Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3PA197_VBt9uGSQPtDrusshSANQ.cer
File:                     3PA197_VBt9uGSQPtDrusshSANQ.cer (raw, json)
Hash identifier:          aAUqBiVZ73WbJvgr/a8pRLgNPimkJ2+3EHq4h+1C3Mg=
Subject key identifier:   DC:F0:35:F7:BF:D5:06:DF:6E:19:24:0F:B4:3A:EE:B2:C8:52:00:D4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018572460ED7C2908FADC01753E4E1C356DF
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/dc/1b610b-2740-44e9-844a-9a3ccd99bdb4/1/3PA197_VBt9uGSQPtDrusshSANQ.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/dc/1b610b-2740-44e9-844a-9a3ccd99bdb4/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 02 Jan 2023 11:37:52 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 130.193.77.0/24

Validation:               Failed, certificate revoked on Mon 11 Sep 2023 11:52:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:72:46:0e:d7:c2:90:8f:ad:c0:17:53:e4:e1:c3:56:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 11:37:52 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=dcf035f7bfd506df6e19240fb43aeeb2c85200d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:69:9f:5e:d3:4a:69:52:ea:4b:33:cc:42:c4:
                    20:53:47:e1:47:01:01:8c:b3:38:96:d9:84:b3:5c:
                    cc:ae:af:00:f3:a9:24:e4:76:65:96:6f:4b:89:8a:
                    da:a0:91:d7:92:40:d1:05:3a:52:98:a6:62:57:21:
                    51:b7:f4:84:3b:3c:5b:09:bb:18:d5:78:e9:c4:8d:
                    3b:18:ec:4c:80:84:4d:57:c5:6e:62:c9:04:09:24:
                    ad:93:a1:c6:66:46:20:89:9a:d5:19:3b:2e:ef:cf:
                    3e:fa:34:1d:72:e4:59:6c:14:c2:81:27:fb:3b:aa:
                    03:b6:19:d6:93:fd:18:f2:0a:be:d6:e9:b5:16:cc:
                    dd:7f:52:34:3f:d6:84:8d:1d:3b:3b:95:34:68:24:
                    d5:08:00:7a:70:70:af:7b:52:0c:31:d2:78:ca:1f:
                    d4:7b:0e:20:ba:1d:8e:42:93:55:bc:e4:eb:4f:1c:
                    ec:02:b8:4a:d7:b7:af:37:e2:7a:d8:3d:39:2b:37:
                    97:43:82:fe:5f:d1:8c:24:07:c8:68:0a:65:a6:17:
                    c4:de:e3:b5:85:33:d6:e6:35:f0:46:90:e3:7a:fb:
                    8e:e2:59:f5:9f:50:16:ac:bc:24:bd:14:4f:51:44:
                    c1:9c:4a:fa:46:dc:da:ce:b8:e8:57:89:ae:3a:a7:
                    19:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:F0:35:F7:BF:D5:06:DF:6E:19:24:0F:B4:3A:EE:B2:C8:52:00:D4
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/1b610b-2740-44e9-844a-9a3ccd99bdb4/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/1b610b-2740-44e9-844a-9a3ccd99bdb4/1/3PA197_VBt9uGSQPtDrusshSANQ.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.193.77.0/24

    Signature Algorithm: sha256WithRSAEncryption
         04:07:2f:7d:75:07:a4:35:c3:a2:48:8b:df:82:a3:43:ad:fe:
         a2:06:e3:5f:b6:ab:c2:23:f0:93:be:dc:04:15:73:9f:ef:45:
         95:93:07:b8:01:9b:f2:9e:a8:e9:89:b3:b9:2c:d8:5f:f4:a5:
         7b:80:fb:14:9e:31:a5:85:13:fb:4d:c6:6d:6d:f0:f5:ee:f3:
         ed:e9:38:4b:82:fd:27:25:d9:5b:c4:dc:1d:86:7e:b5:97:22:
         e9:ae:d3:82:ed:1c:ca:21:64:35:ac:92:b0:31:53:f4:3b:ff:
         5b:17:f1:2c:a5:65:b9:44:b4:87:c8:e3:9f:2c:6b:69:27:f5:
         8c:dd:21:1d:cd:c8:51:90:ce:7f:7c:69:65:9d:ed:b2:73:d3:
         24:32:ca:ad:39:fc:92:6d:c2:1f:bc:c6:d1:57:50:81:3c:ff:
         71:ed:82:01:03:08:bc:8d:8a:69:2b:5d:97:a9:c2:23:b0:b7:
         6f:81:5c:b0:cc:be:02:cb:19:1a:16:a5:c6:bc:30:b9:ec:10:
         8e:11:77:f9:c3:e4:3d:de:76:5f:ea:da:c5:59:5c:fd:0e:ca:
         65:2b:ec:f0:ba:1f:18:3f:d4:ce:31:bc:61:0a:dc:fb:e9:18:
         1b:4d:eb:39:21:45:12:de:1a:22:ab:e0:1c:ee:45:ce:93:70:
         cc:82:68:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----