Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6emtk09AWUyfG6UASVqT7uw8bOM.cer
File:                     6emtk09AWUyfG6UASVqT7uw8bOM.cer (raw, json)
Hash identifier:          yRx1p6+NwF2lumq8rkO3J2LI1QxU1A8erkuQta3kXpI=
Subject key identifier:   E9:E9:AD:93:4F:40:59:4C:9F:1B:A5:00:49:5A:93:EE:EC:3C:6C:E3
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018571D6E07A4B8A1E614DBA82E7AEFF2FF2
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/5d/267a8b-3b7d-4bb0-b222-960dee072f3a/1/6emtk09AWUyfG6UASVqT7uw8bOM.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/5d/267a8b-3b7d-4bb0-b222-960dee072f3a/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 02 Jan 2023 09:36:25 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 185.253.56.0/24

Validation:               Failed, certificate revoked on Wed 20 Dec 2023 15:47:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:71:d6:e0:7a:4b:8a:1e:61:4d:ba:82:e7:ae:ff:2f:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 09:36:25 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=e9e9ad934f40594c9f1ba500495a93eeec3c6ce3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:9d:13:ca:0d:a3:9b:c1:d8:2f:5d:ae:3c:95:
                    ff:ae:97:65:7a:50:7c:c3:75:73:4b:04:e8:80:51:
                    0d:a3:63:d3:66:63:ce:e3:8b:14:49:4b:3a:11:e1:
                    5e:03:a4:05:6f:22:85:53:7a:b7:77:da:2b:a0:f4:
                    dd:d5:f2:ec:07:77:f1:82:05:c1:6e:e5:4a:51:63:
                    28:52:15:39:c2:fe:ae:26:47:41:35:af:98:1c:ea:
                    2c:75:97:d3:61:14:3e:44:8d:e9:ff:65:50:28:47:
                    8c:fd:68:0a:67:4a:e8:b3:61:7f:fc:c9:14:39:98:
                    b5:d9:a8:03:1d:96:79:6a:88:6e:00:bc:ba:d2:86:
                    9b:d5:c1:35:07:c3:47:14:9c:e8:b3:8e:d1:09:f9:
                    9f:72:3f:62:c0:96:a8:83:a7:5c:ba:94:e7:02:f0:
                    fe:ad:93:b8:b2:8f:73:59:01:ef:e4:73:9a:45:7f:
                    7b:c3:be:91:43:4b:cd:d7:48:18:33:18:52:e9:27:
                    69:e4:98:7b:6f:7f:9f:4a:96:6e:49:16:1e:67:85:
                    a0:e7:c6:6c:08:88:5e:55:44:c3:a7:7a:55:7e:4e:
                    f3:82:99:71:c1:07:73:0a:bb:01:52:1c:8c:9f:06:
                    b1:57:d1:57:49:ae:d3:5a:cf:c6:ba:ab:a7:e9:53:
                    74:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:E9:AD:93:4F:40:59:4C:9F:1B:A5:00:49:5A:93:EE:EC:3C:6C:E3
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/267a8b-3b7d-4bb0-b222-960dee072f3a/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/267a8b-3b7d-4bb0-b222-960dee072f3a/1/6emtk09AWUyfG6UASVqT7uw8bOM.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.253.56.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1d:a3:da:a9:64:da:f9:93:05:04:26:e4:fb:f9:2b:53:b0:d9:
         1f:7a:81:96:65:bc:fb:03:36:4b:c4:1d:b3:c9:32:17:ac:7a:
         cb:a3:c4:54:03:da:40:44:2c:fc:ae:13:d3:70:52:2b:ab:bd:
         0c:9a:fb:72:27:44:22:74:3d:0a:ee:82:88:53:48:6b:e4:e9:
         5c:c9:fe:e5:ad:17:f2:bb:11:1c:8c:92:0e:6e:fc:22:7e:85:
         bc:07:ce:64:5c:0c:42:df:68:80:8b:dc:82:c5:39:ff:5d:76:
         84:37:cf:6a:14:a0:2a:ed:db:19:f9:67:f3:b7:e7:8e:38:1d:
         f2:51:40:72:53:50:0f:a4:33:6c:17:63:9b:ae:28:94:2d:44:
         7b:37:1e:fb:44:53:dd:c7:5b:61:8d:e8:ed:91:46:70:a7:45:
         05:6f:b4:0d:f1:d6:93:52:f4:2f:45:46:3f:df:13:7e:92:0d:
         9a:af:ee:98:95:f1:5e:df:59:a6:54:07:58:85:b5:99:35:7f:
         f2:e5:ff:8c:f5:a2:02:03:1d:d0:ee:f0:76:ea:00:4c:a4:c1:
         ea:52:59:75:f9:47:26:5e:7b:04:de:56:eb:6d:96:b7:0d:08:
         40:3d:64:cf:c7:f7:6f:1b:8f:f4:f2:59:2b:7f:be:dd:13:e7:
         99:73:c6:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----