Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/KZmLDi272gKOTD_Wp8tnx4owLnk.cer
File:                     KZmLDi272gKOTD_Wp8tnx4owLnk.cer (raw, json)
Hash identifier:          4cjElq5drqoTZy46C7hzXydUAOy0VOGDkvjmkNsH65c=
Subject key identifier:   29:99:8B:0E:2D:BB:DA:02:8E:4C:3F:D6:A7:CB:67:C7:8A:30:2E:79
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018B4336A6C54B57E4F4336CA9EA87B1747A
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/83/4acb39-9456-4497-8c65-3e21426c1ef3/1/KZmLDi272gKOTD_Wp8tnx4owLnk.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/83/4acb39-9456-4497-8c65-3e21426c1ef3/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 18 Oct 2023 14:35:37 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 185.1.219.0/24

Validation:               Failed, certificate revoked on Thu 19 Oct 2023 14:37:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:43:36:a6:c5:4b:57:e4:f4:33:6c:a9:ea:87:b1:74:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Oct 18 14:35:37 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=29998b0e2dbbda028e4c3fd6a7cb67c78a302e79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:5a:ab:1d:47:89:f0:f9:6c:ae:31:64:f8:22:
                    3d:21:33:dc:00:b2:41:a2:50:0d:5a:03:45:61:cc:
                    24:a3:cb:96:42:4f:ab:d0:10:96:8d:00:c8:49:e7:
                    ec:80:24:69:58:e1:d0:ff:c6:ba:ae:8a:cf:62:24:
                    f1:e5:9a:53:71:77:69:ae:06:05:6f:89:58:a1:1e:
                    44:58:2d:28:f4:58:2c:a4:cd:c5:39:d7:4e:e3:f3:
                    c3:67:cb:80:77:9a:f8:b5:28:51:48:cb:cd:9d:89:
                    2d:1d:aa:a5:dc:ff:6c:98:96:be:5f:62:e4:b9:69:
                    59:6e:5c:27:05:c7:1d:5a:bb:b1:8b:a1:33:f0:cf:
                    bb:c7:8e:0e:b2:0a:f0:3e:3e:10:e6:c9:6b:d7:f6:
                    ac:cd:d6:b1:ba:98:6f:5a:30:4e:a1:40:38:7d:13:
                    12:6c:f0:87:7a:36:9d:0c:e5:e1:05:31:7a:36:9f:
                    f7:8a:de:e1:af:c7:00:f8:e4:6e:38:fa:04:27:58:
                    bd:2a:9d:97:fa:7d:61:90:bb:62:63:15:51:44:56:
                    43:0c:ed:85:71:2a:10:17:fd:fa:be:f8:a9:01:22:
                    83:70:58:04:46:39:8c:56:a5:b6:ab:4d:b7:99:44:
                    c0:c0:cd:b9:cd:fa:72:b6:af:cd:6d:be:87:b2:46:
                    3d:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:99:8B:0E:2D:BB:DA:02:8E:4C:3F:D6:A7:CB:67:C7:8A:30:2E:79
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/4acb39-9456-4497-8c65-3e21426c1ef3/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/4acb39-9456-4497-8c65-3e21426c1ef3/1/KZmLDi272gKOTD_Wp8tnx4owLnk.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.1.219.0/24

    Signature Algorithm: sha256WithRSAEncryption
         62:2c:4c:2f:ec:d4:1d:a6:78:36:4c:2b:c2:a6:7c:f0:d8:68:
         a5:c7:db:f4:e5:fa:a0:f6:b4:68:5b:57:03:1f:c9:4c:95:8d:
         94:14:9b:29:31:d3:f6:4f:6e:0b:8d:0e:78:c5:77:ab:b1:4b:
         39:db:5d:36:2f:79:81:c9:ff:db:33:f0:f1:19:ba:cd:d6:7e:
         7c:43:f5:08:44:6d:e8:7f:51:20:fa:6c:ec:9e:71:ce:96:5b:
         46:00:6c:1c:dc:3d:56:a4:2c:92:5d:e2:41:69:c8:db:f2:7e:
         c1:f3:18:92:ba:61:bc:a1:0c:57:0f:0b:69:f7:db:ec:3d:7a:
         86:1b:36:d4:aa:c5:98:eb:07:75:d5:79:4e:49:45:42:cb:c4:
         7f:75:47:d6:cf:9f:d4:a2:2e:e3:f2:3a:74:8b:22:2e:2e:b9:
         b2:09:3f:bd:bd:c0:fe:25:39:f1:a5:78:eb:b3:40:63:d6:b9:
         97:f6:fd:39:2c:99:73:13:b1:a3:b2:8a:6a:8e:d8:43:28:8a:
         05:22:4e:d3:77:5b:99:85:07:67:09:16:0c:18:ee:34:dc:23:
         ba:83:e9:73:bd:77:7e:b9:5c:ae:41:a7:81:82:fb:52:28:89:
         97:e0:54:f9:14:be:8f:9d:59:8e:e4:2c:bd:f8:9b:d2:fd:57:
         d3:e6:cc:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----