Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/LLKIuHK7hHRV1x4cCzE6YyZev9Q.cer
File:                     LLKIuHK7hHRV1x4cCzE6YyZev9Q.cer (raw, json)
Hash identifier:          hPGEGsMsDXlUjCuxUoix7IGX+Kn29wYy3LdyHcEACBw=
Subject key identifier:   2C:B2:88:B8:72:BB:84:74:55:D7:1E:1C:0B:31:3A:63:26:5E:BF:D4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01865E60396ED29D5E43DE5123E7B22A6876
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/7c/3daa87-e045-411e-b614-997355419b0a/1/LLKIuHK7hHRV1x4cCzE6YyZev9Q.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/7c/3daa87-e045-411e-b614-997355419b0a/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 17 Feb 2023 07:56:49 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 109.107.155.0/24

Validation:               Failed, certificate revoked on Wed 25 Oct 2023 07:37:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:5e:60:39:6e:d2:9d:5e:43:de:51:23:e7:b2:2a:68:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Feb 17 07:56:49 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=2cb288b872bb847455d71e1c0b313a63265ebfd4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:2a:b6:70:04:46:fc:ab:ee:7e:93:ec:61:a4:
                    95:eb:6c:ac:1f:02:d6:ed:46:65:89:2f:e9:e1:95:
                    c2:85:9e:10:79:d0:a0:7b:2b:18:8c:e1:b9:77:71:
                    89:08:34:41:7c:a1:3a:08:a4:3b:df:f8:73:3b:a9:
                    91:1b:c6:b9:a1:b6:f5:c2:c6:28:f6:ba:a7:dc:aa:
                    c8:63:1f:ed:12:9e:43:9a:f6:94:bf:ef:01:d7:fc:
                    e2:5b:69:70:e3:f3:ba:21:e4:1a:6d:b9:35:f5:b5:
                    44:55:9b:41:1d:42:28:93:10:41:31:0b:64:49:ed:
                    a7:74:68:07:c7:89:66:5f:8f:8a:41:e6:bd:5f:03:
                    d1:72:1f:37:bf:2a:e5:66:74:08:23:63:16:6b:88:
                    25:20:74:bd:74:96:36:a0:a0:dd:14:12:59:7d:e9:
                    bc:4d:a3:95:d5:ce:04:79:3a:1f:1c:01:da:d4:fb:
                    6d:7f:80:8a:68:c8:af:98:32:cb:4b:8e:bd:c1:9b:
                    b1:19:fd:6f:51:a0:80:b8:15:5f:b3:e5:1e:32:8f:
                    9e:60:e4:a1:4c:1f:9f:52:f2:59:17:dd:1e:7a:bc:
                    dc:9e:4f:53:dc:73:af:57:d9:04:e6:57:52:fe:04:
                    7b:00:8c:56:ca:99:3b:29:4b:37:98:88:55:2a:ee:
                    6f:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:B2:88:B8:72:BB:84:74:55:D7:1E:1C:0B:31:3A:63:26:5E:BF:D4
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/3daa87-e045-411e-b614-997355419b0a/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/3daa87-e045-411e-b614-997355419b0a/1/LLKIuHK7hHRV1x4cCzE6YyZev9Q.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  109.107.155.0/24

    Signature Algorithm: sha256WithRSAEncryption
         27:a8:e1:b7:4b:df:65:ef:88:0d:8d:d5:a9:03:05:75:49:49:
         1c:0d:b2:77:f9:65:f8:89:ce:78:53:f1:c0:0f:08:56:90:4a:
         0b:af:5b:20:be:ac:2a:a5:2d:1c:16:8c:24:fd:7b:e7:08:63:
         40:db:ba:b5:19:dc:73:55:84:b0:11:f7:b4:09:8a:c1:9d:61:
         de:ac:f8:38:a0:ef:ad:ff:fc:be:51:e1:aa:af:f4:3b:03:f4:
         6e:8f:ca:95:7a:f9:64:d9:89:86:45:c9:f3:79:f4:69:b0:17:
         eb:09:d7:31:15:03:b4:a7:55:82:c4:6b:d6:68:70:b6:5f:26:
         69:7d:4d:ce:50:e2:9f:3e:cc:97:e2:b6:43:f7:14:08:6c:13:
         f1:ae:68:50:bf:79:54:c3:0d:30:ca:1b:8b:58:ce:10:4e:6c:
         65:d4:e1:bd:20:e1:eb:9f:92:6e:9c:0b:db:f6:20:e7:f9:0c:
         f2:b2:1d:10:9a:07:8f:a2:3b:25:b8:37:c8:29:e4:3f:37:cd:
         ce:be:8a:cc:7d:ab:7f:d4:7a:2f:6b:66:6d:fb:ba:a1:bb:b1:
         2c:78:c4:7d:03:99:af:aa:ef:1c:8d:0c:8c:3b:8a:50:3b:d2:
         85:c1:db:84:64:2b:58:c9:d2:b9:1e:72:a1:68:39:e6:fd:61:
         32:c5:21:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----