Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/H23HEQLs51bB2axPy_xPK9hHckw.cer
File:                     H23HEQLs51bB2axPy_xPK9hHckw.cer (raw, json)
Hash identifier:          uVUDgqamNgv9ivRFG5NoLeCROjRBa1FSYguvCpfj0pk=
Subject key identifier:   1F:6D:C7:11:02:EC:E7:56:C1:D9:AC:4F:CB:FC:4F:2B:D8:47:72:4C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856AF507697E4410974E5D3E725614B42A
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/d4/9cceef-c1da-467b-af24-49797b889454/1/H23HEQLs51bB2axPy_xPK9hHckw.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/d4/9cceef-c1da-467b-af24-49797b889454/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 01:32:01 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 194.32.106.0/24

Validation:               Failed, certificate revoked on Wed 09 Aug 2023 08:35:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6a:f5:07:69:7e:44:10:97:4e:5d:3e:72:56:14:b4:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 01:32:01 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=1f6dc71102ece756c1d9ac4fcbfc4f2bd847724c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:19:91:45:e0:a4:10:8a:6e:43:be:bb:f5:d1:
                    4f:d4:68:1c:57:c5:e8:95:b4:81:ec:76:d9:ca:13:
                    06:a0:b1:60:bb:cb:90:03:00:20:e6:05:12:15:ad:
                    65:fc:24:28:eb:83:08:c7:b0:91:5c:27:df:a1:85:
                    46:51:9b:11:1c:28:98:5f:e1:ee:75:b2:46:0c:81:
                    55:74:4d:e8:2a:08:0c:28:34:2c:f2:6e:5e:17:e8:
                    dd:5a:3a:15:10:04:0a:8d:f5:bf:da:a7:0f:31:5b:
                    8c:4a:11:83:cc:0e:0d:c2:5a:ac:7e:13:0c:00:4b:
                    91:84:bf:6e:e9:14:93:96:ee:7e:a8:8e:50:b6:c1:
                    25:9a:69:12:a6:a8:67:0b:f4:d1:fd:d3:cb:30:1a:
                    d1:00:46:08:37:b0:e5:f0:e5:b7:73:3b:3c:49:40:
                    09:0c:62:93:d6:8e:34:c3:99:36:78:1e:3e:d5:ec:
                    98:8b:c5:33:18:7d:d4:69:33:06:7c:3b:4f:19:ab:
                    fd:b3:2c:3e:7d:b2:b2:fb:05:22:b7:d4:f2:42:12:
                    91:4d:42:5b:41:77:c9:df:ed:fe:4a:9e:9f:ff:ff:
                    b2:55:66:ef:3d:be:4b:7a:07:7c:01:68:bb:39:fe:
                    7d:1a:cc:c3:ac:6b:92:89:0d:1c:f1:ea:e2:fa:d4:
                    f9:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:6D:C7:11:02:EC:E7:56:C1:D9:AC:4F:CB:FC:4F:2B:D8:47:72:4C
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/9cceef-c1da-467b-af24-49797b889454/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/9cceef-c1da-467b-af24-49797b889454/1/H23HEQLs51bB2axPy_xPK9hHckw.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.32.106.0/24

    Signature Algorithm: sha256WithRSAEncryption
         74:db:e0:ff:91:23:07:3b:cd:17:75:c7:b1:1a:97:a8:c6:ea:
         10:73:77:a2:83:0e:6f:96:c8:f0:99:8c:ad:ce:2d:3f:18:24:
         cf:5f:04:84:2e:64:0d:b7:5c:5b:1b:5c:30:ee:60:e8:82:1f:
         98:86:a5:c1:a9:bf:5f:e4:d0:8a:f3:c1:3d:1c:7f:d7:22:47:
         fa:85:c0:d7:1a:bc:be:47:bc:d4:c3:b9:81:3e:ba:7a:46:4e:
         31:4c:5b:6a:43:81:4b:c8:55:0b:32:20:e1:05:fa:87:6b:4f:
         29:08:c2:3f:8a:77:b3:09:4c:f3:b5:37:19:5d:d4:bb:b1:82:
         47:1a:7d:80:fc:c7:4b:02:8a:89:7c:4a:1a:37:ac:4d:e6:40:
         10:86:a6:e2:7c:61:c5:97:de:83:2f:fc:4b:e0:a2:3a:90:49:
         8d:e9:c7:e9:27:2b:f2:75:1c:e9:e6:df:7b:ee:2d:9c:5f:9e:
         80:ac:bc:9e:45:c6:48:d6:ea:97:d0:32:f0:bb:80:55:0d:3f:
         43:78:a2:84:df:ba:3a:57:66:dd:5d:f7:7b:50:ec:02:3a:58:
         6f:33:c9:29:62:4d:f5:31:51:6d:01:7a:83:58:2b:b6:b7:22:
         e3:be:91:12:84:82:f3:f8:23:7d:8e:7a:92:18:53:e6:34:f2:
         7b:d3:b9:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----