Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-0MZXc7GD1nC-JyK-QICXRc7umo.cer
File:                     1-0MZXc7GD1nC-JyK-QICXRc7umo.cer (raw, json)
Hash identifier:          1wiHvx2sFVueb9eJHQMJkOubVhxegbeaZSn4waLOblU=
Subject key identifier:   FB:43:19:5D:CE:C6:0F:59:C2:F8:9C:8A:F9:02:02:5D:17:3B:BA:6A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018CC9BCB013DA3CAB22865E534873E859F9
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/17/dfd6bf-c3a6-48cb-a2a0-5bc09dc1b080/1/1-0MZXc7GD1nC-JyK-QICXRc7umo.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/17/dfd6bf-c3a6-48cb-a2a0-5bc09dc1b080/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Tue 02 Jan 2024 10:33:55 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    IP: 62.68.80.0/24

Validation:               Failed, certificate revoked on Wed 10 Apr 2024 13:43:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c9:bc:b0:13:da:3c:ab:22:86:5e:53:48:73:e8:59:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 10:33:55 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=fb43195dcec60f59c2f89c8af902025d173bba6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:83:63:76:a6:f2:4d:17:e8:a7:7f:d5:99:d1:
                    e9:59:d3:7f:56:ad:64:12:15:06:c4:84:ab:61:0b:
                    95:8c:38:e9:58:a1:b3:87:5c:46:81:30:94:59:5e:
                    02:a4:47:24:16:db:61:bd:26:1b:3d:01:9d:74:49:
                    bd:af:be:04:c8:5c:5b:c9:73:bb:49:32:80:0f:ec:
                    28:ca:4a:74:c7:bc:c0:40:2a:c5:e3:d7:87:30:49:
                    50:95:a4:1c:51:96:fe:03:1a:3c:6f:68:66:f2:6f:
                    8c:59:2e:77:ce:89:d2:f9:3c:e8:cb:f6:29:6a:a7:
                    e2:99:50:46:50:73:78:31:31:42:9a:e1:05:b1:f5:
                    5f:b5:73:d5:20:88:b2:bf:3a:5e:b2:d1:53:46:a7:
                    87:95:0f:28:a5:8e:57:9e:18:2c:ef:3d:ac:ee:4b:
                    5e:72:4e:a5:2d:e6:1a:06:ab:38:31:a2:23:57:1b:
                    52:0a:fa:a4:37:7b:ac:2f:67:6e:74:33:5f:cb:59:
                    9a:5a:c9:ae:96:f7:93:f8:1b:b0:b7:7b:06:d4:32:
                    3d:4d:d4:4b:05:7a:7e:9d:11:91:aa:51:b2:e3:23:
                    23:41:bd:00:bb:49:7a:9b:a5:9b:4b:80:31:3c:43:
                    09:09:b1:a3:74:50:11:b2:65:04:a2:83:7e:85:4e:
                    ca:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:43:19:5D:CE:C6:0F:59:C2:F8:9C:8A:F9:02:02:5D:17:3B:BA:6A
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/dfd6bf-c3a6-48cb-a2a0-5bc09dc1b080/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/dfd6bf-c3a6-48cb-a2a0-5bc09dc1b080/1/1-0MZXc7GD1nC-JyK-QICXRc7umo.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.68.80.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b1:3e:76:cb:0c:ae:a8:20:dc:73:26:fb:9c:e1:99:d4:b3:96:
         f1:8d:b0:07:f4:f9:c0:60:b7:bc:f9:79:bd:11:00:5b:26:38:
         61:6b:07:b7:11:15:44:1f:61:ab:52:6d:e4:e8:98:3a:01:11:
         4f:06:f5:c2:78:8f:ac:be:cc:e6:c1:b6:e4:d5:dc:e4:9f:ba:
         9c:33:69:a6:fc:b6:93:4d:f9:62:3e:ce:b6:bf:5b:63:f4:13:
         a6:47:4a:a0:a2:1c:3c:64:2a:e6:3a:75:6a:e4:7c:04:8e:b3:
         76:e8:7f:c3:18:32:44:72:0d:a8:1c:89:d5:82:32:c3:8c:cc:
         95:92:ef:2c:38:6a:9e:a2:7e:fa:b2:24:7a:a4:83:d9:1a:0f:
         02:99:ae:a9:7f:0c:5c:f7:5a:6b:19:8e:9c:b9:cd:f8:08:46:
         2f:34:39:06:56:59:67:88:ae:b2:60:f4:1e:fb:69:27:1f:9f:
         f2:a8:67:62:a3:74:71:23:a6:ea:1a:06:81:70:33:b5:c5:aa:
         09:f0:5c:35:ee:e4:11:65:0a:51:a4:2d:d6:cf:4d:1c:8a:ef:
         b8:a9:b7:6f:23:d5:55:27:92:2f:1b:6c:62:2e:de:b9:93:6b:
         f7:1d:ca:91:f4:19:d4:66:bc:28:2d:7c:75:9e:75:8c:dc:74:
         f3:48:db:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----