Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/GYB-5gLJT0AO1IXmUe3mDa7JrEs.cer
File:                     GYB-5gLJT0AO1IXmUe3mDa7JrEs.cer (raw, json)
Hash identifier:          WlYcqKsgIb8J0QP7MoAE+W1qWqZ5v9GwlAZcbfNHTYI=
Subject key identifier:   19:80:7E:E6:02:C9:4F:40:0E:D4:85:E6:51:ED:E6:0D:AE:C9:AC:4B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018A2D396B436280787DA0B17D45C859E033
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/89/af18c4-c044-4485-8ef0-d7812a338183/1/GYB-5gLJT0AO1IXmUe3mDa7JrEs.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/89/af18c4-c044-4485-8ef0-d7812a338183/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 25 Aug 2023 15:04:12 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 2a13:b4c0::/29

Validation:               Failed, certificate revoked on Thu 26 Oct 2023 07:37:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:2d:39:6b:43:62:80:78:7d:a0:b1:7d:45:c8:59:e0:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Aug 25 15:04:12 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=19807ee602c94f400ed485e651ede60daec9ac4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:df:88:40:a7:a7:d6:c3:2e:4d:13:73:1f:bd:
                    c2:e2:c0:f5:ed:7b:10:32:32:ef:89:8b:c9:54:37:
                    e3:a2:2d:63:29:61:75:64:08:cd:37:ac:48:e4:b1:
                    8e:66:95:94:80:14:6a:4e:7e:79:dd:32:e7:8a:0c:
                    10:91:83:d7:a6:01:d1:aa:6c:4f:17:ba:a2:23:f0:
                    88:06:36:f3:9d:4f:02:16:06:e0:aa:e9:6b:fc:42:
                    26:0b:6b:19:c6:1d:7f:be:1f:76:98:a6:e5:46:a5:
                    db:3f:f8:a6:f7:f4:ad:f7:11:bd:11:0f:a9:71:c6:
                    a5:26:11:ed:82:66:51:8a:ce:50:28:0b:4f:68:8f:
                    05:a0:87:51:44:d9:d0:a3:df:9c:94:22:c4:d8:ae:
                    9a:74:81:08:c4:39:ba:51:22:78:d1:1d:9a:cd:ab:
                    67:3e:23:4d:21:82:52:d9:c0:de:9b:df:da:9c:20:
                    c7:0c:5a:83:e4:55:c3:06:54:11:de:1e:1d:48:a3:
                    8f:c8:d2:e8:f6:29:47:b5:1e:36:4a:3d:d6:4b:b5:
                    c4:be:56:83:f1:51:2f:08:6a:c1:0a:d9:1a:ac:c2:
                    f5:6f:84:de:e2:72:bf:82:5c:19:4d:30:b7:1a:6c:
                    72:7d:d6:e7:06:a3:5e:29:73:70:67:35:c1:37:7e:
                    fa:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:80:7E:E6:02:C9:4F:40:0E:D4:85:E6:51:ED:E6:0D:AE:C9:AC:4B
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/af18c4-c044-4485-8ef0-d7812a338183/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/af18c4-c044-4485-8ef0-d7812a338183/1/GYB-5gLJT0AO1IXmUe3mDa7JrEs.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:b4c0::/29

    Signature Algorithm: sha256WithRSAEncryption
         45:e7:94:65:d4:0e:58:c2:77:4e:3e:24:4e:97:88:d7:ef:42:
         92:68:5d:6c:ad:61:c1:02:36:47:a3:80:96:34:44:c8:8f:eb:
         7a:bb:85:38:88:bc:61:9c:2d:37:db:4a:a8:d8:1b:b6:2b:b7:
         51:9c:de:f1:15:2b:a3:14:c8:50:0a:33:29:e9:0b:90:c2:68:
         fd:3d:80:f4:06:85:70:bd:4f:53:7a:e0:e7:e0:18:24:62:63:
         d4:59:f1:8d:b2:16:57:ec:e9:32:c8:4b:a3:8b:a5:5a:a2:2c:
         af:01:b8:ca:87:01:4f:e6:5e:26:34:05:ec:17:13:71:19:ff:
         0a:fa:23:eb:14:6f:c3:7e:25:d3:29:58:01:0d:db:e8:e6:53:
         2f:7b:8c:1b:f2:dd:40:0c:60:ae:64:6e:1d:02:9a:d3:8f:6e:
         84:d3:6a:2f:c2:d9:a4:06:4c:d0:46:da:e0:77:29:f1:22:c2:
         17:fa:e0:f0:9f:aa:9f:68:63:f4:b3:fc:65:b6:21:df:fd:46:
         c8:f2:2b:f5:b1:d4:71:2f:6d:7d:86:be:c6:52:75:a4:22:2a:
         65:6f:d1:37:38:53:bd:4c:9c:9f:fa:62:49:6d:56:42:0e:1b:
         35:28:31:19:0b:39:3c:a5:a0:7d:01:0b:de:6b:9b:84:d8:2a:
         74:92:8c:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----