Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5s-R57lJ_YQ9iOz84tFVTWrpgdk.cer
File:                     5s-R57lJ_YQ9iOz84tFVTWrpgdk.cer (raw, json)
Hash identifier:          HfPdF+PBxDo8LjG593NGmxO8t84iGVOsHFgfTGO+on8=
Subject key identifier:   E6:CF:91:E7:B9:49:FD:84:3D:88:EC:FC:E2:D1:55:4D:6A:E9:81:D9
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856B6348E49F8680E5D9013AE96F33E98E
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/0f/07dc14-932a-4cc3-badd-8157a1cbf139/1/5s-R57lJ_YQ9iOz84tFVTWrpgdk.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/0f/07dc14-932a-4cc3-badd-8157a1cbf139/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 03:32:26 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 91.242.236.0/24
                          IP: 2a11:adc0::/29

Validation:               Failed, certificate revoked on Mon 16 Oct 2023 14:35:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6b:63:48:e4:9f:86:80:e5:d9:01:3a:e9:6f:33:e9:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 03:32:26 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=e6cf91e7b949fd843d88ecfce2d1554d6ae981d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:f9:51:8c:0e:f0:c8:00:c9:c8:c4:4b:64:82:
                    bf:8c:bb:3f:4a:06:4e:5c:54:b6:fe:d9:04:ac:5b:
                    b3:ae:4b:52:24:d1:0e:6b:f8:27:19:7b:8c:d7:43:
                    7c:80:fd:cd:53:68:d4:62:db:c1:47:5a:cb:3e:7a:
                    5c:21:35:b6:4b:a7:13:1b:c8:66:14:75:f9:41:11:
                    96:f1:05:c9:45:7f:43:13:2e:10:ac:3b:c4:0e:ce:
                    07:8e:8d:ea:f5:eb:e2:cb:62:4d:ff:44:02:e9:8f:
                    08:f9:ea:6f:95:83:c6:8c:6d:43:a0:5f:79:8e:45:
                    21:5d:b8:0c:4d:5d:d1:2a:bb:20:9e:61:22:bc:d7:
                    2a:df:7d:cf:b5:bb:73:6c:66:10:2c:35:24:d0:81:
                    2e:7e:15:65:20:61:8b:c5:9b:fb:f5:ce:bb:1c:2d:
                    02:b6:81:4a:68:69:73:d4:a7:32:49:f0:c5:4b:a7:
                    9c:59:2d:13:3d:af:83:d3:e6:97:d2:d1:a9:37:60:
                    6b:d4:08:42:8c:7a:64:72:09:f0:db:f0:5b:88:da:
                    ba:a1:eb:00:44:de:56:27:da:a5:b0:99:0d:78:8a:
                    7b:dc:fd:10:99:50:7b:03:ef:bc:fc:0d:91:e8:ec:
                    cd:3d:c4:95:e9:d8:13:d4:2b:b7:b0:19:0b:0a:85:
                    21:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:CF:91:E7:B9:49:FD:84:3D:88:EC:FC:E2:D1:55:4D:6A:E9:81:D9
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/07dc14-932a-4cc3-badd-8157a1cbf139/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/07dc14-932a-4cc3-badd-8157a1cbf139/1/5s-R57lJ_YQ9iOz84tFVTWrpgdk.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.242.236.0/24
                IPv6:
                  2a11:adc0::/29

    Signature Algorithm: sha256WithRSAEncryption
         01:4a:4d:92:06:36:d6:f9:0d:df:0f:2b:1c:32:32:b9:57:fa:
         7d:51:e7:6c:fe:49:40:e5:a1:16:3e:c9:f0:33:2b:24:c8:bc:
         32:1c:61:e2:91:dd:1e:01:bb:9b:ee:cd:6c:e3:ea:ce:f4:76:
         60:58:a1:17:6a:78:6c:22:69:18:29:30:43:85:83:4a:15:a2:
         ec:35:22:5f:90:62:03:d3:2f:29:f8:46:35:96:0a:22:df:5e:
         94:78:b2:f6:91:e5:e9:66:83:a7:a0:e6:71:03:1c:af:cd:73:
         1c:c5:4b:0b:cd:47:60:62:f8:3c:0c:79:8e:81:58:0d:c9:24:
         df:f7:5f:97:54:6f:57:b8:75:ab:6a:af:91:6c:42:73:dd:4e:
         37:ad:8f:bd:04:0c:d2:95:fa:75:9d:58:8f:24:b5:8d:49:8d:
         dd:98:c1:e1:93:e9:65:c1:73:fb:75:24:b0:3d:08:5e:4c:f6:
         82:f2:27:56:60:bc:70:e5:50:86:51:67:07:1f:18:57:7d:a9:
         28:b8:b7:7e:ef:fb:cb:20:e5:93:1a:71:62:fc:59:fc:36:c7:
         f4:84:46:bd:6c:cf:23:67:6c:d5:66:b8:a2:51:22:bd:9e:08:
         36:d4:c8:45:65:5c:f5:7f:6e:88:04:bc:2f:26:fb:6b:95:69:
         a6:4c:8d:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----