Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/JtmK9BB1HV7HvVT3UVciR-vog5k.cer
File:                     JtmK9BB1HV7HvVT3UVciR-vog5k.cer (raw, json)
Hash identifier:          ADtwTIhz7CFeDHteXjh5EaBNqt/Q4aMM8Rof2qZQ194=
Subject key identifier:   26:D9:8A:F4:10:75:1D:5E:C7:BD:54:F7:51:57:22:47:EB:E8:83:99
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0185701DD528B1ED98C48E9F0D3FA70F6168
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/61/dc1dbc-090b-4df3-be56-41028edbf710/1/JtmK9BB1HV7HvVT3UVciR-vog5k.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/61/dc1dbc-090b-4df3-be56-41028edbf710/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 02 Jan 2023 01:34:41 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 185.230.245.0/24

Validation:               Failed, certificate revoked on Fri 25 Aug 2023 08:39:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:1d:d5:28:b1:ed:98:c4:8e:9f:0d:3f:a7:0f:61:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 01:34:41 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=26d98af410751d5ec7bd54f751572247ebe88399
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:53:c3:37:3c:80:3d:39:cb:70:ed:bd:e4:fa:
                    88:a7:5b:40:34:1f:24:52:06:60:ac:29:28:c8:1f:
                    7c:26:5d:82:b6:5e:93:8b:72:3f:68:e9:be:ce:3d:
                    79:39:01:b7:55:41:89:77:68:6e:b8:c5:ea:00:8e:
                    b1:66:64:48:29:38:48:b3:1f:04:55:57:14:6d:23:
                    0a:d3:51:e3:22:03:60:a2:61:1e:f2:82:03:22:e9:
                    e5:d0:cb:5b:3e:e2:a6:93:61:43:bf:d1:f2:6e:0a:
                    a4:47:9f:7d:be:11:fa:95:20:bc:03:1b:f7:15:d9:
                    13:31:59:34:c2:b8:dc:23:e3:ae:01:4c:68:2c:39:
                    07:6a:dd:ca:ae:b5:56:1e:f5:2f:46:dc:81:5c:26:
                    b0:4a:79:14:e9:48:79:e9:2c:c5:7f:35:ec:a4:8a:
                    21:a6:0d:d8:b5:cf:d6:98:4c:07:18:74:87:a4:f7:
                    a1:53:05:bb:d6:94:92:12:cd:86:21:35:88:3c:cf:
                    b5:c4:2f:bd:1d:03:e6:da:87:bc:9f:27:ee:64:23:
                    05:7f:94:67:31:c7:f4:94:2f:65:a4:46:30:a4:2d:
                    15:5b:f6:4b:14:dd:33:ae:34:86:c9:2b:6d:16:21:
                    bb:5a:9f:a6:5c:81:4e:ac:c9:79:f5:87:83:14:2a:
                    22:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:D9:8A:F4:10:75:1D:5E:C7:BD:54:F7:51:57:22:47:EB:E8:83:99
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/dc1dbc-090b-4df3-be56-41028edbf710/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/dc1dbc-090b-4df3-be56-41028edbf710/1/JtmK9BB1HV7HvVT3UVciR-vog5k.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.230.245.0/24

    Signature Algorithm: sha256WithRSAEncryption
         76:5c:32:98:07:88:02:8e:b1:60:83:1c:88:f7:ae:47:32:31:
         83:10:e2:81:ac:ab:20:1d:fd:3e:f3:68:f6:a1:8a:52:71:da:
         38:a6:89:67:cd:68:48:10:9a:b4:10:09:d4:75:2d:a8:5e:07:
         e7:9d:e4:1c:16:f6:c9:6a:7e:57:39:72:20:ad:d1:f8:00:58:
         4a:a4:a9:e4:24:5f:de:44:3d:73:3f:af:e6:cf:69:8b:d9:a5:
         48:c0:3a:94:f4:36:04:64:eb:7b:36:ba:c4:2b:dc:ff:35:19:
         a5:44:29:91:4c:fb:fc:2e:61:29:a1:e7:be:51:04:f6:95:f8:
         4c:65:4b:de:3d:68:77:75:85:21:7b:e5:2a:42:19:7b:4a:3b:
         77:87:9a:d4:b7:a3:c6:3b:58:5b:05:08:50:01:73:1c:6b:27:
         e3:21:72:b8:0f:a3:80:19:55:9f:d8:44:a3:ad:8c:8c:3f:b3:
         ba:14:06:50:82:42:08:48:36:c4:66:f3:f1:1a:61:c2:d8:4c:
         6b:9d:13:54:a1:af:24:e5:c5:c9:fe:03:80:1d:1d:cf:49:49:
         3f:d2:c6:3c:fa:ef:a8:fd:bd:57:cd:27:26:25:b0:34:f3:32:
         27:d0:df:05:2c:47:39:01:7d:22:a0:76:cd:87:6e:c7:ae:3a:
         72:f2:8d:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----