Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7VNsGaaRwvVEIgqVIUdKh2XlnPE.cer
File:                     7VNsGaaRwvVEIgqVIUdKh2XlnPE.cer (raw, json)
Hash identifier:          9wQIy3aoafNHAooeR3i8W3CCThx+ZVsG2xLtmW3dhZ4=
Subject key identifier:   ED:53:6C:19:A6:91:C2:F5:44:22:0A:95:21:47:4A:87:65:E5:9C:F1
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018CC348ACECAB482E83ACC86E9BC55109F6
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/fb/6e20ca-a1ef-4ae8-aef1-e4509fb9cf20/1/7VNsGaaRwvVEIgqVIUdKh2XlnPE.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/fb/6e20ca-a1ef-4ae8-aef1-e4509fb9cf20/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 04:29:29 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    IP: 185.206.80.0/22

Validation:               Failed, certificate revoked on Fri 09 Feb 2024 12:26:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c3:48:ac:ec:ab:48:2e:83:ac:c8:6e:9b:c5:51:09:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 04:29:29 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=ed536c19a691c2f544220a9521474a8765e59cf1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:00:23:fd:0c:5c:bd:e7:7d:79:86:06:bb:34:
                    f4:d1:76:2d:0f:9a:b7:91:1e:13:a5:c1:bd:e3:1b:
                    84:52:e0:e7:5e:65:b8:08:b9:9f:0b:22:0f:39:26:
                    af:bc:4e:9a:b9:c1:2f:f3:37:9c:bb:71:9a:35:5b:
                    49:45:e0:ef:f1:ca:ef:a6:94:1e:d1:b7:61:f8:e5:
                    6b:f5:91:91:e2:b0:17:76:21:de:58:38:e4:35:94:
                    d7:6d:a9:81:4c:31:33:73:39:99:80:e9:ea:c1:83:
                    41:b9:17:7c:60:b0:06:ba:cc:ae:dc:3e:d2:a5:9d:
                    1f:93:36:07:2a:b5:a9:3f:a0:92:83:8a:2c:46:91:
                    c2:fe:dc:58:49:91:bf:ed:f7:97:04:7e:58:b9:28:
                    24:dd:91:9e:3b:b7:0b:2f:06:fc:b3:c2:dd:f8:5f:
                    75:c4:6c:7a:1d:1b:59:c7:21:f0:2a:ea:ba:f9:3a:
                    7d:72:03:4e:24:8a:9c:39:b5:2a:ea:5c:4c:56:a5:
                    11:92:32:91:7a:49:53:a2:d9:77:63:ce:34:19:fa:
                    35:67:2c:2e:5b:5d:42:16:a0:a2:fd:ac:99:c6:c6:
                    df:72:3e:08:3d:d4:ec:f4:7a:b8:5a:5a:78:3b:58:
                    00:26:44:d4:26:0f:49:08:0f:30:ce:6d:30:6e:5a:
                    f2:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:53:6C:19:A6:91:C2:F5:44:22:0A:95:21:47:4A:87:65:E5:9C:F1
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/6e20ca-a1ef-4ae8-aef1-e4509fb9cf20/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/6e20ca-a1ef-4ae8-aef1-e4509fb9cf20/1/7VNsGaaRwvVEIgqVIUdKh2XlnPE.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.206.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b1:92:f7:6f:55:b5:2a:88:93:81:0b:5b:2b:20:39:37:dc:6b:
         bc:3b:b4:a8:79:a1:53:37:02:a3:e7:ee:e3:c2:3c:9a:b7:ae:
         03:b4:db:bd:b3:2a:a4:85:bd:f1:f3:81:06:3c:71:21:4b:09:
         2d:f4:66:32:0a:e3:ee:ef:46:1b:f5:b4:34:19:5f:89:da:63:
         a3:d4:c6:25:66:08:8e:80:09:79:72:4a:3a:7e:92:ba:bb:16:
         18:94:60:b2:7e:b2:9f:e4:db:9d:d6:b0:19:57:15:dd:5a:41:
         86:e1:eb:57:5f:bf:18:f9:c6:27:67:17:04:6f:6b:70:ac:11:
         7a:c6:02:70:86:20:35:40:34:20:84:0b:a7:3c:cc:84:6e:c3:
         ee:1c:9d:b5:04:16:2d:1a:22:21:bb:74:cd:b7:a9:1d:a7:c2:
         8b:82:78:da:f4:6b:28:04:57:3d:11:92:3c:7f:1d:24:b5:df:
         82:53:38:1e:4f:fe:37:12:6d:c3:1d:98:4f:c5:71:57:1e:ce:
         ff:a6:9b:46:02:d3:2f:f3:ea:5c:1b:4e:08:8b:69:4a:d6:a0:
         d4:91:33:73:8a:8d:20:49:f0:59:73:db:44:54:90:37:9e:2e:
         68:ea:b9:30:79:bb:74:48:b5:35:19:a9:e7:1f:b3:1f:5c:5c:
         92:93:d7:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----