Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/JTg9Nbnmq7MF_1ePC4go6KUA6sw.cer
File:                     JTg9Nbnmq7MF_1ePC4go6KUA6sw.cer (raw, json)
Hash identifier:          WidzwxolSwCyz/mq+T/Q7QHuUWHhkwK+wGphGeSHxuc=
Subject key identifier:   25:38:3D:35:B9:E6:AB:B3:05:FF:57:8F:0B:88:28:E8:A5:00:EA:CC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0187937CC7931C88B6AFB39C8420E9E53EF7
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/c0/91c1da-3201-4a0e-bcaf-3e2ff5a48062/1/JTg9Nbnmq7MF_1ePC4go6KUA6sw.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/c0/91c1da-3201-4a0e-bcaf-3e2ff5a48062/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Tue 18 Apr 2023 08:30:41 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 212.52.6.0/24

Validation:               Failed, certificate revoked on Mon 11 Dec 2023 15:24:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:93:7c:c7:93:1c:88:b6:af:b3:9c:84:20:e9:e5:3e:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Apr 18 08:30:41 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=25383d35b9e6abb305ff578f0b8828e8a500eacc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:d4:05:e4:c8:97:29:a6:98:fe:43:34:7a:ed:
                    63:c5:c7:3c:c5:6d:f5:42:2c:0c:b0:1b:80:ff:00:
                    17:16:9c:c4:22:85:fb:a3:f3:cd:16:b7:72:a1:9b:
                    ba:ac:72:2d:14:cd:73:0f:c6:c3:dc:20:6e:fd:e4:
                    f2:66:05:f8:15:4e:be:dc:2a:b1:c2:5a:f7:e6:30:
                    64:0e:b9:0a:90:1e:5d:8e:3c:bb:a1:33:9a:d6:f7:
                    13:e1:74:8a:47:9a:3a:2c:41:4a:0a:6a:98:2e:71:
                    fc:4c:23:6e:7e:0c:f3:94:7f:54:ba:f0:9b:dc:c3:
                    a1:be:77:60:08:83:b9:8c:fb:93:b2:f0:9b:4d:87:
                    b4:21:d8:2c:fd:8a:6d:47:b3:8c:d4:2d:1f:96:41:
                    2c:0e:eb:1b:32:d2:69:69:3e:a3:02:d9:99:18:92:
                    76:53:c8:6b:87:d7:ca:14:84:ea:9d:f5:f0:61:34:
                    ee:b6:f6:d1:99:bc:a1:68:50:8c:99:71:1e:46:b8:
                    ff:6c:38:1f:d2:8a:1c:42:7d:6b:86:bc:cc:0f:ba:
                    77:ad:dc:7d:da:23:76:8a:29:1b:99:fc:f1:c4:f3:
                    e8:f4:c1:dc:6d:7d:77:23:49:62:fb:cf:f6:3d:33:
                    d1:e6:76:f4:fa:45:f5:0f:23:42:56:08:94:bc:18:
                    46:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:38:3D:35:B9:E6:AB:B3:05:FF:57:8F:0B:88:28:E8:A5:00:EA:CC
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/91c1da-3201-4a0e-bcaf-3e2ff5a48062/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/91c1da-3201-4a0e-bcaf-3e2ff5a48062/1/JTg9Nbnmq7MF_1ePC4go6KUA6sw.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.52.6.0/24

    Signature Algorithm: sha256WithRSAEncryption
         60:a8:cc:56:16:47:83:23:9a:07:62:43:dd:6f:47:4f:57:92:
         68:f0:77:e8:ef:3a:0b:76:d0:ce:8c:1e:28:34:56:0a:e1:42:
         64:5f:4a:37:a6:6d:87:22:e6:99:8a:36:72:40:67:b1:52:e5:
         bf:cb:9b:3b:2a:74:db:f5:0c:fd:cf:ce:84:aa:db:b9:aa:9e:
         9b:d7:19:4a:14:06:9b:b0:b2:e5:c7:3b:a6:3b:f1:37:3a:12:
         1d:78:ba:26:8d:46:72:d8:62:cb:4d:b2:2d:a3:d4:41:7e:b8:
         00:a9:6a:63:cf:93:09:b5:39:d1:81:08:97:d3:bc:bb:7b:7f:
         f8:08:68:0d:76:99:5d:ac:fb:f4:48:b4:40:d0:9a:9f:e7:ca:
         84:d2:59:72:55:a3:f1:eb:88:08:5e:a2:64:2c:b4:26:76:16:
         e4:80:9f:9d:84:a6:e2:08:fc:35:68:03:49:e5:84:e5:c0:3b:
         9f:bd:73:d2:ba:54:98:63:f9:22:48:f7:e3:27:4d:d7:79:fb:
         95:17:bc:f3:e4:20:59:eb:8f:17:c3:18:5d:3d:69:9b:80:85:
         4c:00:75:e2:3c:3f:33:bd:48:57:a5:be:6f:cd:4d:90:e3:f3:
         42:13:8e:fb:b4:a9:38:b7:74:a5:13:e3:10:6f:aa:94:0d:1c:
         c5:0a:d4:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----