Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/IBesiOMgcueKq9vmrSWiYLHZOU0.cer
File:                     IBesiOMgcueKq9vmrSWiYLHZOU0.cer (raw, json)
Hash identifier:          YJe6UD1Hq+g/few1m8zuTVR54LOdxJ+IlUVGoUHIJuI=
Subject key identifier:   20:17:AC:88:E3:20:72:E7:8A:AB:DB:E6:AD:25:A2:60:B1:D9:39:4D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018CC94E61A11DF0F6BE12294CE1B5B70B3C
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/49/158ab0-1897-4d22-8ac3-41b50b1d7344/1/IBesiOMgcueKq9vmrSWiYLHZOU0.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/49/158ab0-1897-4d22-8ac3-41b50b1d7344/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Tue 02 Jan 2024 08:33:26 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    IP: 194.147.224.0/24

Validation:               Failed, certificate revoked on Wed 18 Dec 2024 15:16:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c9:4e:61:a1:1d:f0:f6:be:12:29:4c:e1:b5:b7:0b:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 08:33:26 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=2017ac88e32072e78aabdbe6ad25a260b1d9394d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:27:c1:4f:0f:25:aa:5a:f9:70:ab:cf:82:51:
                    cc:14:7d:ad:33:dd:89:d6:3f:fd:d9:ca:6b:d9:d5:
                    5d:e0:5a:9e:5d:3a:01:a1:44:0e:3b:f3:b1:dc:1a:
                    66:b5:46:63:dd:ae:bf:9c:ed:30:7f:7e:23:cf:ee:
                    05:1b:7e:2f:d0:af:c5:95:dd:77:68:bb:f9:16:46:
                    c9:38:e0:c5:cb:24:44:5a:03:6e:42:e7:8e:93:9c:
                    74:19:dc:85:a3:fa:8f:ce:87:0d:11:8a:61:5e:e9:
                    25:34:72:b9:e3:01:ca:d8:bc:4f:9f:d7:7c:bb:94:
                    67:78:70:e8:33:fa:b4:eb:48:f8:19:a5:27:39:cf:
                    60:a5:3d:68:d9:60:5d:7a:40:46:73:87:85:25:c2:
                    a1:58:f3:c7:04:25:e2:b7:1b:32:96:de:4f:01:c2:
                    cd:79:5f:0e:ea:6a:53:a6:00:5b:48:d5:bb:ad:ba:
                    0a:58:ac:7a:c5:c9:c0:0d:38:15:43:5c:81:cb:38:
                    e4:fd:bc:13:6c:f1:6b:8b:0a:05:59:de:fa:af:6f:
                    e3:87:1a:63:7a:07:8f:dc:87:a9:60:b6:79:e0:c6:
                    58:2e:d3:d8:47:cf:45:f4:dd:fa:a0:d8:dc:8f:ee:
                    7e:1f:44:c9:0e:8a:b8:33:70:e4:e6:43:40:d7:22:
                    44:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:17:AC:88:E3:20:72:E7:8A:AB:DB:E6:AD:25:A2:60:B1:D9:39:4D
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/158ab0-1897-4d22-8ac3-41b50b1d7344/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/158ab0-1897-4d22-8ac3-41b50b1d7344/1/IBesiOMgcueKq9vmrSWiYLHZOU0.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.147.224.0/24

    Signature Algorithm: sha256WithRSAEncryption
         62:1d:7f:bb:e9:63:0c:d9:56:77:f8:19:4b:93:9a:a3:12:47:
         68:26:92:cd:19:03:21:4f:c9:cb:e5:74:75:0b:d3:3a:90:b8:
         52:10:e6:b9:52:1b:ee:f0:b6:62:1d:04:da:c6:4d:e0:03:a2:
         3d:f1:15:1e:55:4e:8b:dc:7e:11:6f:82:c7:a8:0d:5a:45:ae:
         db:97:1c:e3:8f:7a:73:b4:93:5d:7a:db:4d:16:12:83:9d:18:
         93:b9:b0:eb:59:6c:3e:f1:5e:98:9e:02:d6:1a:14:c4:de:3f:
         39:19:96:99:fc:85:87:4f:2f:77:4c:e6:53:a4:76:47:18:34:
         08:22:49:11:f9:df:3d:f2:e2:e5:55:d7:01:b8:58:33:3b:8c:
         90:29:91:bf:a4:1c:5a:4b:b1:8f:bb:3e:ee:5f:e3:ab:c3:18:
         0f:08:43:34:40:c2:95:a0:9b:c3:63:d3:14:12:11:38:67:a2:
         56:00:7e:4d:cf:92:17:22:7b:4c:c0:5e:ff:c6:3f:60:79:db:
         f2:22:e2:61:c3:f4:a3:d2:c0:09:e9:13:a2:3a:47:12:4c:b8:
         02:28:86:d6:c0:aa:e5:a1:1c:3b:cb:64:04:89:d2:7f:cc:0c:
         fb:2b:ab:ef:5b:ff:46:70:54:f7:46:b4:3f:ba:26:f6:84:78:
         a8:89:34:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----