Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/GyLN9TJJBJ0EkUsYN_wCfWlkzgc.cer
File:                     GyLN9TJJBJ0EkUsYN_wCfWlkzgc.cer (raw, json)
Hash identifier:          9iodeq2HUdaIpDOhdolwnhP2DV9fuo5gx4Em5TqrGoU=
Subject key identifier:   1B:22:CD:F5:32:49:04:9D:04:91:4B:18:37:FC:02:7D:69:64:CE:07
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018CC7272C12067D135115A9BEC0A47C3776
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/84/0cd7cc-af08-417b-bd58-3e1bb1e29422/1/GyLN9TJJBJ0EkUsYN_wCfWlkzgc.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/84/0cd7cc-af08-417b-bd58-3e1bb1e29422/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 22:31:22 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    IP: 194.147.212.0/24

Validation:               Failed, certificate revoked on Wed 20 Nov 2024 08:11:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c7:27:2c:12:06:7d:13:51:15:a9:be:c0:a4:7c:37:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 22:31:22 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=1b22cdf53249049d04914b1837fc027d6964ce07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:cf:7c:f6:69:0f:77:4c:c7:a6:88:72:0d:e2:
                    a8:f4:96:bf:55:cf:e6:ce:58:71:95:d8:66:f8:d1:
                    81:75:e0:ae:5d:d8:18:96:10:aa:5c:1c:63:ed:b5:
                    bb:16:bb:4b:42:70:3f:a2:48:52:ec:77:4e:c9:12:
                    1d:7b:5b:14:3f:0b:a8:0b:07:a1:99:41:bb:71:24:
                    fa:16:52:15:00:75:4c:c1:f0:e9:cc:e0:b3:f7:b6:
                    e0:06:0e:22:3c:40:be:24:3f:3d:42:cf:fc:dd:0d:
                    6b:dd:65:93:34:aa:41:0b:14:82:7b:6a:71:ae:43:
                    e8:d3:cb:ce:1b:e5:5e:79:a6:23:ae:ef:c7:ba:30:
                    1a:58:da:c8:65:7b:e5:f6:b6:cc:e2:76:7c:e3:b0:
                    f8:04:9b:76:d5:34:23:01:2e:90:00:54:9d:10:8d:
                    f8:62:06:5f:ad:34:af:42:48:b9:78:8c:15:2e:49:
                    0c:c5:c5:ed:20:16:2c:4d:ca:98:1f:6c:c5:60:9a:
                    5c:33:4d:73:2a:fd:96:24:75:be:67:d2:1e:0c:41:
                    41:4c:d5:92:56:14:e3:e3:36:7e:ce:59:9a:dc:2d:
                    6b:c5:ca:a2:77:b0:14:20:c0:24:2d:8e:ef:0b:0e:
                    15:68:bf:b2:ee:d0:6e:f8:21:f7:75:1e:ec:93:2b:
                    e4:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:22:CD:F5:32:49:04:9D:04:91:4B:18:37:FC:02:7D:69:64:CE:07
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/0cd7cc-af08-417b-bd58-3e1bb1e29422/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/0cd7cc-af08-417b-bd58-3e1bb1e29422/1/GyLN9TJJBJ0EkUsYN_wCfWlkzgc.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.147.212.0/24

    Signature Algorithm: sha256WithRSAEncryption
         27:3a:ab:d3:0a:7d:0d:92:a3:4a:85:b3:2b:07:02:37:52:43:
         48:26:95:a4:3e:b4:c0:97:46:80:69:1e:d7:93:ba:cf:70:1e:
         a9:c6:ca:55:6d:33:15:aa:ea:b7:29:75:c1:86:fa:06:a3:2c:
         63:d3:8c:51:60:f8:fb:21:f6:e6:88:50:87:b3:69:8d:83:71:
         87:8c:33:de:28:97:27:b9:2e:d0:06:f7:33:6c:7b:e0:7c:65:
         e3:e1:50:66:15:9c:c0:41:ea:35:77:21:54:b4:61:d4:98:e8:
         08:30:96:09:39:7e:b9:c7:30:89:03:a8:2c:33:08:9a:f9:61:
         d5:1b:f5:e3:e1:fb:19:d4:db:dc:77:c0:aa:a7:a9:82:56:6c:
         3a:3c:a6:5d:3b:54:e0:a8:f6:c8:2b:f2:d4:af:03:37:18:19:
         ff:70:ee:70:8d:23:9b:5b:6b:67:87:fa:e9:76:ba:3f:83:88:
         03:ec:cd:0b:02:94:71:a5:5c:5d:53:c8:88:b0:f5:66:15:6b:
         01:43:30:53:85:af:99:d1:e3:fb:a7:fc:c0:a4:5b:6e:47:08:
         0a:78:f8:7f:eb:4b:d0:6b:fb:da:48:d4:b8:fd:56:ee:ff:fe:
         cb:6a:ff:d0:71:70:a4:e7:a8:c8:0e:17:47:14:17:e3:3a:9a:
         ed:08:81:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----