:e3:ff:c6:20:78:fd:f1:a7:19:
                    11:3f:3f:5a:c4:84:50:62:06:b8:fd:b8:15:a1:02:
                    b9:fa:99:72:0b:d5:f7:ef:99:db:66:e1:3f:88:25:
                    77:0e:7d:77:ca:6d:77:e3:06:69:c0:ba:66:67:3a:
                    77:04:22:e2:72:f6:68:97:d9:92:58:fd:ef:93:9b:
                    ba:96:6f:c3:88:ed:ac:63:d7:56:bd:d7:89:d3:b2:
                    12:0b:c3:7c:dd:47:4d:94:c2:9b:59:da:43:d8:1f:
                    b7:a6:25:db:d2:b0:61:67:ef:1e:45:49:99:d6:e7:
                    4f:71:a3:00:72:bc:cf:87:ce:a4:6a:6f:f1:a3:12:
                    17:42:87:2c:f4:5f:60:f2:36:12:b8:f5:35:b1:57:
                    20:32:c6:39:a5:f1:a6:53:08:e0:42:a4:d3:3d:f0:
                    de:88:53:ce:c1:68:0e:0f:c3:e0:f6:d6:1e:e3:bc:
                    06:69:80:c9:38:a0:84:d2:fe:60:a6:a0:8c:9c:73:
                    64:30:f6:02:be:4d:21:67:a4:88:0e:f3:94:95:78:
                    3c:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:20:27:74:B7:DE:64:1D:8E:A1:8B:E5:6A:75:FF:60:98:74:76:18
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/cb4b6b-18aa-4e2c-a405-e7e77b6fac1e/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/cb4b6b-18aa-4e2c-a405-e7e77b6fac1e/1/0yAndLfeZB2OoYvlanX_YJh0dhg.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  109.95.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         28:f5:57:51:39:13:2f:d8:2c:40:ad:44:52:8d:b8:73:21:a9:
         08:5f:80:4e:d5:cf:3a:88:89:f4:2b:a7:e8:cd:2e:5c:86:b9:
         2c:97:86:10:13:5f:05:b0:ce:68:d8:12:bb:30:d0:d7:30:59:
         36:fb:d9:3c:56:30:d7:d9:63:a0:3f:79:2f:c8:00:57:23:c0:
         91:0e:bc:43:d9:e8:37:ed:77:91:06:1a:43:c4:70:3d:ae:00:
         1e:41:c1:37:55:8e:4a:31:85:71:63:6f:c6:b2:1e:c4:95:22:
         76:ea:34:dc:b5:2d:de:2e:e5:10:74:33:13:1f:48:24:74:94:
         6a:0c:fb:4e:ad:38:c5:aa:57:b5:06:b9:19:9d:cc:04:a8:6a:
         76:b7:b7:b9:e8:91:dd:9a:29:3b:38:24:3f:a0:c4:2c:97:e4:
         36:56:df:14:7a:24:23:7c:ac:1a:98:d3:a7:57:e5:8a:3d:7b:
         13:1c:4c:e2:f3:9f:a2:d7:26:77:ce:81:87:85:b1:29:6b:91:
         04:f9:b1:1e:41:af:9f:4a:da:f0:88:ef:57:0d:b5:f2:59:05:
         a9:10:10:8c:9a:0c:dd:df:cf:3a:8a:f9:60:9b:ad:30:c1:26:
         30:c4:35:b9:d9:2d:34:f6:07:ee:13:89:78:f5:b7:63:32:87:
         0d:e2:5b:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----