Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3GOQEBlxVTMycuMNMehX5YQPfwc.cer
File:                     3GOQEBlxVTMycuMNMehX5YQPfwc.cer (raw, json)
Hash identifier:          TtAiiaML4fmBhoXjYMcavNjkfaoL4O+1g/U0XiH3KWo=
Subject key identifier:   DC:63:90:10:19:71:55:33:32:72:E3:0D:31:E8:57:E5:84:0F:7F:07
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01884E879DC8776B3EB6832724C6E9BAD145
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/2d/bbdd98-a3e5-4e72-9623-17c195067e29/1/3GOQEBlxVTMycuMNMehX5YQPfwc.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/2d/bbdd98-a3e5-4e72-9623-17c195067e29/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 24 May 2023 16:11:30 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 185.193.241.0/24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:4e:87:9d:c8:77:6b:3e:b6:83:27:24:c6:e9:ba:d1:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: May 24 16:11:30 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=dc639010197155333272e30d31e857e5840f7f07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:a1:55:00:a8:24:a4:0b:f2:f0:9f:d5:bb:c0:
                    52:fe:cf:01:60:b0:fc:04:49:f9:79:21:fe:c2:88:
                    ac:f4:15:36:6b:a6:c6:a9:f2:85:54:34:68:eb:75:
                    53:a6:d0:52:45:b2:43:97:72:11:8b:9f:64:e1:39:
                    f0:0d:83:ad:7c:e6:c7:02:47:04:e1:91:d7:41:8c:
                    ad:97:1b:56:24:9d:bc:e3:db:8d:8f:d3:3a:9a:95:
                    dc:22:4b:d5:ee:3e:26:3b:80:e3:32:2e:43:60:f2:
                    3d:e0:82:6a:98:4c:96:b9:9d:50:f7:36:a5:7e:08:
                    18:b8:3e:5a:1c:71:05:77:c9:5f:5c:9c:b1:16:59:
                    3d:e2:4d:a7:87:85:c5:f3:ac:6d:0a:c3:b8:f8:66:
                    67:ff:ac:ba:65:3d:f1:77:2e:d4:d4:dd:7d:20:19:
                    a1:9a:44:ec:c3:c1:48:0e:58:03:4e:64:7a:5a:f1:
                    69:96:03:3f:80:a3:56:3b:34:be:a2:17:38:81:75:
                    98:c8:95:c4:77:02:b0:29:62:c8:b1:19:9f:a1:d2:
                    b7:d2:ee:d8:db:b8:11:c9:0e:1b:52:e0:cb:9f:cb:
                    43:d7:ae:cb:e9:32:af:33:09:12:58:02:fd:94:02:
                    24:79:3a:c7:6e:d1:d7:3c:a8:d8:73:cf:2b:1e:21:
                    16:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:63:90:10:19:71:55:33:32:72:E3:0D:31:E8:57:E5:84:0F:7F:07
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/bbdd98-a3e5-4e72-9623-17c195067e29/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/bbdd98-a3e5-4e72-9623-17c195067e29/1/3GOQEBlxVTMycuMNMehX5YQPfwc.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.193.241.0/24

    Signature Algorithm: sha256WithRSAEncryption
         78:34:e1:7a:a8:95:e3:ca:7d:65:43:a3:97:2f:9e:33:05:12:
         41:af:10:af:03:39:6c:77:5a:a5:e6:18:a5:fc:ca:9d:ae:eb:
         6c:1a:cc:79:8b:57:dd:81:25:83:c7:b1:14:fe:8d:c0:a9:a7:
         1f:79:05:f1:4e:c0:a5:5f:54:e6:bb:82:cf:e0:c9:cb:9c:d9:
         dc:d2:1c:60:3d:63:37:ae:39:da:f1:e6:ca:9c:51:b5:ca:ff:
         c0:e7:bd:a4:85:48:27:3b:9a:93:ae:ec:a5:c9:a8:56:5e:d3:
         3e:7a:9a:b3:8a:db:14:90:ad:61:34:c6:3d:6c:a1:e1:8c:20:
         13:83:60:23:14:22:f4:8d:b6:9d:c9:31:ce:c4:f3:39:34:83:
         59:4d:e8:15:e3:dc:f0:da:48:d8:8e:68:08:e7:ed:b0:40:85:
         4b:5a:21:7a:c6:87:04:34:f0:50:8c:10:44:de:cd:49:07:a7:
         b0:f8:f7:dd:3f:54:95:59:ab:a0:ff:f9:e7:db:0d:30:c9:8d:
         cb:be:93:b7:3a:c4:65:bf:a5:dd:ab:91:a0:9b:4d:2c:2b:7c:
         9e:73:70:d1:18:84:0a:71:3a:db:a0:5d:61:8f:4b:bc:a7:3e:
         94:3d:68:a3:4b:48:cc:aa:1f:ae:9b:c9:cd:6f:4f:53:26:30:
         2e:e1:75:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----