Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/D0uZGcrOmS7vcaRAoSPbo98qlIU.cer
File:                     D0uZGcrOmS7vcaRAoSPbo98qlIU.cer (raw, json)
Hash identifier:          OUDvkfnqfHDgxT7zLZeNneRgI/KnYHLjCdanbAPLEhI=
Subject key identifier:   0F:4B:99:19:CA:CE:99:2E:EF:71:A4:40:A1:23:DB:A3:DF:2A:94:85
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856D1B119706436FBFB0F425B048EF560B
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/a0/efc75a-cf92-4c4a-9441-aca5a4414212/1/D0uZGcrOmS7vcaRAoSPbo98qlIU.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/a0/efc75a-cf92-4c4a-9441-aca5a4414212/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 11:32:48 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 45.132.216.0/22

Validation:               Failed, certificate revoked on Mon 03 Apr 2023 15:14:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6d:1b:11:97:06:43:6f:bf:b0:f4:25:b0:48:ef:56:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 11:32:48 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=0f4b9919cace992eef71a440a123dba3df2a9485
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:5a:5a:e6:a6:b1:51:47:f6:c1:5f:46:9c:1d:
                    c0:d3:69:6e:d9:8d:ea:d0:70:24:72:10:53:ab:45:
                    e1:ce:bf:bb:2c:d6:1e:96:d8:01:7b:62:ff:71:81:
                    fc:bd:d7:04:ec:d3:78:fc:6f:68:d5:94:bc:e3:5d:
                    bc:f0:50:8c:af:a2:c4:03:38:b8:e2:3a:d0:e0:ee:
                    62:bf:98:bc:eb:5f:a5:a8:c9:60:1c:3e:7e:68:50:
                    77:1b:e7:3c:e3:61:69:30:08:70:0b:2b:9c:da:9e:
                    23:2d:41:7d:af:5a:18:ab:96:ee:fe:fb:cc:07:50:
                    62:ac:bb:a8:9f:80:25:43:b3:99:a4:38:f0:af:3e:
                    5c:eb:4e:c2:94:25:84:a8:04:18:e1:67:a7:83:b5:
                    c6:a3:0f:6a:f7:83:94:ad:d3:a9:d9:a1:e5:6a:60:
                    63:f0:7d:3f:b0:35:7c:6c:50:ac:6c:35:96:83:cd:
                    1e:ac:41:88:c6:2d:5b:31:cc:ea:fc:f0:7a:f1:60:
                    84:89:bb:45:83:87:f0:3a:da:03:fd:ec:3b:aa:6c:
                    b6:97:59:4f:91:49:a5:57:a3:8f:c3:3c:ed:46:ef:
                    1a:92:60:4c:36:ba:dc:b3:a7:3f:22:af:1c:d8:18:
                    39:f3:bc:af:8b:f8:ed:d5:3d:2f:26:bc:18:99:7b:
                    ed:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:4B:99:19:CA:CE:99:2E:EF:71:A4:40:A1:23:DB:A3:DF:2A:94:85
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/efc75a-cf92-4c4a-9441-aca5a4414212/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/efc75a-cf92-4c4a-9441-aca5a4414212/1/D0uZGcrOmS7vcaRAoSPbo98qlIU.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.132.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2d:85:c7:10:aa:66:ea:32:7e:dd:0e:5f:00:20:fd:34:dc:59:
         7e:04:cc:e4:48:20:67:cb:05:27:14:e3:5f:27:51:04:b4:3e:
         1d:da:24:5c:59:af:76:14:2b:2e:a1:cd:1a:c3:17:f0:e1:26:
         ff:4a:73:18:3b:b1:f4:ee:1c:9f:81:31:a7:37:76:41:54:3c:
         87:9b:5f:1e:6d:cb:e0:fc:50:94:29:58:2c:8b:0b:a8:8f:bc:
         21:ec:21:7b:65:81:ea:d7:b7:e5:2a:4d:0f:0d:bf:3f:0d:d1:
         3f:f9:90:03:6c:99:c2:b6:1b:ba:26:90:81:d8:68:d1:de:82:
         2a:24:e6:43:0f:2c:8d:9f:42:a9:48:0d:68:4f:bf:31:32:6d:
         a7:9b:d0:d1:48:72:c7:2c:1c:48:cc:aa:c3:65:d2:1d:19:16:
         7c:10:58:4d:61:5d:10:00:9b:69:2c:79:ad:89:a7:8c:a3:94:
         1e:e3:bd:ff:e1:52:1b:2e:44:28:ff:1e:56:e9:f6:34:3d:af:
         bc:55:35:72:40:01:42:f7:55:16:52:95:ac:6e:1e:15:9f:a4:
         8c:36:f5:77:0c:41:75:f9:6b:22:62:95:38:fd:b6:e7:dd:ac:
         f4:d8:4f:10:54:da:e1:37:7a:ac:2a:c1:71:82:6f:cb:44:33:
         04:c0:19:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----