Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/KgyMS4gYDHjEEb9QjRxr-g5SXmQ.cer
File:                     KgyMS4gYDHjEEb9QjRxr-g5SXmQ.cer (raw, json)
Hash identifier:          IUbitmIqRdVROMIbmeswQ8gB0sEdwcMHoLJlqN/IttI=
Subject key identifier:   2A:0C:8C:4B:88:18:0C:78:C4:11:BF:50:8D:1C:6B:FA:0E:52:5E:64
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018BB9961DE01898F4A62558565C43D4F194
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/53/60b98b-085e-4dfb-9a6d-d4d6e58bb006/1/KgyMS4gYDHjEEb9QjRxr-g5SXmQ.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/53/60b98b-085e-4dfb-9a6d-d4d6e58bb006/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 10 Nov 2023 14:15:04 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 45.10.44.0/22

Validation:               Failed, certificate revoked on Tue 14 Nov 2023 09:50:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:b9:96:1d:e0:18:98:f4:a6:25:58:56:5c:43:d4:f1:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Nov 10 14:15:04 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=2a0c8c4b88180c78c411bf508d1c6bfa0e525e64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:3c:30:47:fb:0c:05:71:37:1e:40:fd:13:cb:
                    70:35:b6:c1:a1:6b:85:55:ae:53:9c:b3:94:49:63:
                    04:4b:37:2b:3f:21:c4:b2:f7:89:a4:47:7e:d1:be:
                    0e:87:21:8d:74:89:1b:bf:e3:bf:e8:28:11:8c:a8:
                    c9:cd:1b:a8:0a:f7:4a:75:f2:e6:82:cf:e9:67:45:
                    0d:da:8a:76:23:d2:94:31:b2:c5:50:17:50:07:6b:
                    43:7e:b8:d5:94:d3:d5:96:64:94:86:c9:4a:af:28:
                    e9:ef:70:dc:a5:d3:21:9d:c8:89:61:fc:68:8e:5b:
                    36:0c:f2:02:d0:b9:2c:39:62:6d:e1:5e:71:02:d8:
                    2d:c9:34:db:2b:fe:a5:e7:7c:86:35:5f:80:4b:05:
                    5c:b5:04:f9:3b:e6:6f:4f:e9:d8:4f:db:5a:d9:03:
                    de:a1:2d:c9:08:60:b6:87:d4:d8:4d:2b:9e:54:02:
                    39:79:7c:92:f9:d3:43:dc:c4:03:7c:b9:42:a2:ff:
                    93:fa:c0:88:26:8c:8d:57:16:dc:a7:12:a3:98:ed:
                    9e:e6:04:5c:ae:53:a5:b1:bd:c0:ef:ba:97:86:57:
                    d5:1e:ab:18:ee:ed:04:1b:b1:90:46:9d:81:56:83:
                    ec:9c:58:d8:87:a9:a8:d7:14:af:a9:4f:d0:db:f4:
                    6b:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:0C:8C:4B:88:18:0C:78:C4:11:BF:50:8D:1C:6B:FA:0E:52:5E:64
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/60b98b-085e-4dfb-9a6d-d4d6e58bb006/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/60b98b-085e-4dfb-9a6d-d4d6e58bb006/1/KgyMS4gYDHjEEb9QjRxr-g5SXmQ.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.10.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a7:ab:03:e2:c3:9c:03:0f:a0:4d:8e:45:f9:06:b2:65:30:23:
         d7:b4:05:4d:4e:58:37:bb:22:c6:c0:1a:eb:0b:8f:cf:cf:30:
         2d:d0:c3:a9:64:3f:e2:18:a3:65:2c:a0:d0:51:fb:33:ed:c1:
         92:12:bf:ee:a4:49:11:e0:75:d7:28:38:aa:0e:5d:1e:02:87:
         4d:9f:dd:f6:c6:b9:8d:04:b1:ee:21:06:b5:bb:3c:dd:6b:4f:
         19:2d:f1:e1:2f:76:a3:f7:31:ea:bb:66:1f:7b:db:ec:d4:b6:
         0b:69:79:30:f7:4f:93:8e:ec:60:ca:c0:b8:d9:29:e5:e4:16:
         7c:3a:69:8a:b8:5d:1e:41:c3:32:1c:c8:59:69:d6:eb:fd:a0:
         d9:e3:50:90:81:49:38:c4:b6:55:5d:1d:31:a8:38:0d:e8:d7:
         07:5e:e6:92:41:7b:fc:59:46:1f:de:5b:48:c0:cd:8e:b6:f0:
         43:31:75:c7:66:aa:d7:21:8e:ff:fb:14:6e:89:8f:a0:a3:cd:
         9f:f4:a7:9e:c7:4a:0d:69:2a:f8:98:07:c7:d1:18:ec:7a:30:
         24:e3:9b:a3:37:d3:2a:64:25:69:8e:82:69:50:84:32:42:76:
         80:a8:ba:a1:3d:19:fd:a0:a5:ba:ee:b0:a4:30:d0:97:30:16:
         9a:b5:7a:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----