Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2mWPd2BVawKd9aKVkzfVa9Xgx_k.cer
File:                     2mWPd2BVawKd9aKVkzfVa9Xgx_k.cer (raw, json)
Hash identifier:          6VfjjAg7821SdtFOwjX4Alh+O4m3yjGyfCJqMUZeR08=
Subject key identifier:   DA:65:8F:77:60:55:6B:02:9D:F5:A2:95:93:37:D5:6B:D5:E0:C7:F9
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018CC26CEEC6B911CC96FCFFB81309F70595
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/03/ff87ea-d9a1-49d3-84a9-6751c8cf99b5/1/2mWPd2BVawKd9aKVkzfVa9Xgx_k.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/03/ff87ea-d9a1-49d3-84a9-6751c8cf99b5/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 00:29:28 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    AS: 197657
                          IP: 2001:67c:cc8::/48

Validation:               Failed, certificate revoked on Mon 22 Jul 2024 11:34:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c2:6c:ee:c6:b9:11:cc:96:fc:ff:b8:13:09:f7:05:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 00:29:28 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=da658f7760556b029df5a2959337d56bd5e0c7f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:80:80:12:23:a8:60:5e:9a:3a:f4:a9:28:3c:
                    f5:65:9c:f2:67:95:5c:2c:26:66:31:93:5f:93:fa:
                    52:20:db:4c:d6:93:2a:0a:0e:e6:8d:ab:37:51:2f:
                    d7:fe:96:fc:a1:34:06:68:31:fa:0d:5a:ff:18:5d:
                    e8:91:22:e1:ca:76:a8:93:f5:7c:76:c9:c8:0c:a3:
                    66:58:3f:c4:95:ec:9e:f3:cd:06:59:4f:12:2e:14:
                    67:f0:c2:84:f1:b7:7e:2b:81:32:ee:69:9c:d9:7a:
                    d5:db:39:38:3c:9c:ce:98:e9:cd:22:63:13:9c:44:
                    00:3f:fa:90:a4:70:d3:5a:76:0e:3a:41:dd:1f:8a:
                    03:54:e8:85:14:4f:b0:94:88:7d:64:32:67:b7:75:
                    0e:7a:01:54:36:1b:a2:63:0d:38:20:03:99:ff:5d:
                    82:52:c6:23:be:80:6a:16:de:08:81:3f:23:92:73:
                    79:c9:17:5a:b9:b4:ff:ab:5e:59:72:da:10:ba:85:
                    46:e0:d5:bb:9d:53:5e:c0:bc:4a:34:e6:63:f2:ad:
                    98:7e:4b:ec:25:0b:76:0c:20:0c:bf:69:ac:32:05:
                    47:80:f2:40:37:0d:7b:92:04:7f:f2:c1:36:b4:9a:
                    a1:3e:c0:31:ba:31:14:47:bf:d1:5b:9a:a6:07:36:
                    b4:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:65:8F:77:60:55:6B:02:9D:F5:A2:95:93:37:D5:6B:D5:E0:C7:F9
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/ff87ea-d9a1-49d3-84a9-6751c8cf99b5/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/ff87ea-d9a1-49d3-84a9-6751c8cf99b5/1/2mWPd2BVawKd9aKVkzfVa9Xgx_k.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:cc8::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  197657

    Signature Algorithm: sha256WithRSAEncryption
         51:93:f5:9e:ec:a2:65:f9:99:3a:67:c4:1c:df:1c:0a:d9:71:
         28:88:bd:f8:92:64:cb:8e:f7:0e:b4:3c:4f:51:ea:c1:77:c3:
         35:ab:e4:c3:c0:32:f3:19:7d:03:88:fd:3a:12:23:38:b3:8c:
         bc:31:a4:cf:2e:21:60:e2:41:be:21:08:cd:4e:06:72:c8:02:
         4a:af:4b:88:21:11:c7:19:e7:e5:41:3e:4b:c9:c5:42:75:2b:
         4a:66:dd:1c:67:57:b6:86:d5:0f:ea:f7:51:4d:2f:6f:0d:cd:
         df:b3:c8:ff:45:24:21:06:04:ed:f3:ea:1f:b4:bf:2f:6d:cf:
         0f:e1:d9:d6:82:d7:92:cc:46:40:2a:7b:98:a3:6b:8b:7a:95:
         02:ad:1c:84:94:91:e6:17:75:d9:f8:a5:f7:10:10:8b:21:f6:
         63:4d:13:43:89:9f:e8:c6:e1:71:19:fe:4c:1c:52:2d:7a:19:
         06:70:63:dc:84:6e:fb:e7:a5:47:88:66:e9:df:4e:42:13:ef:
         a2:41:c7:4c:3b:20:31:ad:aa:3e:6f:ee:2e:e1:d3:f4:9e:2f:
         63:75:6b:0d:7b:34:9c:10:61:20:1c:b1:e5:73:c9:63:05:66:
         89:d5:89:f6:78:68:17:7b:b6:97:31:db:79:3b:c4:15:c4:99:
         a1:4a:62:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----