Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/CG5gZIT9TbxskJn-S2eo8U2IpMU.cer
File:                     CG5gZIT9TbxskJn-S2eo8U2IpMU.cer (raw, json)
Hash identifier:          xXPITn7KCQ7+EwNxxdaHu4tuGfUEyc1J9ttl0omsr40=
Subject key identifier:   08:6E:60:64:84:FD:4D:BC:6C:90:99:FE:4B:67:A8:F1:4D:88:A4:C5
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01887BC8155F4222B72B199DD6A7C2E70D08
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rsync.paas.rpki.ripe.net/repository/ee45b736-fe15-438d-9769-71c9b7f6187b/0/086E606484FD4DBC6C9099FE4B67A8F14D88A4C5.mft
caRepository:             rsync://rsync.paas.rpki.ripe.net/repository/ee45b736-fe15-438d-9769-71c9b7f6187b/0/
Notify URL:               https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before:   Fri 02 Jun 2023 11:04:50 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 146.19.86.0/24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:7b:c8:15:5f:42:22:b7:2b:19:9d:d6:a7:c2:e7:0d:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jun  2 11:04:50 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=086e606484fd4dbc6c9099fe4b67a8f14d88a4c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:d1:5f:cb:4c:17:d9:29:6c:69:36:b4:ae:3b:
                    60:47:c5:3e:a6:e3:5e:d1:ed:cc:7a:6f:57:26:e6:
                    53:11:28:e6:ef:38:69:11:f2:70:a7:dc:4a:ad:80:
                    8b:df:39:6e:64:51:51:7a:93:82:4d:ba:55:33:12:
                    42:4d:aa:dd:e7:9f:fb:41:67:7d:b3:6b:18:45:72:
                    4a:95:86:ca:20:af:0a:65:c3:2e:67:a5:af:f5:86:
                    c8:99:ab:b6:72:58:29:02:a4:8e:4c:d2:a1:d3:bc:
                    eb:99:64:70:00:24:36:79:16:e4:b5:5f:e4:de:5e:
                    0b:a6:92:5d:bb:2a:6e:85:9d:e8:27:f3:94:a9:9f:
                    5b:ad:cb:60:83:fb:69:40:ab:90:03:05:d3:55:80:
                    9c:4d:04:f1:51:21:15:63:be:5d:09:99:d3:00:a5:
                    4d:f4:b0:87:af:34:a6:72:6b:43:ec:9d:99:7a:99:
                    c4:fc:99:01:f1:10:22:e6:a4:ac:6c:2c:86:69:c2:
                    7d:d9:62:42:e6:46:28:50:af:c3:fc:e0:1a:33:6a:
                    af:3a:a2:31:54:b4:42:f4:d8:ac:53:1d:06:19:68:
                    dd:dc:b9:a7:aa:4b:ee:4d:1f:1d:ab:34:e2:a0:c3:
                    d5:13:24:95:74:ed:c9:86:92:a3:c2:66:8c:c4:86:
                    80:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:6E:60:64:84:FD:4D:BC:6C:90:99:FE:4B:67:A8:F1:4D:88:A4:C5
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/ee45b736-fe15-438d-9769-71c9b7f6187b/0/
                RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/ee45b736-fe15-438d-9769-71c9b7f6187b/0/086E606484FD4DBC6C9099FE4B67A8F14D88A4C5.mft
                RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.19.86.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0b:ce:4b:8a:e5:5d:62:fb:bc:46:9f:fe:0f:e7:b8:b4:48:03:
         93:d7:76:95:31:0b:c6:1f:97:63:8d:c1:e0:36:ce:b4:d0:53:
         c8:e2:4a:6a:50:ec:f9:d5:6f:01:f0:35:21:73:bb:23:d6:ab:
         43:30:0c:31:f0:a6:96:2a:c1:f1:1d:39:dd:af:d8:e6:11:bc:
         00:72:5d:5b:f3:34:61:9a:f3:af:c6:24:02:c4:83:25:1c:6c:
         bf:63:aa:00:18:ac:ef:5c:97:2a:b7:81:b3:b4:f2:09:8d:3b:
         85:aa:0e:ae:60:19:87:cd:7c:25:49:1b:16:c3:24:40:db:94:
         c1:5e:a1:6a:7c:93:f9:b4:4b:b0:6f:b2:f3:c7:13:3e:07:22:
         15:a6:a9:18:05:45:93:01:8f:6d:63:6e:2d:fe:04:69:d2:9f:
         b4:e6:e8:bb:31:f0:42:a4:cb:45:57:9f:a9:04:cc:17:1c:69:
         91:f9:e8:f6:2b:58:7e:0c:e2:f8:31:11:3f:64:b7:55:7a:5c:
         1a:06:8a:e5:ef:a2:c1:f0:fa:0a:dc:85:c8:24:37:fa:e1:14:
         77:e5:60:e4:58:3d:ad:0b:6b:01:9b:26:7e:cc:c6:76:ab:e6:
         5d:30:54:94:05:98:2f:a6:c8:b2:c5:0e:d7:18:0d:56:18:e8:
         f0:66:9f:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----