Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5qf_FglTMsUgG8qdVMFuGEeoLyQ.cer
File:                     5qf_FglTMsUgG8qdVMFuGEeoLyQ.cer (raw, json)
Hash identifier:          har0d1ZhxKJG/g2L3sUCGx2dl0Clf8y9FmMLWm61nCQ=
Subject key identifier:   E6:A7:FF:16:09:53:32:C5:20:1B:CA:9D:54:C1:6E:18:47:A8:2F:24
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01887C6D0F49CFDAC626E632AA5AE5F01A6E
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/e6/82104b-4e44-4309-894b-b9d3e134e8ae/1/5qf_FglTMsUgG8qdVMFuGEeoLyQ.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/e6/82104b-4e44-4309-894b-b9d3e134e8ae/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 02 Jun 2023 14:05:02 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 89.107.10.0/24

Validation:               Failed, certificate revoked on Mon 21 Aug 2023 09:32:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:7c:6d:0f:49:cf:da:c6:26:e6:32:aa:5a:e5:f0:1a:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jun  2 14:05:02 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=e6a7ff16095332c5201bca9d54c16e1847a82f24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:f2:67:b3:2c:65:81:4f:e7:45:91:b7:16:3e:
                    78:7f:16:49:77:31:95:62:09:29:7f:bf:5e:d0:9b:
                    76:aa:12:47:e0:af:4f:6c:53:9d:e6:5e:9a:ad:aa:
                    bb:95:0a:1f:2a:54:01:7a:ec:64:49:ec:d4:c8:cf:
                    35:e7:2c:48:a8:7f:dc:e6:7d:eb:cc:ec:90:c7:07:
                    11:85:13:0e:f6:99:62:7c:ba:7d:c9:88:f8:f2:d2:
                    16:c3:8f:ff:36:c7:dd:3a:cc:6e:b0:4b:71:bb:c8:
                    4f:3f:fa:02:da:b3:79:35:43:79:bd:85:50:27:43:
                    7e:6d:09:98:0b:4b:83:60:a5:4c:ac:b6:a2:61:f5:
                    a9:66:2b:d4:af:a2:a3:5b:44:89:3f:11:1d:c1:0d:
                    09:fd:d2:9a:23:3b:6a:05:a5:b3:0e:f4:27:e5:f2:
                    40:55:0e:0c:38:15:d9:e6:4b:e8:d0:1f:bd:c0:58:
                    24:41:2d:be:8f:5d:8c:b2:f1:7e:64:31:78:02:1b:
                    3b:96:77:23:d0:97:48:7b:e6:b6:b2:64:3a:67:43:
                    54:79:a8:52:f5:fb:84:a5:67:36:32:ad:7a:65:41:
                    a4:c2:26:15:10:40:3a:c6:4d:ac:18:69:7a:36:1c:
                    d0:cd:67:80:18:b2:79:40:c8:f5:2d:4b:64:be:c1:
                    1c:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:A7:FF:16:09:53:32:C5:20:1B:CA:9D:54:C1:6E:18:47:A8:2F:24
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/82104b-4e44-4309-894b-b9d3e134e8ae/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/82104b-4e44-4309-894b-b9d3e134e8ae/1/5qf_FglTMsUgG8qdVMFuGEeoLyQ.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.107.10.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7f:ab:0b:6c:3b:ae:92:db:41:24:1d:da:15:42:29:ec:cf:66:
         6a:94:33:01:d4:7c:20:87:87:5e:2f:79:a3:af:16:05:a3:93:
         d4:5c:2b:2f:63:d3:ce:81:37:2b:4f:ac:e5:08:5a:d6:f6:ab:
         cf:23:bd:b0:c8:30:24:c3:c1:4e:9e:e8:08:cb:22:ad:f1:c8:
         b3:92:7c:3d:c9:c6:bf:3e:d0:6f:6e:ae:22:e8:d8:9c:f9:f9:
         70:fb:a5:f7:74:14:1f:ec:99:e3:f1:c7:6c:51:99:99:35:31:
         f7:78:36:99:3e:01:ee:35:89:9b:ea:37:27:30:bf:43:63:d7:
         bc:99:a8:56:8b:c4:89:04:2b:fe:8a:53:a6:82:8d:3d:50:17:
         f5:ea:b0:89:6f:82:93:bf:8c:05:31:71:6f:72:56:48:72:96:
         dc:8e:9f:c1:14:f7:3b:18:98:98:c8:91:7f:c5:d0:fd:74:b7:
         4c:38:dc:50:7c:38:7c:a6:48:a6:ce:e9:79:fe:16:05:03:44:
         ef:b5:cb:55:94:5b:8a:a3:0b:31:34:95:96:30:59:76:fd:41:
         be:a8:ba:97:01:09:db:56:22:83:3c:76:eb:96:da:88:5e:80:
         b8:04:9f:97:45:ca:2a:9a:cd:ba:0b:2c:3d:30:09:86:98:76:
         e1:53:7e:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----