Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7BXxO3xu9GOa8P4P4XBFlDw08q8.cer
File:                     7BXxO3xu9GOa8P4P4XBFlDw08q8.cer (raw, json)
Hash identifier:          FzccfTIkD1htFDBAknY0pZ+T2R4KqMlEbq4wgs3Ohk4=
Subject key identifier:   EC:15:F1:3B:7C:6E:F4:63:9A:F0:FE:0F:E1:70:45:94:3C:34:F2:AF
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018CC5DBED814CC9E84DCD7BBA0B46D6FB1C
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/80/fc13a7-09a7-46c2-80f7-5124c67cdbac/1/7BXxO3xu9GOa8P4P4XBFlDw08q8.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/80/fc13a7-09a7-46c2-80f7-5124c67cdbac/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 16:29:33 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    IP: 193.150.104.0/24

Validation:               Failed, certificate revoked on Mon 03 Jun 2024 07:50:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c5:db:ed:81:4c:c9:e8:4d:cd:7b:ba:0b:46:d6:fb:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 16:29:33 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=ec15f13b7c6ef4639af0fe0fe17045943c34f2af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:f6:a1:ec:d9:24:84:b7:ea:bd:be:83:d0:44:
                    1d:c1:84:04:da:9f:6d:5b:0e:58:4b:1d:e6:8e:80:
                    0e:43:3d:25:2e:6e:e0:d0:92:84:5d:f8:35:c0:1c:
                    7f:da:d4:c9:39:9d:cd:54:40:08:6e:94:c8:b4:e0:
                    d4:c4:21:fa:2f:b5:36:c8:ab:12:bf:48:43:da:03:
                    35:61:e5:09:4a:af:82:f5:1d:81:83:9d:2b:eb:b6:
                    40:c1:af:ac:b3:3b:6a:2d:d7:bb:bd:d4:4b:36:ee:
                    98:f4:64:df:17:ee:06:f7:0f:00:95:f0:f9:20:a1:
                    d3:f7:6f:26:ee:24:b3:24:49:78:85:3d:35:c2:86:
                    33:59:e9:ac:5a:7a:e7:f8:1b:27:e9:68:6b:52:c3:
                    3a:4d:e0:15:0f:67:87:a6:76:d4:6b:87:4f:78:70:
                    ec:46:c5:4a:bd:13:83:c4:85:30:70:83:d0:d8:d4:
                    c9:70:92:15:e5:2d:e2:f7:6b:2f:8d:c6:ae:e4:38:
                    f3:92:cb:43:04:d6:4b:35:b9:94:9b:b6:33:12:b7:
                    23:a7:5f:bb:ca:52:c6:23:bf:bb:4d:a4:53:6e:b8:
                    0b:76:62:b0:88:3d:e4:74:b3:1d:41:bd:a0:76:f5:
                    b8:00:46:8d:d2:08:18:d6:9e:6c:6b:7b:49:7a:b3:
                    a1:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:15:F1:3B:7C:6E:F4:63:9A:F0:FE:0F:E1:70:45:94:3C:34:F2:AF
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/fc13a7-09a7-46c2-80f7-5124c67cdbac/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/fc13a7-09a7-46c2-80f7-5124c67cdbac/1/7BXxO3xu9GOa8P4P4XBFlDw08q8.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.150.104.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8a:d8:72:07:32:b1:29:d5:04:61:68:9e:ab:d2:97:92:e6:ff:
         2a:eb:5a:55:57:a3:e8:fc:84:4a:e1:32:80:a1:2d:95:06:58:
         6c:2a:20:0a:b3:84:e4:18:85:e3:73:b7:5b:76:9d:d5:36:7b:
         1c:6e:98:ba:cd:e7:62:f1:68:e7:6e:ad:6c:44:02:3b:0d:80:
         47:1f:23:45:67:54:3e:6b:aa:6b:51:ce:45:73:7a:12:a4:e7:
         58:89:3f:6b:9a:b4:70:dd:c8:ca:4f:1d:93:ab:83:27:b6:59:
         b8:4f:06:56:c5:16:20:93:45:a0:1f:b5:38:d1:7a:bb:97:b8:
         8e:f7:cf:c9:dd:91:e6:ea:3a:13:42:42:ab:17:de:af:55:2c:
         77:e4:3b:fd:77:22:59:31:a0:68:20:f2:61:ec:ed:cd:53:7e:
         4a:68:4b:78:74:1d:26:c8:b3:d5:38:be:5b:58:46:68:db:6a:
         19:c5:22:65:17:f8:70:7b:46:d4:1d:80:14:a5:5e:e5:e6:b6:
         d7:34:eb:ee:92:08:ba:52:41:6c:b6:7d:8f:8b:70:d5:63:02:
         47:c0:8c:83:da:ac:b7:00:96:cc:69:94:d5:82:6a:07:2e:b7:
         97:ce:51:fa:8a:06:34:c8:3b:ca:ec:3e:4f:e3:f0:3d:ed:65:
         85:82:9b:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----