Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/IY97c7jeWCg3DQid6mho4ow-D00.cer
File:                     IY97c7jeWCg3DQid6mho4ow-D00.cer (raw, json)
Hash identifier:          +Vu84GIQnRf0atl/9wHBsDydRCl5z1a/tPvVm7EPyec=
Subject key identifier:   21:8F:7B:73:B8:DE:58:28:37:0D:08:9D:EA:68:68:E2:8C:3E:0F:4D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0185708AA81C97F46F4AB818FF89942C5056
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/97/4b2c80-2d76-4b0b-826e-48d4bf8efbc5/1/IY97c7jeWCg3DQid6mho4ow-D00.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/97/4b2c80-2d76-4b0b-826e-48d4bf8efbc5/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 02 Jan 2023 03:33:33 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 194.26.230.0/24

Validation:               Failed, certificate revoked on Fri 10 Nov 2023 16:05:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:8a:a8:1c:97:f4:6f:4a:b8:18:ff:89:94:2c:50:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 03:33:33 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=218f7b73b8de5828370d089dea6868e28c3e0f4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:47:fc:09:97:79:54:a9:90:23:70:54:cc:75:
                    ed:42:64:5e:0e:82:ec:7c:34:e0:3c:4e:a2:29:90:
                    f5:b8:54:de:47:26:f5:1e:72:7f:ac:d1:a5:97:ef:
                    05:f6:fe:f6:e0:9e:a6:c6:28:dd:f2:e1:93:99:27:
                    7c:cc:31:f3:01:e1:4a:ac:3b:ff:ab:f2:73:30:2b:
                    30:3c:b4:22:82:1c:a8:3f:45:c9:d9:0d:36:4d:66:
                    00:6d:12:60:43:c8:71:1a:1d:b8:80:16:0d:da:7c:
                    5c:dd:c4:d7:d7:90:c0:f9:aa:c7:64:00:2f:3d:f5:
                    d8:a3:52:94:95:a4:46:74:84:f7:ca:b0:83:93:30:
                    c9:7a:9a:47:dd:6f:08:a6:9f:d2:04:5f:5d:18:9b:
                    1c:2a:c2:25:6c:02:7c:06:af:14:54:50:50:3b:25:
                    bc:54:67:98:59:fe:7f:d4:9b:42:cb:ce:8e:9b:54:
                    03:ef:7e:1e:19:69:84:ff:b9:38:cd:a7:4a:19:72:
                    4c:f4:a5:fa:04:66:69:1e:a5:73:c5:e2:b0:94:8e:
                    14:3c:e1:b8:87:13:d7:a1:3a:a0:92:a6:da:31:e9:
                    d4:b5:bb:04:91:49:05:b5:c5:ca:11:98:f2:b9:d7:
                    ed:fd:8a:f5:3d:17:a9:cc:47:eb:68:6d:e2:01:cf:
                    91:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:8F:7B:73:B8:DE:58:28:37:0D:08:9D:EA:68:68:E2:8C:3E:0F:4D
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/4b2c80-2d76-4b0b-826e-48d4bf8efbc5/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/4b2c80-2d76-4b0b-826e-48d4bf8efbc5/1/IY97c7jeWCg3DQid6mho4ow-D00.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.26.230.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4e:4f:7b:3b:0a:76:ac:5f:40:08:93:94:a3:cc:21:1d:a7:37:
         8e:29:e6:87:e7:dc:b9:19:4b:97:49:ec:32:29:6b:d0:b5:99:
         fe:81:2c:f1:72:a7:98:b5:10:54:70:ae:8b:1b:c4:7d:d4:ea:
         6d:fd:3a:cf:b3:45:a9:42:43:cf:b6:fc:08:36:f0:68:07:cd:
         db:16:9b:26:98:32:ca:e1:19:db:f1:36:c8:34:9c:23:33:f9:
         ad:5d:b6:f0:7b:7d:07:2d:84:75:07:2b:5d:93:b9:0a:15:19:
         fe:5b:91:2d:48:d9:34:cd:c7:4f:f6:ad:57:3f:9d:e3:e2:8c:
         ef:5e:45:46:24:7c:fc:58:f7:e0:cd:1b:59:f0:63:26:3c:fe:
         7e:c3:1b:9d:9d:b0:0f:dd:10:8f:9c:fb:da:32:72:4a:0d:b5:
         49:0d:1d:43:8e:f9:5f:92:de:2b:9c:4b:c0:68:6b:43:ce:77:
         fa:e8:d6:76:ea:1f:7b:2a:fb:c9:75:c0:b0:31:06:de:53:20:
         81:52:a3:c8:7a:f4:27:e8:c1:10:c9:1e:5a:b1:43:82:b8:ab:
         bb:83:09:81:1c:11:e9:0a:86:cf:f4:08:25:b8:0e:d1:46:31:
         9c:cd:df:6e:e8:39:6f:f2:23:19:3b:4e:64:4c:33:3f:6b:55:
         26:72:95:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----