Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/HyWFKHQzHAGkNVXn47crpqgL6F8.cer
File:                     HyWFKHQzHAGkNVXn47crpqgL6F8.cer (raw, json)
Hash identifier:          nk/Fx9UOL4RMAURD6hr07aqgLrfb+WbXwvFk4EyTjRg=
Subject key identifier:   1F:25:85:28:74:33:1C:01:A4:35:55:E7:E3:B7:2B:A6:A8:0B:E8:5F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018CC4255011AD1DBE7C78E5C6E39AE6C346
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/a4/84ac9b-0870-4c3f-af5c-637cbad64e03/1/HyWFKHQzHAGkNVXn47crpqgL6F8.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/a4/84ac9b-0870-4c3f-af5c-637cbad64e03/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 08:30:28 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    IP: 185.205.68.0/24

Validation:               Failed, certificate revoked on Thu 01 Feb 2024 10:30:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c4:25:50:11:ad:1d:be:7c:78:e5:c6:e3:9a:e6:c3:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 08:30:28 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=1f25852874331c01a43555e7e3b72ba6a80be85f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:bb:67:af:bc:78:8b:8e:18:a6:0e:ff:28:7e:
                    fb:ba:27:70:04:78:ae:a0:02:21:c1:1e:ba:2d:d3:
                    62:09:95:26:b5:ff:77:c4:07:13:53:7d:33:d1:cb:
                    03:7e:62:5e:78:09:b8:27:c3:82:b3:22:c4:70:78:
                    c0:83:c5:e0:74:c4:c5:f5:1e:e9:1d:19:62:ca:f7:
                    d1:54:95:8a:f4:65:ab:92:9f:33:a9:91:98:2d:ca:
                    9f:80:1b:72:09:01:e5:cc:f0:74:08:38:85:dd:bc:
                    31:62:8f:ec:31:0e:79:80:80:d0:b2:ab:32:72:05:
                    ae:63:b0:31:f7:af:24:1e:7e:77:0c:31:15:db:5a:
                    58:e8:82:55:9d:a3:be:bc:1f:73:e6:b6:9d:1c:ee:
                    97:de:b1:27:93:90:e9:2f:a5:b0:b9:9b:ec:52:1b:
                    b3:bc:04:c9:20:2a:59:65:ae:57:69:b4:fe:33:16:
                    2b:97:9f:3f:f8:37:92:90:5d:a0:ea:fa:8f:50:fb:
                    00:e7:0e:23:cf:20:e7:eb:1f:45:84:29:0e:70:80:
                    25:1c:d2:f1:21:cd:cb:91:b5:b5:0a:d1:e0:e4:b0:
                    d1:c7:1f:1d:bc:47:28:75:a3:8e:e4:db:07:e2:aa:
                    83:88:a0:03:e9:2a:cc:b3:1b:f7:55:a8:c8:51:e7:
                    b1:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:25:85:28:74:33:1C:01:A4:35:55:E7:E3:B7:2B:A6:A8:0B:E8:5F
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/84ac9b-0870-4c3f-af5c-637cbad64e03/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/84ac9b-0870-4c3f-af5c-637cbad64e03/1/HyWFKHQzHAGkNVXn47crpqgL6F8.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.205.68.0/24

    Signature Algorithm: sha256WithRSAEncryption
         65:df:39:6f:20:08:ae:53:33:04:ca:7d:3f:df:cb:53:01:cd:
         77:55:c3:77:57:e3:61:e0:64:32:60:e7:49:82:c5:8d:e4:fb:
         3b:76:f9:0b:56:8e:62:d5:26:00:d3:2e:98:0e:23:4c:16:1b:
         3c:3d:8b:67:28:f8:07:96:6d:cd:58:00:b4:36:29:c8:32:a2:
         5d:1c:c8:e7:d5:b6:6d:67:c8:d1:d4:f7:d6:9a:15:e6:4e:e4:
         10:0e:75:cf:d6:75:56:3f:f9:da:aa:f1:88:39:0d:44:9a:1a:
         e7:6f:10:2d:ab:d9:4e:b6:5c:0b:61:08:fd:3c:bc:b3:cc:c8:
         13:f2:fd:e2:8c:fa:fa:51:8a:1f:ca:ab:fc:d3:52:12:48:b1:
         83:8f:7a:64:a0:a4:35:d2:f7:e3:d2:77:f2:49:7d:1c:2c:14:
         0e:b3:43:0a:b8:5a:6b:a0:7b:9a:07:b8:b6:0f:ca:1a:15:ce:
         b6:0a:66:f2:70:ca:11:37:7d:8f:16:dc:c7:59:48:58:88:89:
         16:6d:d8:f6:a1:5e:5f:25:44:e4:10:7a:f4:d3:e7:97:7d:f9:
         57:c2:dc:37:1b:d8:f2:f0:9a:a3:2e:e7:1e:33:5d:ef:c0:95:
         11:cb:16:b8:a8:ef:bc:82:78:b2:fb:e7:80:57:b9:31:2b:52:
         a1:08:83:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----