Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8-jxxmLMi02PemBlEgmeq34dOHk.cer
File:                     8-jxxmLMi02PemBlEgmeq34dOHk.cer (raw, json)
Hash identifier:          ozbIUgtzq+UwkAG0Iw2OqIF3tyFiL/l14l4EsnIn+5g=
Subject key identifier:   F3:E8:F1:C6:62:CC:8B:4D:8F:7A:60:65:12:09:9E:AB:7E:1D:38:79
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018CC8DE3169C06E3275EBABC6F7471CD15C
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/a3/84f73a-409e-4126-a75c-c6c87de3704f/1/8-jxxmLMi02PemBlEgmeq34dOHk.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/a3/84f73a-409e-4126-a75c-c6c87de3704f/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Tue 02 Jan 2024 06:30:54 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    IP: 91.198.87.0/24
                          IP: 2001:67c:2390::/48
Validation:               Failed, certificate revoked on Mon 27 May 2024 12:15:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c8:de:31:69:c0:6e:32:75:eb:ab:c6:f7:47:1c:d1:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 06:30:54 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=f3e8f1c662cc8b4d8f7a606512099eab7e1d3879
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:eb:c8:f6:f2:9d:84:38:60:7a:76:7b:3d:2d:
                    12:ad:71:92:ca:76:25:a3:5b:62:84:2c:7d:20:47:
                    7d:06:47:88:9c:99:8d:b1:d6:aa:9f:ef:69:36:a1:
                    1c:72:29:4f:c6:75:73:3c:86:65:4a:bd:e1:4a:5b:
                    ea:59:ed:bc:3a:cd:6c:56:57:60:47:6a:ea:da:64:
                    12:a5:bd:2a:37:7f:71:a0:06:8c:6a:ef:06:a6:31:
                    68:dd:dc:2f:26:d2:43:f2:ca:20:00:b0:62:79:27:
                    e3:98:93:8b:b5:0e:2b:f9:ef:d3:58:08:b3:15:5b:
                    74:82:52:d3:ef:10:46:82:6a:75:24:c6:3b:6f:ed:
                    12:9d:c5:cc:26:48:1f:25:f2:f4:e7:f2:a5:2d:62:
                    50:5e:7e:17:c0:dc:6e:d1:2d:72:ba:68:cb:34:02:
                    08:70:d3:ee:22:73:2a:6e:25:1f:9e:99:43:41:2c:
                    c7:d1:8e:bd:b8:2a:a3:09:2f:fc:01:32:1a:4b:6d:
                    dd:d1:12:7d:eb:bd:63:f5:f5:b8:af:3a:65:15:b5:
                    53:4b:39:7a:6d:f4:3a:2a:d4:0f:61:64:3f:09:1c:
                    48:52:67:54:45:92:6d:f7:5c:01:2f:76:45:57:8c:
                    bc:1c:25:ef:0d:68:17:de:3a:9e:26:75:cd:8b:f0:
                    cc:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:E8:F1:C6:62:CC:8B:4D:8F:7A:60:65:12:09:9E:AB:7E:1D:38:79
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/84f73a-409e-4126-a75c-c6c87de3704f/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/84f73a-409e-4126-a75c-c6c87de3704f/1/8-jxxmLMi02PemBlEgmeq34dOHk.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.198.87.0/24
                IPv6:
                  2001:67c:2390::/48

    Signature Algorithm: sha256WithRSAEncryption
         74:19:3e:4f:a8:fa:7d:ee:a8:f2:9d:1f:35:e1:1f:19:0e:69:
         ac:e6:a6:44:50:60:08:c7:0b:4d:a2:be:16:08:94:f6:35:82:
         f3:81:71:8d:1f:c7:b3:71:53:aa:0a:e1:c7:49:ed:87:0d:b7:
         72:f6:34:92:76:3b:4d:3b:dc:fd:b2:1f:28:62:e4:93:0a:84:
         40:ac:54:d7:51:fa:f0:53:ad:b8:0c:f8:ee:f3:70:f8:a6:b6:
         70:ff:df:21:32:93:38:44:83:24:6a:28:9f:ed:4e:d6:7d:23:
         1d:8c:9c:a1:15:a2:72:b3:0e:ab:c1:16:3e:bd:a2:4c:3c:c5:
         d6:17:5a:d7:5c:11:84:4e:ef:05:d9:7a:f7:5d:36:9e:a2:ba:
         f0:0b:66:37:f6:c5:1b:0f:a1:b8:45:2a:79:0b:5e:cd:2f:6f:
         39:92:30:76:3b:aa:2d:16:73:0f:b8:c3:fa:5c:9f:d9:b8:c8:
         d7:8a:dc:02:72:6c:82:2b:41:b1:99:c8:2a:74:89:58:e0:53:
         91:11:82:1f:44:0b:e1:68:7d:b8:9b:4e:42:2b:8f:e5:cc:22:
         6e:c6:f7:de:ad:e2:50:cc:b9:ec:d2:d8:ae:05:1e:8f:2e:ed:
         b8:18:e1:55:0e:0a:b5:18:e8:77:d4:fd:77:7c:82:fe:5a:29:
         ca:a6:7e:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----