Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2X7Bz-q-aRLAl7CsOYQUu5mPuWU.cer
File:                     2X7Bz-q-aRLAl7CsOYQUu5mPuWU.cer (raw, json)
Hash identifier:          e1POmHHD+yKw/fPdtiUoA4wBAKgxcNVkYtKDyfYoGug=
Subject key identifier:   D9:7E:C1:CF:EA:BE:69:12:C0:97:B0:AC:39:84:14:BB:99:8F:B9:65
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018F0F22982D0DDF8EEF390EA4BD37B5C7DA
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/0d/07b3b0-7b5d-4f96-94cf-b7a553b13237/1/2X7Bz-q-aRLAl7CsOYQUu5mPuWU.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/0d/07b3b0-7b5d-4f96-94cf-b7a553b13237/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 24 Apr 2024 08:04:36 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    IP: 185.140.40.0/22

Validation:               Failed, certificate revoked on Wed 24 Apr 2024 08:19:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:0f:22:98:2d:0d:df:8e:ef:39:0e:a4:bd:37:b5:c7:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Apr 24 08:04:36 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=d97ec1cfeabe6912c097b0ac398414bb998fb965
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:20:c2:e7:c6:b2:60:0a:03:f6:3c:c6:87:7b:
                    f4:6a:4c:cf:ff:da:c6:93:00:2c:ca:11:e2:cb:a9:
                    b4:67:32:ea:6b:89:aa:b5:17:f8:e7:0a:97:08:55:
                    da:6d:78:e8:46:dc:fa:9e:f1:b6:02:5f:24:33:e1:
                    81:9e:56:88:96:b2:4d:e2:80:b0:52:ed:85:a4:d7:
                    67:f5:c9:b8:7f:18:6e:47:ee:61:3a:94:5b:05:7d:
                    1e:93:00:9b:36:ce:f2:f1:d0:01:1d:d8:0d:76:f2:
                    51:c7:10:4f:0b:93:ed:34:fe:59:7c:ce:18:bb:3e:
                    51:59:7a:fc:83:38:fa:34:c5:16:cf:e7:0a:6f:0f:
                    5a:47:cd:a0:40:bf:9f:c2:73:38:eb:f5:24:a1:14:
                    2a:9d:a3:23:ea:54:b0:f4:b7:94:23:56:cd:bc:09:
                    18:bf:6d:c7:74:6e:02:29:5c:e7:8a:08:15:ae:7d:
                    14:ae:d5:cd:89:0d:ec:4d:82:37:e2:01:80:77:5d:
                    06:16:f1:72:f1:f8:95:02:4f:6a:15:9f:8e:70:af:
                    53:16:40:45:4e:f1:2a:12:31:d2:09:f3:68:34:9d:
                    7c:9a:fd:d7:93:bf:f3:71:9d:8f:c0:06:28:72:08:
                    f9:b0:34:18:74:cf:f2:61:61:24:42:5e:03:25:6c:
                    8f:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:7E:C1:CF:EA:BE:69:12:C0:97:B0:AC:39:84:14:BB:99:8F:B9:65
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/07b3b0-7b5d-4f96-94cf-b7a553b13237/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/07b3b0-7b5d-4f96-94cf-b7a553b13237/1/2X7Bz-q-aRLAl7CsOYQUu5mPuWU.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.140.40.0/22

    Signature Algorithm: sha256WithRSAEncryption
         76:14:07:d4:4d:08:d4:55:9a:f5:92:92:75:d0:37:d9:c5:a5:
         75:20:2c:e4:66:63:7b:e5:f5:a6:01:b8:ca:7d:d7:27:f9:10:
         0d:34:9d:ea:10:0c:17:b9:79:fb:a2:b3:00:9f:9c:51:56:dd:
         8a:e0:d1:20:49:a6:c7:da:ba:e7:ed:05:3d:c4:c5:71:7e:b5:
         e4:1a:09:aa:b7:0d:89:d4:7a:65:ce:9d:67:32:1d:eb:17:b6:
         68:da:89:a2:ce:66:80:52:c2:cf:e7:ba:58:25:04:2b:ef:50:
         c9:bf:5a:2b:35:87:33:72:31:41:97:0d:f7:5f:c5:60:04:96:
         1a:28:ed:cf:50:b0:e3:23:71:0d:79:ee:8f:34:49:22:f0:38:
         f0:72:07:34:91:37:9e:3d:f0:f1:4c:ef:12:19:43:92:3a:b4:
         01:71:de:3e:4e:dd:a2:fa:b5:cd:5a:db:0e:26:ad:2e:82:2a:
         22:66:e4:67:9e:58:b9:50:f1:53:bc:dd:87:da:31:15:f3:00:
         92:8d:09:8c:16:96:32:db:ce:a7:2f:4b:bb:1d:fd:8b:54:89:
         3b:bf:ba:ce:6c:c9:e5:95:f1:95:6c:b6:78:a6:11:fc:2a:a5:
         80:77:7c:bd:23:90:e1:9c:1c:25:a8:f8:66:84:43:f8:22:e1:
         f5:46:a0:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----