Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7rm6GbnszEruD4ERWvJDmnl58xs.cer
File:                     7rm6GbnszEruD4ERWvJDmnl58xs.cer (raw, json)
Hash identifier:          AukPX9ox14W++kc6TgADjXmhBw6+EOcaaOVthy395ko=
Subject key identifier:   EE:B9:BA:19:B9:EC:CC:4A:EE:0F:81:11:5A:F2:43:9A:79:79:F3:1B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018CC424710A656049D3C1AA142E9475F297
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/04/19715a-631f-4149-89ca-f951642d61c8/1/7rm6GbnszEruD4ERWvJDmnl58xs.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/04/19715a-631f-4149-89ca-f951642d61c8/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 08:29:31 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    IP: 185.207.212.0/24

Validation:               Failed, certificate revoked on Thu 01 Feb 2024 10:15:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c4:24:71:0a:65:60:49:d3:c1:aa:14:2e:94:75:f2:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 08:29:31 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=eeb9ba19b9eccc4aee0f81115af2439a7979f31b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:c9:57:07:54:83:a2:c7:8e:13:52:5a:fc:79:
                    e4:39:65:47:27:45:22:ec:7a:05:49:13:9a:24:40:
                    b0:6e:aa:0f:52:9c:3a:fe:22:66:35:e1:39:04:6f:
                    ef:20:7b:ee:fa:cd:18:f1:89:08:ff:4c:27:a5:ae:
                    db:cd:12:0b:7b:4b:4a:db:80:13:a8:f4:e7:ac:9c:
                    5e:8a:5c:45:a6:28:92:8d:09:0a:a2:25:16:d3:47:
                    8f:42:5a:b8:cd:93:76:4f:23:d2:a8:75:49:8b:f7:
                    32:a7:5d:f9:b6:10:e1:b6:f3:a3:46:ef:74:24:41:
                    07:f7:b3:87:2e:5d:a4:7d:21:b3:3a:e7:49:c7:6c:
                    a7:ff:08:8d:f6:74:94:54:d2:e9:e7:f0:41:a8:29:
                    81:e5:56:d8:6d:b1:4d:40:c5:e1:ad:49:8d:70:82:
                    fb:d5:19:3a:6f:da:3b:03:97:fe:74:b1:1d:77:9f:
                    70:78:28:49:2c:68:66:63:05:4c:4b:5f:9e:2a:2b:
                    ef:96:c7:02:1b:5a:f4:2e:73:bd:69:fe:57:0a:79:
                    57:e1:ae:35:4c:bb:6d:78:6c:bb:95:42:1f:91:6c:
                    3f:6c:3c:f6:e5:5c:c1:8a:78:4d:b6:68:bb:33:5a:
                    ac:88:ce:5b:8d:8b:b5:40:5f:46:45:96:ff:70:aa:
                    41:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:B9:BA:19:B9:EC:CC:4A:EE:0F:81:11:5A:F2:43:9A:79:79:F3:1B
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/19715a-631f-4149-89ca-f951642d61c8/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/19715a-631f-4149-89ca-f951642d61c8/1/7rm6GbnszEruD4ERWvJDmnl58xs.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.207.212.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6f:85:c2:d6:21:79:f4:e6:d5:e1:65:43:00:c9:03:84:5a:a0:
         ca:db:4a:64:a6:2f:80:cf:ea:ff:3b:2c:3e:cd:dd:a1:5a:0c:
         f1:0c:49:29:a5:48:9c:d6:21:33:b7:08:13:f5:2a:d8:79:15:
         48:8b:ab:1b:f9:d9:3b:fb:ea:32:44:f1:a3:e5:d5:3a:40:33:
         04:37:50:8b:04:5e:24:84:36:17:f7:92:ba:b5:62:f2:e6:a0:
         d8:72:16:d1:52:0c:57:10:d4:f4:f8:86:71:90:35:8c:5b:5b:
         c9:1e:30:76:e2:61:a8:53:d6:0c:e1:42:f9:02:98:15:14:6c:
         bd:44:59:52:9a:c8:70:19:c0:e9:a3:df:f0:de:ab:88:1e:7d:
         c2:ec:2f:f3:10:27:ce:18:cd:3a:61:ff:61:d9:ef:7d:00:df:
         d4:59:e8:e5:c5:b7:69:c3:a2:1f:08:2e:80:95:ba:21:d3:ea:
         ff:d8:26:8d:5d:1f:da:cb:a2:35:bd:aa:7a:5a:06:dc:25:ca:
         3a:63:e9:54:7f:59:09:9e:61:a3:3b:e3:c6:05:4a:b8:a7:ab:
         1d:e8:99:20:19:4f:da:cf:a0:2c:29:0c:28:5f:4a:16:ce:f1:
         2f:38:98:c2:99:3c:0a:2e:3a:5d:82:9f:92:ff:6d:06:00:cd:
         7e:c2:03:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----