Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2jZAXW31_UxxyY4aRbHxbzS0MUw.cer
File:                     2jZAXW31_UxxyY4aRbHxbzS0MUw.cer (raw, json)
Hash identifier:          E9IpyZEBjnPntEwxG1/7sj/kRH6c7yMAlmMXwwN48eA=
Subject key identifier:   DA:36:40:5D:6D:F5:FD:4C:71:C9:8E:1A:45:B1:F1:6F:34:B4:31:4C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018CCA897D987E7645D1077DE7D1453C3936
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/d5/3dca4c-29b2-43e9-88ec-98b9d07db797/1/2jZAXW31_UxxyY4aRbHxbzS0MUw.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/d5/3dca4c-29b2-43e9-88ec-98b9d07db797/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Tue 02 Jan 2024 14:17:37 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    IP: 178.211.130.0/24

Validation:               Failed, certificate revoked on Tue 27 Feb 2024 08:21:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:ca:89:7d:98:7e:76:45:d1:07:7d:e7:d1:45:3c:39:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 14:17:37 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=da36405d6df5fd4c71c98e1a45b1f16f34b4314c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:35:13:a0:44:96:fe:43:c6:e7:cf:3d:e7:3d:
                    11:21:ad:04:dd:74:43:7d:ac:ab:a2:4c:a1:f2:f9:
                    6a:ce:4e:14:f0:62:65:26:5c:b0:e4:76:39:10:86:
                    79:98:69:12:dd:f5:4c:9e:14:59:1f:ca:bb:51:44:
                    45:d3:2b:da:2d:2e:e0:9b:ee:58:c4:78:82:30:c9:
                    87:39:18:5a:6d:2a:dc:3e:dd:e5:95:61:1a:f1:9e:
                    b5:a9:6e:a2:d2:af:5a:49:fb:c9:99:bc:ac:6c:5b:
                    43:19:1e:23:5e:39:c4:50:35:77:80:25:5d:b6:d8:
                    10:98:5f:51:1f:4f:9c:c1:2b:ad:c5:d2:20:82:15:
                    6a:75:e5:aa:e7:a6:d3:3e:0f:70:8f:e9:cd:99:91:
                    7c:2d:18:5e:73:87:57:2f:52:71:f6:13:e7:25:04:
                    b7:eb:1b:02:bd:b3:05:1f:8e:0c:74:a3:e0:4c:0f:
                    62:6f:7f:0d:07:c5:2a:81:37:49:c9:78:2a:ad:51:
                    0e:25:fa:b7:f1:ee:e0:f0:d7:a1:72:73:cc:90:4d:
                    66:97:b4:d5:e6:bf:26:b5:aa:40:09:30:9a:ee:43:
                    06:8e:5a:03:6c:48:33:9e:db:30:01:e1:a6:fb:1f:
                    39:37:af:55:c9:5e:fc:2f:1f:bc:ca:ef:90:67:d6:
                    8e:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:36:40:5D:6D:F5:FD:4C:71:C9:8E:1A:45:B1:F1:6F:34:B4:31:4C
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/3dca4c-29b2-43e9-88ec-98b9d07db797/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/3dca4c-29b2-43e9-88ec-98b9d07db797/1/2jZAXW31_UxxyY4aRbHxbzS0MUw.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  178.211.130.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2d:51:50:1b:6b:ed:e2:37:45:e8:0a:c1:f1:b8:06:71:74:6d:
         92:c5:5b:43:ca:5a:6a:50:09:2c:e2:56:33:00:2b:6e:a2:cb:
         8f:57:65:f1:25:e7:41:87:f7:8a:b3:85:c2:f1:d7:fd:b5:16:
         12:c1:70:10:4f:c3:21:9d:c0:47:19:1f:d2:eb:22:88:31:4c:
         ab:72:f0:c7:1d:0f:83:5b:df:55:27:21:d7:23:cb:5d:a9:3c:
         4b:ee:b9:17:a9:2d:2b:8a:34:b2:10:81:62:7d:00:f0:96:91:
         6e:db:d9:f8:d1:01:13:e7:af:db:35:20:02:44:97:af:b9:5e:
         50:a0:77:a0:e3:5a:6f:70:0d:2c:c3:cc:f4:6f:46:5a:e4:4f:
         ba:0e:5a:08:ec:d3:29:0d:f0:8a:90:1a:4f:2d:ca:6c:b9:bc:
         5c:c5:70:37:a3:d4:5c:aa:9a:02:66:14:6a:69:7e:e9:2a:cb:
         09:cc:01:e1:c7:ee:e0:ee:c5:c4:5b:49:07:49:d8:f8:63:d0:
         5c:8e:da:8a:c8:e5:e7:aa:94:4a:6c:93:7f:42:b0:3c:8b:ba:
         cb:b8:7c:ad:f3:3b:31:cb:48:51:43:e5:25:d1:c3:a2:f2:14:
         52:f8:6c:ca:7d:91:42:04:cc:07:97:1e:39:54:b4:d9:5d:48:
         cc:12:85:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----