Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/InGn1hiw5P8tQLqqWspmsWDUMQM.cer
File:                     InGn1hiw5P8tQLqqWspmsWDUMQM.cer (raw, json)
Hash identifier:          WEJKww7AjaKjk2bDN9BZ4P7s9PfTd7JDuJnfQVxXvhE=
Subject key identifier:   22:71:A7:D6:18:B0:E4:FF:2D:40:BA:AA:5A:CA:66:B1:60:D4:31:03
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0189F2A637A763BD5BBBA244F722FCDE1FEC
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/a4/279f5c-9163-4a28-ad48-d1ef814f5b36/1/InGn1hiw5P8tQLqqWspmsWDUMQM.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/a4/279f5c-9163-4a28-ad48-d1ef814f5b36/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 14 Aug 2023 06:05:26 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 2a0c:5440::/29

Validation:               Failed, certificate revoked on Mon 14 Aug 2023 06:35:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:f2:a6:37:a7:63:bd:5b:bb:a2:44:f7:22:fc:de:1f:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Aug 14 06:05:26 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=2271a7d618b0e4ff2d40baaa5aca66b160d43103
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:35:2e:98:b3:8e:7f:fe:05:d5:7f:7e:86:ac:
                    be:ca:55:8e:b3:9a:92:d7:94:d5:e9:63:b6:b8:b7:
                    3a:93:c0:3e:9e:14:5b:33:48:56:4c:3f:9a:96:fb:
                    12:2b:60:e0:b6:c4:25:a8:03:1f:16:37:56:fe:46:
                    51:e9:7d:63:a5:6d:f9:d8:05:2a:3b:a5:1a:0b:16:
                    d2:82:2e:54:24:52:be:2c:37:45:ef:32:c5:e0:b9:
                    c8:55:85:08:35:a6:ed:cd:8b:42:05:3c:eb:b1:b9:
                    2c:c6:ca:9a:2d:db:95:2c:d2:66:24:7c:8d:c8:e4:
                    93:f5:a9:8c:77:61:98:8e:0a:b6:55:52:a5:c8:03:
                    72:43:d9:61:5a:18:1c:5d:21:78:2f:ba:7b:36:5b:
                    f3:ae:34:df:55:42:57:91:f4:8e:41:5d:6d:6e:30:
                    e4:0b:00:d6:ec:7c:51:2f:37:a6:25:7b:5b:ca:9f:
                    a2:cf:9e:d7:99:0e:af:33:56:b6:db:2a:04:1a:59:
                    9c:63:38:c5:c6:7b:d9:30:48:ec:b7:8b:87:85:4f:
                    83:f9:68:e4:47:5c:a6:51:66:51:1d:2e:a6:9a:27:
                    10:8c:15:2e:44:51:4d:9e:d6:47:42:32:e2:1b:ac:
                    e0:3d:44:51:80:0c:59:b1:72:1f:f0:34:bf:7d:26:
                    50:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:71:A7:D6:18:B0:E4:FF:2D:40:BA:AA:5A:CA:66:B1:60:D4:31:03
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/279f5c-9163-4a28-ad48-d1ef814f5b36/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/279f5c-9163-4a28-ad48-d1ef814f5b36/1/InGn1hiw5P8tQLqqWspmsWDUMQM.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0c:5440::/29

    Signature Algorithm: sha256WithRSAEncryption
         a2:a3:34:24:bb:dd:2c:2a:de:bd:9b:d6:55:7c:3a:61:a4:d4:
         c5:7c:b2:50:3e:87:f2:f9:33:43:1b:32:03:f5:63:ae:0d:d3:
         f1:f3:e8:8b:27:20:16:86:01:40:3b:a1:76:e6:78:fd:0f:b5:
         cf:8c:cf:0f:7b:ad:44:30:6b:a2:fe:77:53:2e:f7:96:a9:e8:
         ae:9b:19:f6:c6:c1:80:52:19:77:f6:e3:4f:bd:48:ae:ba:bc:
         ae:20:cb:63:4d:6f:c4:4a:5d:d7:75:cf:7b:bf:12:8c:1a:97:
         be:b3:fe:00:90:dc:91:d8:07:ca:41:86:4d:c8:11:e7:94:66:
         10:f0:55:b5:d7:b5:ef:b1:eb:c2:95:70:98:34:8a:b5:30:52:
         b5:ec:27:0d:7e:ac:b1:d5:f9:71:d8:97:1b:51:ac:c1:ed:3a:
         c6:d5:6a:a6:09:d6:02:15:57:32:07:82:3e:66:3b:1d:b7:90:
         04:c1:91:02:fe:0f:f0:67:65:f4:8c:8a:73:af:81:b8:f7:af:
         2d:17:f2:84:b6:ab:04:18:f2:1f:7e:5d:fd:84:99:cd:21:6a:
         13:21:7a:3b:6b:5f:f0:6c:b5:b7:26:6f:86:cb:57:f3:98:ee:
         33:c5:d7:bf:37:cc:73:08:6e:32:6e:ad:e1:e0:07:6e:03:a4:
         8f:38:98:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----