Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/LJ3sjs0BJZaGm1FIPCDpTdm0H8Q.cer
File:                     LJ3sjs0BJZaGm1FIPCDpTdm0H8Q.cer (raw, json)
Hash identifier:          jess2bBSAvzOC5hp8qR6izT8EpJ9IiVmAVW1vIMhQNg=
Subject key identifier:   2C:9D:EC:8E:CD:01:25:96:86:9B:51:48:3C:20:E9:4D:D9:B4:1F:C4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018692F8F6A8496BA27DA04FB25679661438
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/23/6453c0-47f8-4cf8-a2fb-524c4ef230c9/1/LJ3sjs0BJZaGm1FIPCDpTdm0H8Q.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/23/6453c0-47f8-4cf8-a2fb-524c4ef230c9/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 27 Feb 2023 13:03:55 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 178.23.191.0/24

Validation:               Failed, certificate revoked on Wed 04 Oct 2023 07:16:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:92:f8:f6:a8:49:6b:a2:7d:a0:4f:b2:56:79:66:14:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Feb 27 13:03:55 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=2c9dec8ecd012596869b51483c20e94dd9b41fc4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:e4:c9:61:67:8f:bf:88:e7:95:4d:19:7f:11:
                    b1:7c:46:c9:fa:85:cf:26:dc:c3:15:c9:2f:1a:6c:
                    bf:70:66:c4:2f:b2:27:0c:12:b4:04:f4:ac:e3:c6:
                    3c:2b:b5:24:de:c3:f4:32:76:52:cd:67:8b:e6:21:
                    57:23:1b:79:36:11:b4:ca:39:0f:eb:2d:5d:31:3c:
                    e4:82:0c:c3:12:c3:56:1a:d8:4a:0f:c1:63:09:6a:
                    f7:76:47:c0:38:38:a6:f4:bd:49:fd:0e:a1:7a:1d:
                    24:a9:ce:85:4d:cc:86:72:58:71:65:0d:8f:f9:d4:
                    4d:be:fe:b4:d8:c2:4c:d8:69:e9:15:ed:49:93:e6:
                    4a:4d:5b:b6:f9:1e:bc:30:96:41:24:30:5d:b1:88:
                    2f:2e:0b:f3:3c:c1:d3:aa:09:98:c7:df:3e:c5:e5:
                    bb:2c:3c:5f:da:8a:44:f5:ca:8b:11:a2:37:cf:c7:
                    07:d5:8b:19:03:44:b7:2e:e2:12:a6:04:28:84:6a:
                    58:81:66:26:37:7a:4d:2d:d2:d8:ba:a2:6d:f2:dc:
                    1d:fe:5f:9e:d4:37:5b:89:55:39:67:1e:f1:7d:dc:
                    77:87:9f:de:9c:22:a3:c9:ab:72:09:34:0b:00:73:
                    9a:fc:97:3d:d8:c9:ee:a7:0b:9a:23:88:d1:33:93:
                    40:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:9D:EC:8E:CD:01:25:96:86:9B:51:48:3C:20:E9:4D:D9:B4:1F:C4
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/6453c0-47f8-4cf8-a2fb-524c4ef230c9/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/6453c0-47f8-4cf8-a2fb-524c4ef230c9/1/LJ3sjs0BJZaGm1FIPCDpTdm0H8Q.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  178.23.191.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1d:9c:db:40:15:b7:36:b9:48:97:00:5e:0c:36:a9:b6:35:a7:
         48:00:c2:e9:9c:3d:e1:2e:30:bf:b4:cf:e8:6c:ca:64:5f:7a:
         94:82:82:f3:e8:07:a9:21:19:0c:8d:8d:88:a7:6c:af:d3:c7:
         4b:d6:8b:3e:6c:04:96:90:ed:3b:db:21:14:80:97:71:4d:de:
         4d:0b:96:c6:56:96:5a:f9:28:6b:cd:4d:07:0e:ec:d0:13:d8:
         1b:dc:d1:ef:6f:a2:f2:4b:4f:2c:3c:e0:05:20:e3:29:63:17:
         e5:57:e5:12:f4:51:6a:c6:3a:5a:49:14:cb:5a:68:22:76:ae:
         1c:20:0c:e3:56:34:b7:5e:b3:10:68:39:e1:15:24:b9:e5:1a:
         7a:d8:4e:af:49:45:95:af:24:34:ca:1d:f4:4d:ef:89:a1:18:
         8b:1a:47:b1:ef:04:34:1a:a1:e6:ed:66:6f:df:ea:cf:61:a7:
         74:b0:74:c8:52:07:02:0f:67:71:29:4f:95:6a:ad:6e:ed:8f:
         28:c5:0d:d3:f7:44:a2:84:de:34:98:38:91:b9:36:d9:96:78:
         b2:19:aa:b1:9e:78:52:41:ee:96:66:b5:bf:6d:59:ad:0a:8a:
         a7:1e:28:14:e8:d7:39:ff:b8:53:2f:84:3d:dd:09:98:61:21:
         30:c4:3d:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----