Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/FoXNul19r23cz4Z1qQoltu1kRNc.cer
File:                     FoXNul19r23cz4Z1qQoltu1kRNc.cer (raw, json)
Hash identifier:          ryDh5/2pTUwHe2Id3zjUCeykXEFCJhjB9Gej8zaEdL0=
Subject key identifier:   16:85:CD:BA:5D:7D:AF:6D:DC:CF:86:75:A9:0A:25:B6:ED:64:44:D7
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018CC2DAFE92B0BCB0C959C5067ECA3D4309
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/a4/c63652-d03e-4134-bfd3-e298a43b8930/1/FoXNul19r23cz4Z1qQoltu1kRNc.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/a4/c63652-d03e-4134-bfd3-e298a43b8930/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 02:29:41 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    IP: 91.199.253.0/24

Validation:               Failed, certificate revoked on Mon 04 Mar 2024 15:02:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c2:da:fe:92:b0:bc:b0:c9:59:c5:06:7e:ca:3d:43:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 02:29:41 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=1685cdba5d7daf6ddccf8675a90a25b6ed6444d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:9d:6e:e2:5b:1f:71:f7:e4:b2:f7:9a:fe:9d:
                    1f:85:e7:54:8d:43:f2:54:1a:25:04:71:ad:55:10:
                    25:71:40:bf:25:9d:a5:e3:80:cf:14:4f:c6:2a:99:
                    c1:24:4c:c4:1a:07:0b:27:e1:26:0d:0d:79:a3:5c:
                    a8:71:df:8d:55:fd:f3:77:6b:33:09:a3:1a:85:df:
                    b5:65:c4:93:96:14:f7:22:8d:a4:81:25:b0:31:b1:
                    95:a2:c0:68:79:b1:91:96:bd:cb:7f:ba:f5:e3:ea:
                    ce:4c:2d:06:65:7a:0c:51:ed:48:60:f9:3f:8e:28:
                    f2:0f:89:41:7c:c3:9c:94:68:4b:91:49:70:ec:aa:
                    6c:9b:62:30:23:b3:27:36:e3:72:08:46:cb:fa:a6:
                    db:bc:ef:99:92:1e:6c:f0:9c:1c:22:f5:9e:71:b4:
                    57:f9:63:59:48:8b:18:fe:cc:48:23:b9:b6:d5:cb:
                    ad:2b:c2:95:21:a7:4c:f1:da:c0:b5:c4:70:10:cd:
                    40:04:f1:c2:8e:f7:69:28:e6:98:36:09:97:ce:bc:
                    77:6f:23:66:c6:53:62:27:17:19:2d:98:7a:5c:0e:
                    eb:03:34:98:e5:0e:5c:af:89:40:c2:2c:66:15:53:
                    c5:03:1e:63:b5:f9:f8:71:05:65:d3:75:ea:74:1d:
                    58:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:85:CD:BA:5D:7D:AF:6D:DC:CF:86:75:A9:0A:25:B6:ED:64:44:D7
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/c63652-d03e-4134-bfd3-e298a43b8930/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/c63652-d03e-4134-bfd3-e298a43b8930/1/FoXNul19r23cz4Z1qQoltu1kRNc.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.199.253.0/24

    Signature Algorithm: sha256WithRSAEncryption
         88:74:43:f1:c8:0b:7f:6a:d5:44:f3:0c:92:2b:77:b1:eb:71:
         ea:41:d0:ac:56:bc:b9:a7:f8:ca:14:22:5a:d7:d3:52:16:94:
         42:53:64:9b:e0:56:42:f5:da:07:fc:61:56:72:02:ec:74:aa:
         76:fc:f5:d0:58:03:1b:c9:b1:8e:fe:13:b4:3e:41:d4:c8:61:
         1b:ed:39:0e:05:5b:fb:39:6f:a6:fe:b4:ea:3d:73:aa:5a:c4:
         45:e6:f9:79:c1:78:4f:c4:e8:2e:18:0f:46:51:10:6a:c0:b4:
         5f:4b:8b:30:18:7b:cc:38:1b:73:ed:44:48:f7:51:85:07:c4:
         56:2d:7c:8c:bb:cb:cb:36:45:21:1f:b2:81:89:b2:75:ce:d1:
         48:eb:6a:bf:da:8f:a6:f2:ad:c2:06:fa:65:f4:3a:77:e2:99:
         c8:f4:17:fb:74:60:6d:fa:83:4a:47:8c:2d:74:d5:d9:51:89:
         61:55:8a:32:a2:8c:cc:cc:15:a3:12:65:a9:46:5e:6e:77:fd:
         b2:59:b2:25:42:24:44:cb:34:ff:0c:15:91:18:a2:20:76:f5:
         9e:dd:e3:5b:8b:4c:f7:69:67:61:9e:6c:31:08:6d:72:cc:30:
         4b:2e:c8:cb:82:8f:62:fe:a1:82:14:b9:71:04:21:2e:3e:f7:
         66:13:22:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----