Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7yaIXnQHNsIUU9OqH0smmEj9qsI.cer
File:                     7yaIXnQHNsIUU9OqH0smmEj9qsI.cer (raw, json)
Hash identifier:          17jfUS9jE63Q2R4ljoGgbfUcSYnV8Vd/7lrTQTV9da8=
Subject key identifier:   EF:26:88:5E:74:07:36:C2:14:53:D3:AA:1F:4B:26:98:48:FD:AA:C2
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856D898149A984B35CCAE7DF3526B921AD
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/79/e2f264-9c5a-4378-93e1-492b8b4165d0/1/7yaIXnQHNsIUU9OqH0smmEj9qsI.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/79/e2f264-9c5a-4378-93e1-492b8b4165d0/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 13:33:26 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 87.236.161.0/24

Validation:               Failed, certificate revoked on Mon 21 Aug 2023 06:28:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6d:89:81:49:a9:84:b3:5c:ca:e7:df:35:26:b9:21:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 13:33:26 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=ef26885e740736c21453d3aa1f4b269848fdaac2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:ba:f9:6b:49:1a:83:21:be:9d:ab:f0:66:13:
                    13:05:d8:6a:2a:c3:fd:de:ea:1b:91:b3:01:dc:d1:
                    09:76:dc:57:e7:aa:84:65:46:64:27:1a:93:50:7d:
                    bd:ff:7d:a6:8d:3d:f4:11:6d:a1:94:a6:4b:26:80:
                    c4:5f:6b:3d:c2:da:b9:7e:9c:7c:a4:ac:70:cb:63:
                    d5:1f:50:59:d9:01:71:33:9a:19:59:73:35:73:ca:
                    59:10:c4:8a:f7:16:b7:be:51:6a:f9:54:65:5b:7b:
                    81:ea:83:8a:c2:d4:a9:08:3f:74:e0:fc:c7:6c:02:
                    6d:ba:71:4b:9b:91:c6:18:48:26:cc:7f:aa:df:7b:
                    3c:d4:ed:f9:d5:ef:76:ef:84:ea:e6:5f:21:1b:83:
                    eb:22:9a:ca:0f:69:62:4e:d2:79:10:a5:23:09:15:
                    49:58:61:8e:95:88:97:12:b7:8f:c2:10:64:62:6b:
                    e0:14:db:a4:9c:41:30:42:d4:14:72:3c:df:0b:ba:
                    b0:3c:d7:61:c7:b5:1d:c1:a4:c9:75:44:66:a4:3a:
                    f5:48:4c:53:e2:62:7f:e6:be:a8:9b:ae:f6:21:00:
                    92:a4:4c:68:b9:34:9c:bc:b4:14:d6:b7:ea:4f:cd:
                    63:38:df:4b:b1:6f:ea:78:d7:e7:ae:50:59:09:5e:
                    0b:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:26:88:5E:74:07:36:C2:14:53:D3:AA:1F:4B:26:98:48:FD:AA:C2
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e2f264-9c5a-4378-93e1-492b8b4165d0/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e2f264-9c5a-4378-93e1-492b8b4165d0/1/7yaIXnQHNsIUU9OqH0smmEj9qsI.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  87.236.161.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4a:14:e8:8f:cd:72:0a:ba:7f:a6:7c:61:de:39:84:6d:f0:df:
         d7:cd:b7:c5:b1:6e:1a:1d:41:15:bf:66:70:36:40:6e:b6:8d:
         65:b1:4b:a5:77:14:e2:df:b3:b1:40:84:b9:e5:e7:a2:80:e5:
         4f:70:2e:cd:f7:4a:e0:0d:2d:ba:38:c2:89:f2:f7:bf:7b:47:
         e4:bc:f4:15:ef:04:47:a3:1f:63:8a:72:ab:42:66:05:8d:92:
         00:5b:e1:a1:bc:45:bd:f9:a7:8c:5c:9b:5f:5c:8b:9d:02:ff:
         ac:d7:cd:20:2a:33:25:15:ca:21:03:f7:44:dc:fd:6f:d5:cf:
         aa:96:d0:90:43:53:08:7a:cb:1e:77:71:22:73:b9:dd:cb:0c:
         7e:4f:ab:ea:f7:85:dd:c6:74:03:c3:33:67:09:d8:e0:64:fc:
         c5:df:0d:38:c1:98:2f:c3:73:4e:9b:e2:aa:06:5a:35:a2:f8:
         38:ee:3b:54:b9:59:e7:c0:0f:5a:37:fa:4f:a5:7e:d4:4d:ec:
         f4:95:d5:3c:8d:65:ab:bb:27:f7:2d:23:6d:02:68:ff:8e:9d:
         2d:73:c2:76:f9:dc:da:d3:d4:da:d4:f4:54:7a:25:91:64:79:
         99:17:a4:b7:33:79:48:4b:ec:82:25:de:9e:77:1c:82:24:0e:
         b7:01:ff:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----