Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1I7UgoloTUgEAs6O5LL1NoGliMU.cer
File:                     1I7UgoloTUgEAs6O5LL1NoGliMU.cer (raw, json)
Hash identifier:          lKzKtLP9vOtJoyUTusdYI1EFCv8C18KFSt3c/DrBJLU=
Subject key identifier:   D4:8E:D4:82:89:68:4D:48:04:02:CE:8E:E4:B2:F5:36:81:A5:88:C5
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0186C621EFF4FBCD31C84CDC25852A5E480C
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/56/45d55e-1fc0-4e37-8362-17d216d726d3/1/1I7UgoloTUgEAs6O5LL1NoGliMU.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/56/45d55e-1fc0-4e37-8362-17d216d726d3/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 09 Mar 2023 11:29:18 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 193.162.128.0/24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:c6:21:ef:f4:fb:cd:31:c8:4c:dc:25:85:2a:5e:48:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Mar  9 11:29:18 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=d48ed48289684d480402ce8ee4b2f53681a588c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:34:9d:7a:41:0e:a1:19:ca:6a:df:d7:31:60:
                    03:28:a1:a8:82:75:f8:03:76:28:4e:10:52:03:1f:
                    84:97:ba:85:9c:3e:be:00:ea:ff:05:33:3d:d9:ce:
                    c5:1a:2a:93:d2:18:9f:4a:c8:60:69:73:4e:71:f1:
                    e8:bc:62:b6:bf:d8:4a:9e:7b:76:bc:43:54:65:6d:
                    c7:29:83:09:3a:d2:c0:bf:af:af:b8:3f:92:11:b9:
                    f0:20:4b:03:aa:3a:9a:2c:bd:b5:33:26:7c:87:d0:
                    69:69:30:97:22:b5:6e:c9:3d:39:31:0f:1e:0f:29:
                    d9:4d:7a:bb:e3:ea:21:6c:e8:ce:a2:4e:c2:90:cc:
                    87:7b:3c:fb:15:62:4f:2e:b0:30:67:d3:ee:ea:75:
                    12:99:2f:ef:1e:29:f4:0f:ff:ad:c9:4b:56:f5:b6:
                    77:ad:eb:76:db:37:88:30:44:85:34:95:74:56:14:
                    08:59:c8:08:76:e0:49:3b:e0:41:d3:4c:df:73:74:
                    a6:35:7d:ff:5c:ca:f6:ae:51:ff:08:31:6c:47:af:
                    b2:bc:e0:35:04:db:1d:34:e3:3c:b6:f2:45:7e:32:
                    98:05:13:e3:ee:3f:85:44:a4:86:46:c7:25:22:71:
                    fd:de:4b:27:84:b6:4a:c1:95:64:dd:32:ea:ae:31:
                    19:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:8E:D4:82:89:68:4D:48:04:02:CE:8E:E4:B2:F5:36:81:A5:88:C5
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/45d55e-1fc0-4e37-8362-17d216d726d3/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/45d55e-1fc0-4e37-8362-17d216d726d3/1/1I7UgoloTUgEAs6O5LL1NoGliMU.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.162.128.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4f:7d:d8:b0:ed:14:9f:af:65:9d:3a:4c:0f:13:4e:0e:6c:b8:
         da:f3:6c:53:a0:11:ea:48:be:f6:1a:de:51:59:36:da:b5:32:
         11:15:17:67:c9:c9:bb:64:d9:79:f1:1a:82:6c:68:92:65:d3:
         92:0f:95:95:0a:fa:11:de:a2:95:37:dd:53:3d:eb:c3:02:bc:
         15:43:34:3b:d3:0c:ca:39:0c:1b:8a:1c:da:90:f7:c1:f7:18:
         3f:28:77:6c:28:48:70:fb:00:3a:b7:a4:e6:e5:1a:e9:3c:23:
         4f:dc:50:55:eb:53:46:45:6a:90:4e:b1:e3:a5:f6:84:55:45:
         e6:b7:8f:a7:da:0b:fb:34:e0:c8:3b:d2:89:c0:94:08:89:28:
         e3:bd:0b:f8:9c:d4:dd:aa:1b:c5:3c:9d:72:b5:ba:3f:fe:e1:
         de:e4:18:23:09:36:c6:80:7f:f3:95:e4:cf:3a:87:29:50:03:
         53:b1:70:e5:74:8f:59:ee:24:e5:32:aa:37:c3:a1:47:0f:ca:
         c4:eb:79:bc:e3:45:7d:4a:38:7f:ea:b3:bf:49:bd:90:20:8f:
         b8:21:ae:5c:2d:c2:7a:19:da:d9:8a:89:17:19:e2:e2:dd:e3:
         79:11:f1:0d:69:1b:63:c2:21:c7:bc:6e:9d:49:5a:e2:af:46:
         99:e0:3f:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----