Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/GuLnfypS0Jt51U_2EH8pCrkf3gU.cer
File:                     GuLnfypS0Jt51U_2EH8pCrkf3gU.cer (raw, json)
Hash identifier:          vnMw7DFfDiRZDWCEik2cVumj1dvUiwib6gDjawZ65po=
Subject key identifier:   1A:E2:E7:7F:2A:52:D0:9B:79:D5:4F:F6:10:7F:29:0A:B9:1F:DE:05
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01887BDDE242373AC7C892A35B1E7C011770
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rsync.paas.rpki.ripe.net/repository/401be74d-c00c-4c14-88f5-591cc4a4297e/0/1AE2E77F2A52D09B79D54FF6107F290AB91FDE05.mft
caRepository:             rsync://rsync.paas.rpki.ripe.net/repository/401be74d-c00c-4c14-88f5-591cc4a4297e/0/
Notify URL:               https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before:   Fri 02 Jun 2023 11:28:38 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 146.19.167.0/24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:7b:dd:e2:42:37:3a:c7:c8:92:a3:5b:1e:7c:01:17:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jun  2 11:28:38 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=1ae2e77f2a52d09b79d54ff6107f290ab91fde05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:4d:d2:95:dd:be:64:b4:ae:19:65:fc:1d:db:
                    a6:67:62:15:8a:41:ab:36:89:d7:ac:aa:77:5a:8a:
                    2a:56:46:f8:c9:57:57:1a:ea:2b:2e:54:3c:f7:85:
                    51:0f:be:e8:67:cc:bf:06:fc:e3:d7:44:b8:49:c5:
                    ee:d5:1b:58:c6:38:62:9c:0d:c7:40:27:c3:0c:a7:
                    3c:76:ed:a3:85:de:46:df:9b:9c:35:0b:b6:1c:c9:
                    3a:55:30:dd:32:c5:0c:e7:4a:01:2c:ea:0e:a3:41:
                    5d:9d:2b:24:2f:f7:29:ac:c7:4b:ec:e2:db:bc:b8:
                    7a:15:a4:0e:99:9d:20:89:2f:99:85:2f:9d:c8:44:
                    78:30:4d:0f:58:65:47:f3:42:2a:d0:e6:85:02:46:
                    9d:81:85:65:4a:89:d4:40:8f:9c:17:33:0a:b6:ff:
                    4e:02:40:b9:f8:33:c3:2a:ff:4e:90:15:4b:5e:b0:
                    da:51:35:2a:e6:a2:49:bf:5c:53:a2:dd:6b:3e:9c:
                    f0:86:27:17:dc:4e:fc:0b:46:9c:ad:ed:31:08:01:
                    45:ba:71:5c:f7:d4:0e:01:e6:bb:41:57:25:73:5f:
                    35:6a:61:86:ee:e9:6e:35:71:35:46:91:0d:15:9b:
                    78:77:b1:06:84:53:ea:d7:72:27:50:cf:f1:92:12:
                    9a:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:E2:E7:7F:2A:52:D0:9B:79:D5:4F:F6:10:7F:29:0A:B9:1F:DE:05
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/401be74d-c00c-4c14-88f5-591cc4a4297e/0/
                RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/401be74d-c00c-4c14-88f5-591cc4a4297e/0/1AE2E77F2A52D09B79D54FF6107F290AB91FDE05.mft
                RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.19.167.0/24

    Signature Algorithm: sha256WithRSAEncryption
         26:96:ae:89:b9:ef:f7:51:14:2d:ec:7f:35:e5:28:49:ee:5f:
         d2:62:03:6b:04:81:bb:64:f1:f2:b8:ce:6c:66:99:8f:ef:33:
         47:1e:fe:15:e8:37:93:d9:8b:a4:a9:95:2e:2c:90:92:e1:fd:
         ee:1e:f9:be:94:a2:42:95:3d:30:b7:10:e1:9c:79:39:89:e8:
         1e:d8:67:d5:71:8d:fa:5b:90:62:31:77:a5:b8:41:17:d6:4d:
         1e:83:20:c9:a0:c3:f6:e9:2a:94:f1:67:95:ed:ff:a0:b5:10:
         f6:65:6c:76:69:ab:b6:1e:b2:b6:f1:f9:3b:54:c7:38:20:8a:
         99:17:89:7f:b7:51:b9:c8:a6:56:a0:dd:ac:00:29:62:ed:cc:
         3e:0c:3c:4c:7b:45:30:a5:3c:11:22:9b:cd:f7:8a:05:c3:cb:
         48:2b:de:e0:0d:44:95:39:af:00:07:fb:8e:77:b5:0b:ff:6a:
         dd:4a:9e:10:f1:ab:ae:db:5d:66:85:59:b9:ca:d6:12:40:f4:
         ef:81:53:70:33:79:84:f4:79:3f:ba:5f:c2:4b:cd:08:30:3d:
         6e:da:48:4f:02:47:2f:2d:51:c5:af:31:c6:20:4c:53:59:b9:
         d2:bf:eb:bd:65:6e:0f:37:e7:4e:bf:92:16:ac:1b:33:cf:97:
         ef:f6:6c:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----