Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/LYJEaf3IV8Hlux9TLOPDTTuW82E.cer
File:                     LYJEaf3IV8Hlux9TLOPDTTuW82E.cer (raw, json)
Hash identifier:          lOXHbXVLaRMK5EH2UgNZRsfmwsVVTlTtESSfK2HpThU=
Subject key identifier:   2D:82:44:69:FD:C8:57:C1:E5:BB:1F:53:2C:E3:C3:4D:3B:96:F3:61
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018C68800D02C306A9C57E27FDBCE8996896
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/35/1780ce-ca88-4bf9-afb9-8f980fece54e/1/LYJEaf3IV8Hlux9TLOPDTTuW82E.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/35/1780ce-ca88-4bf9-afb9-8f980fece54e/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 14 Dec 2023 13:24:31 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 178.23.190.0/24
                          IP: 2a14:3480::/29

Validation:               Failed, certificate revoked on Fri 15 Dec 2023 14:09:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:68:80:0d:02:c3:06:a9:c5:7e:27:fd:bc:e8:99:68:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Dec 14 13:24:31 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=2d824469fdc857c1e5bb1f532ce3c34d3b96f361
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:15:72:19:95:b3:7e:09:0c:c4:8b:04:76:93:
                    d0:1e:f0:3a:5c:6d:57:65:13:d7:ec:07:25:04:6e:
                    d7:b6:70:f2:dd:90:85:98:32:91:dc:db:27:9a:28:
                    5a:3f:ba:bd:3f:d2:a5:de:9b:f1:73:64:fc:10:cb:
                    c7:28:67:ad:e8:ad:f8:ae:27:56:83:94:e2:13:b8:
                    9c:19:46:94:9b:d5:fe:c1:40:ea:83:54:b2:e3:fe:
                    f9:eb:59:c2:b4:94:fb:a6:b8:2a:b5:39:f5:06:42:
                    c3:7b:d6:79:e6:7e:8b:01:28:f5:c5:16:a6:0b:2d:
                    f1:c9:45:70:78:bd:01:af:5a:5a:e9:8d:e9:51:7c:
                    dc:96:49:17:ef:4d:9e:1b:2b:77:a0:3b:ce:0e:7d:
                    32:ab:4b:58:3a:d3:5a:ae:24:7f:52:d7:5a:16:a7:
                    b6:1f:f0:87:99:62:aa:cf:46:f2:1b:7d:cd:49:32:
                    45:e7:9d:ee:8b:2e:a1:fe:b6:93:fd:81:b2:5f:a8:
                    6c:e1:39:14:1f:b7:e4:d3:09:73:3c:89:2d:c9:10:
                    37:4e:cc:b5:b2:f5:b4:33:bf:90:39:00:5f:40:25:
                    c8:d2:55:91:79:e0:8b:7e:73:44:ff:46:b2:a3:7b:
                    f7:64:63:66:b0:58:37:e3:50:c7:87:45:58:b9:68:
                    bf:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:82:44:69:FD:C8:57:C1:E5:BB:1F:53:2C:E3:C3:4D:3B:96:F3:61
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/1780ce-ca88-4bf9-afb9-8f980fece54e/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/1780ce-ca88-4bf9-afb9-8f980fece54e/1/LYJEaf3IV8Hlux9TLOPDTTuW82E.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  178.23.190.0/24
                IPv6:
                  2a14:3480::/29

    Signature Algorithm: sha256WithRSAEncryption
         a1:18:6d:aa:e0:75:d1:35:66:f8:59:43:fa:a9:62:3d:3f:1b:
         08:45:66:8f:83:15:0f:c0:ac:0a:e5:61:91:de:8d:62:17:4b:
         73:41:20:e2:e5:d7:a1:61:0d:fc:6c:5f:03:c0:3e:bd:21:07:
         d2:4d:44:f1:ae:bc:fe:42:91:ae:32:de:b9:64:e3:5b:5b:dc:
         42:03:23:3f:79:fe:d1:ac:9d:c1:b5:6c:97:c6:4e:4e:dd:e9:
         a3:f0:81:e7:97:42:fc:a9:8e:b5:6f:62:fa:02:8b:d4:bb:36:
         cd:79:11:d0:d4:b4:df:8c:2d:23:a1:bc:9c:b2:76:98:d7:70:
         bb:f2:02:c1:30:30:ce:5b:e5:84:c7:4f:a8:d8:b3:50:7d:89:
         02:eb:5c:15:2f:5c:df:d0:55:93:68:17:3f:83:c3:7a:d1:85:
         93:83:f7:da:ad:0d:65:d2:8d:ed:6b:8b:9c:34:bb:ce:04:d9:
         90:cc:5d:05:7d:b0:4c:8e:d2:d1:62:5e:d8:b5:07:c3:ff:e5:
         94:3d:07:c7:50:c6:43:d6:58:bb:56:ec:95:51:98:35:8f:e7:
         44:2b:36:68:4d:c8:57:07:ba:d4:6f:6b:39:5c:b1:d9:db:77:
         02:0e:b3:c5:cc:e2:18:c8:76:ac:38:6c:f1:aa:af:bc:0d:bf:
         bd:bc:da:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----