Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5xWdB7X2NyyG45agqmQAqPqm1TE.cer
File:                     5xWdB7X2NyyG45agqmQAqPqm1TE.cer (raw, json)
Hash identifier:          XK1eo30yRshqhmkWEMqvvKcrphprt7eNufsOBirdwTY=
Subject key identifier:   E7:15:9D:07:B5:F6:37:2C:86:E3:96:A0:AA:64:00:A8:FA:A6:D5:31
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018CC6B785FF033A76DF160887C3A3D6810F
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/5c/c71c12-7cae-44d6-b9b0-2771fba79a07/1/5xWdB7X2NyyG45agqmQAqPqm1TE.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/5c/c71c12-7cae-44d6-b9b0-2771fba79a07/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 20:29:25 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    IP: 195.138.203.0/24

Validation:               Failed, certificate revoked on Thu 21 Mar 2024 15:24:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c6:b7:85:ff:03:3a:76:df:16:08:87:c3:a3:d6:81:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 20:29:25 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=e7159d07b5f6372c86e396a0aa6400a8faa6d531
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:52:b9:f7:39:8a:67:56:dd:d4:8f:45:f5:c2:
                    ef:cf:a1:dc:b4:4f:42:0e:17:f8:99:ba:68:0c:96:
                    01:98:29:76:68:a2:16:d9:0f:92:56:9b:8e:c7:a5:
                    2e:2e:ae:5e:d3:6d:6f:d1:76:ff:4d:48:83:50:09:
                    74:df:74:a4:63:5b:80:4f:b4:8d:b9:4c:c6:c6:bc:
                    1e:76:a0:f1:7b:1f:35:ca:11:ed:9e:f3:34:3c:26:
                    e6:dd:cd:35:5a:f4:6a:a0:94:88:ba:54:85:e6:dd:
                    93:a1:95:9d:d7:dc:a7:01:14:73:43:69:ca:e7:8a:
                    cc:59:a8:04:d2:ba:25:c1:34:ed:66:a8:72:6e:56:
                    66:98:55:33:98:c5:0f:fb:28:cc:15:d9:f2:3a:2c:
                    e7:42:b5:5b:c6:9e:9e:b5:62:1e:ff:e7:54:90:d1:
                    2f:58:bb:fe:c4:9c:76:aa:c1:6c:95:b5:0a:fd:fd:
                    b9:7b:75:a8:6e:1a:ea:73:f7:09:81:e2:af:0c:df:
                    97:69:a6:52:ea:79:b4:e8:26:24:06:49:e6:c5:6a:
                    8c:c9:a4:63:b8:07:58:99:8b:29:e3:2a:63:23:d5:
                    c8:23:f2:73:c2:a8:08:48:d9:c5:32:49:b2:5c:0a:
                    cc:56:45:94:be:72:5f:bf:ca:ee:5d:91:9e:ce:3a:
                    51:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:15:9D:07:B5:F6:37:2C:86:E3:96:A0:AA:64:00:A8:FA:A6:D5:31
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/c71c12-7cae-44d6-b9b0-2771fba79a07/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/c71c12-7cae-44d6-b9b0-2771fba79a07/1/5xWdB7X2NyyG45agqmQAqPqm1TE.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.138.203.0/24

    Signature Algorithm: sha256WithRSAEncryption
         86:a8:b0:01:4d:c5:06:42:cf:ae:75:f5:6b:cc:c2:02:14:55:
         78:b8:7c:1b:02:1b:53:ad:25:30:54:77:37:1c:2f:44:39:94:
         35:27:83:e4:89:cc:5f:c6:13:99:c4:ef:5c:65:7d:5d:e7:e8:
         bd:d8:38:06:b9:47:95:ba:3f:32:e2:3d:67:2d:80:3a:35:60:
         f6:2f:46:7e:d0:2a:53:d8:7c:88:34:54:28:1a:36:53:c0:a0:
         88:d1:a3:e2:f2:2d:3e:2c:f6:bc:f5:e7:ec:14:be:23:af:82:
         1f:f9:ec:4d:67:3b:42:43:3e:6f:64:77:57:7a:28:46:0f:44:
         c4:0b:bb:0c:d8:d4:24:b6:76:7e:92:0b:b7:97:45:dc:79:65:
         93:7b:ec:23:bf:f1:9b:79:40:50:ce:f3:5b:1e:e8:1f:6b:73:
         9b:15:b9:b8:04:e0:4e:ee:6b:23:43:83:07:f2:43:db:21:f2:
         d8:76:89:50:97:11:2b:6d:91:cd:20:87:fc:c9:a0:59:67:39:
         ea:3c:41:97:60:69:ae:1e:18:52:62:00:ec:59:89:51:91:60:
         19:74:03:37:41:fb:93:67:b4:8e:00:bb:ad:82:d3:c9:93:de:
         e6:5c:2f:8b:05:cb:53:7c:4f:88:04:9a:ca:9c:81:3b:5b:c0:
         29:d9:a1:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----