Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/DkH5oMhs68xjxD-gU51CSYFKt0A.cer
File:                     DkH5oMhs68xjxD-gU51CSYFKt0A.cer (raw, json)
Hash identifier:          wfuX7DZdkcfP5OZWMfsolI9SOVEmeQuIuhk5W50Kv1k=
Subject key identifier:   0E:41:F9:A0:C8:6C:EB:CC:63:C4:3F:A0:53:9D:42:49:81:4A:B7:40
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018C01C95B94B0DA52C5E9B3E443D4EEDEAC
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/07/930cab-6687-4fef-83d4-fa165414c901/1/DkH5oMhs68xjxD-gU51CSYFKt0A.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/07/930cab-6687-4fef-83d4-fa165414c901/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 24 Nov 2023 14:43:42 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 146.19.254.0/24

Validation:               Failed, certificate revoked on Fri 01 Dec 2023 09:58:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:01:c9:5b:94:b0:da:52:c5:e9:b3:e4:43:d4:ee:de:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Nov 24 14:43:42 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=0e41f9a0c86cebcc63c43fa0539d4249814ab740
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:ca:1e:12:06:24:f9:79:7a:12:6b:68:8b:5d:
                    a8:1a:d1:1e:02:1f:20:f8:bd:cc:0c:2b:36:72:6d:
                    51:98:61:80:88:b8:74:64:0c:e5:c9:5f:b2:b4:50:
                    39:e0:91:91:86:60:86:37:23:2e:dc:54:e1:92:ab:
                    51:6c:eb:af:80:7a:33:14:92:22:38:ee:28:5b:ab:
                    0f:fd:ca:76:96:a0:5e:33:f5:df:7c:79:cd:0c:ea:
                    3c:cf:1d:f8:0c:fe:a9:f2:7c:9d:c1:d2:ad:d1:f3:
                    92:50:24:52:1d:a3:86:9a:00:c6:c8:c2:23:da:34:
                    56:72:f1:fc:90:0e:bd:98:c7:66:6b:35:ff:2f:0d:
                    2a:bd:a2:bf:78:23:10:a8:26:f1:1a:65:bb:90:7f:
                    fa:3c:f8:d3:1a:33:fb:ab:82:41:7c:71:ad:9e:d2:
                    52:b7:ad:af:0b:76:55:e7:cf:15:aa:74:1b:0d:ca:
                    41:89:fb:dd:93:46:b7:d0:eb:d8:90:44:d8:f3:23:
                    81:d7:e7:29:90:5d:b1:61:d4:3e:95:df:64:44:24:
                    36:a0:21:47:75:da:dc:0f:7b:b6:cf:75:95:20:41:
                    39:2e:bb:b0:bd:63:d8:c7:96:e4:8c:0e:55:6c:4a:
                    cd:9e:a3:2f:c9:63:72:8f:35:96:b6:db:80:ce:f9:
                    79:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:41:F9:A0:C8:6C:EB:CC:63:C4:3F:A0:53:9D:42:49:81:4A:B7:40
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/930cab-6687-4fef-83d4-fa165414c901/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/930cab-6687-4fef-83d4-fa165414c901/1/DkH5oMhs68xjxD-gU51CSYFKt0A.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.19.254.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2e:b3:ae:79:11:64:cf:da:a9:ef:9b:d2:2f:a1:78:7e:72:32:
         b6:f1:f6:2c:0e:ac:3e:45:48:12:1b:7c:1a:06:db:55:59:20:
         2f:84:53:d6:c3:11:b6:1b:68:b7:5b:d8:a9:54:c8:37:85:1d:
         19:d2:00:d1:68:cf:0f:29:62:f1:36:33:5e:28:82:23:6d:80:
         90:e4:92:90:86:30:66:3c:d7:7f:23:f1:73:36:6c:19:91:b1:
         19:3a:7e:d9:01:22:d8:11:25:f4:85:c9:5a:f6:a3:d4:61:58:
         bf:30:5c:91:97:34:3a:65:be:26:1d:ab:63:9c:ca:a5:1f:fd:
         59:95:45:cb:9a:9a:3d:1f:4d:44:eb:c5:f5:75:9a:f9:c7:46:
         88:5b:c2:15:9c:7f:4a:4c:69:d9:5a:fb:22:78:f8:d2:24:e9:
         f7:ff:11:c5:3c:a4:64:ec:6d:4e:77:b7:86:e2:ed:4a:bd:34:
         2d:78:93:b2:0a:a1:a4:4b:62:44:02:89:35:4f:a5:2f:0f:12:
         d7:ff:ad:10:c9:ed:9a:cb:3a:8f:8b:82:a9:c4:b9:11:e1:67:
         ab:3b:5d:52:32:40:12:b0:34:ea:21:02:3b:68:68:d9:78:60:
         b0:9e:50:e5:cd:c3:5e:e9:94:84:26:5a:7e:73:f5:e9:64:cd:
         00:14:9a:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----