Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63XAq130262KekQ5ff1rlXly_vE.cer
File:                     63XAq130262KekQ5ff1rlXly_vE.cer (raw, json)
Hash identifier:          IFJU/k1xPq5GHQm4s3lLN66qPCLBmgOQdmND1NFwpAE=
Subject key identifier:   EB:75:C0:AB:5D:F4:DB:AD:8A:7A:44:39:7D:FD:6B:95:79:72:FE:F1
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856FAEFA471154E8663F06D3A1CAD77739
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/24/038a04-4661-4bed-8a17-b5260b44a7bd/1/63XAq130262KekQ5ff1rlXly_vE.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/24/038a04-4661-4bed-8a17-b5260b44a7bd/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 23:33:36 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 193.187.96.0/24

Validation:               Failed, certificate revoked on Tue 09 May 2023 11:29:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:ae:fa:47:11:54:e8:66:3f:06:d3:a1:ca:d7:77:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 23:33:36 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=eb75c0ab5df4dbad8a7a44397dfd6b957972fef1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:68:69:e8:4c:f6:d3:33:bb:d6:88:77:3b:f6:
                    fb:5c:d7:44:c1:6e:b6:67:97:b9:e0:5c:b1:b7:1c:
                    30:fb:3d:e6:7b:4b:48:34:85:8c:bb:e2:74:ac:02:
                    e3:e8:ff:42:93:12:b5:17:6f:66:fa:8a:67:88:ae:
                    28:a9:ba:73:00:c2:4b:8b:6b:50:00:d0:a9:71:53:
                    7b:58:24:3c:2f:55:a4:be:4c:a6:fe:70:39:05:f2:
                    f1:bd:af:9c:60:2f:a5:eb:1c:e9:85:46:32:94:59:
                    dc:a8:e9:ab:07:d4:ca:8c:6e:de:4f:4c:e3:62:fe:
                    fc:74:96:2b:ba:3d:2e:70:47:0a:c1:a4:75:bd:62:
                    ad:a0:1e:ce:3c:36:f7:0b:ab:b7:56:2b:eb:86:a3:
                    bf:e1:45:fd:c7:aa:d2:6f:3f:32:7c:a6:f7:f1:e3:
                    ac:20:d4:2a:86:f6:f4:03:32:f8:bd:60:07:03:c5:
                    8a:c3:2f:a2:5a:e9:aa:5b:9e:85:e9:3d:c4:53:f2:
                    18:be:ce:a9:3d:0b:88:0a:38:a8:43:42:ba:83:32:
                    c8:f8:16:bf:ce:c5:64:22:be:ef:3b:d7:cd:64:35:
                    88:d5:f2:8e:5c:2f:4d:a4:2e:42:d9:9d:27:87:5c:
                    ce:d8:86:3a:ee:60:b0:4c:5c:ea:0c:07:25:43:21:
                    cc:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:75:C0:AB:5D:F4:DB:AD:8A:7A:44:39:7D:FD:6B:95:79:72:FE:F1
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/038a04-4661-4bed-8a17-b5260b44a7bd/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/038a04-4661-4bed-8a17-b5260b44a7bd/1/63XAq130262KekQ5ff1rlXly_vE.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.187.96.0/24

    Signature Algorithm: sha256WithRSAEncryption
         90:83:ea:29:b1:e3:62:32:bb:3e:0b:fc:3e:31:5e:49:c6:20:
         f6:80:1e:2b:65:8c:60:7c:3b:cd:01:7b:b0:66:a0:e7:95:2b:
         5e:32:30:d5:56:26:03:93:aa:10:0d:ab:92:d1:be:e1:e4:5e:
         12:35:83:5f:7e:98:b0:3e:9b:60:f9:37:4d:0c:28:75:f3:87:
         3c:17:75:d1:11:5b:6a:64:9d:60:49:35:b3:8f:38:11:17:b0:
         31:74:34:88:85:e3:cd:a6:8a:64:0b:c7:97:a3:16:55:87:4e:
         4b:d4:4f:4b:e0:70:5b:93:4e:6b:52:5d:8b:a5:be:8d:eb:bf:
         9e:04:fd:fc:a9:97:a9:b3:7a:c6:4b:22:eb:00:c2:2b:80:43:
         a6:2b:22:33:ef:43:2d:24:d0:78:d9:b2:c0:92:09:2d:fb:ce:
         c4:12:88:c7:33:e1:6b:d8:66:eb:15:5d:5f:98:c4:1d:64:1f:
         28:a6:39:66:ce:4c:5a:2d:2c:bf:49:dd:02:42:d0:44:91:56:
         8d:5f:11:f7:e0:ec:ef:eb:6a:6a:76:f3:f1:12:d8:ea:0f:f4:
         da:c2:24:44:8a:d4:e7:34:d0:2e:30:fe:09:79:72:ed:12:3f:
         1d:c4:d0:c9:1d:f1:14:11:d0:15:ca:19:8d:51:7b:3f:56:88:
         64:47:a7:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----