Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5OZKLPsQQreSYgLFj_xJsKZUIkM.cer
File:                     5OZKLPsQQreSYgLFj_xJsKZUIkM.cer (raw, json)
Hash identifier:          +nCChabMsiggJCUyG/ke+rqkYh16j9JfoU7UsHUpD7Q=
Subject key identifier:   E4:E6:4A:2C:FB:10:42:B7:92:62:02:C5:8F:FC:49:B0:A6:54:22:43
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018A8400318BD78D48CDD3E7159A1D84B929
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/af/9281d0-1cfc-4aeb-a9ea-940654b20672/1/5OZKLPsQQreSYgLFj_xJsKZUIkM.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/af/9281d0-1cfc-4aeb-a9ea-940654b20672/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 11 Sep 2023 11:28:39 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 93.190.122.0/24

Validation:               Failed, certificate revoked on Thu 14 Dec 2023 10:09:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:84:00:31:8b:d7:8d:48:cd:d3:e7:15:9a:1d:84:b9:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Sep 11 11:28:39 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=e4e64a2cfb1042b7926202c58ffc49b0a6542243
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:94:b5:65:ba:e3:7b:98:00:c4:f9:fa:80:e3:
                    5b:fe:2e:ef:b8:22:68:55:5e:95:b3:f2:de:bc:32:
                    4f:60:42:ba:14:20:5c:75:38:a3:ae:d1:4a:75:b8:
                    d7:3f:ab:7a:b0:af:77:69:1e:58:27:8f:95:fd:9d:
                    43:6f:98:80:c7:33:90:01:6b:ae:5e:37:2d:17:95:
                    7c:5f:ff:02:81:7f:0c:c8:86:06:64:08:37:c8:f2:
                    d2:1d:53:34:c1:d0:bb:54:81:8b:ff:ff:54:4c:6e:
                    3c:d2:ca:1a:52:50:a1:92:ab:bd:6b:3b:27:3a:bf:
                    46:c4:fd:08:97:c2:89:1b:bf:94:aa:c9:89:4e:81:
                    fd:47:b4:4f:04:b2:ba:98:ec:82:0e:44:a6:76:8d:
                    a8:9f:a9:89:16:fd:14:e6:c6:90:4d:80:4c:bd:9d:
                    d6:53:f8:1b:5b:4f:8a:8c:0c:83:38:90:ad:8f:12:
                    dc:a0:96:ae:47:38:eb:c8:56:5c:7c:2c:0d:af:f6:
                    51:9b:44:41:ae:02:ed:13:df:c3:fe:9d:b3:d5:16:
                    01:68:0e:74:bb:fb:86:90:77:03:c6:08:18:2b:34:
                    9c:42:54:ff:4b:81:7f:53:e4:d8:7b:06:40:72:c7:
                    87:c2:8d:2e:12:bd:31:33:67:bd:c6:ea:ce:78:ee:
                    22:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:E6:4A:2C:FB:10:42:B7:92:62:02:C5:8F:FC:49:B0:A6:54:22:43
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/9281d0-1cfc-4aeb-a9ea-940654b20672/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/9281d0-1cfc-4aeb-a9ea-940654b20672/1/5OZKLPsQQreSYgLFj_xJsKZUIkM.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.190.122.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9e:7d:32:eb:6f:b3:d8:a5:e4:0a:67:95:64:d2:54:f9:e8:02:
         52:d9:8c:09:c0:09:17:3e:25:b4:35:07:1b:cd:28:e1:39:c7:
         59:a6:9d:3c:06:23:62:a0:f9:05:bc:92:6e:ec:e3:cf:64:a4:
         90:4a:f3:77:45:32:67:5f:14:49:07:03:6f:8b:4c:f4:6f:f1:
         77:26:2c:d1:6b:66:a2:b6:00:a5:d5:b3:0a:08:ac:89:fd:c2:
         88:18:71:0e:e7:d7:1c:3f:4c:ba:c1:4d:23:92:99:49:73:01:
         f7:cc:3b:9c:bb:12:ad:bd:51:48:a6:19:a0:79:53:49:75:5d:
         26:5d:a3:3c:b4:91:11:87:d2:9a:fd:71:61:d2:29:66:fa:93:
         31:69:7e:44:97:7b:c9:9e:67:7d:0b:ec:d2:64:c0:64:d4:db:
         cf:4b:1e:e4:fa:fd:29:b8:7a:d8:35:cf:ca:a5:36:a3:9d:91:
         4b:50:23:3d:cb:e4:4b:b7:3a:88:7d:1a:18:df:f2:9a:75:84:
         f3:3b:26:78:8a:c5:fb:3f:1d:83:1d:04:30:1f:72:f5:1a:ef:
         ca:97:86:2f:9b:95:69:b1:76:7c:ea:0f:1e:d9:e6:56:3a:6d:
         32:7c:8c:19:1d:6c:89:f8:15:74:5f:83:87:99:49:c0:d3:11:
         14:8b:51:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----