Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/LugMsbEtZpeF4XqO4--cgkTmTgA.cer
File:                     LugMsbEtZpeF4XqO4--cgkTmTgA.cer (raw, json)
Hash identifier:          EqwEDfDas7gIzKXWgW0eRml+jaLi354n718MchpKKgc=
Subject key identifier:   2E:E8:0C:B1:B1:2D:66:97:85:E1:7A:8E:E3:EF:9C:82:44:E6:4E:00
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856D899D960C37D646DFF30BDEDF2DBEF4
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/fc/6e1d77-adf6-4e84-8183-2318eab9f63a/1/LugMsbEtZpeF4XqO4--cgkTmTgA.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/fc/6e1d77-adf6-4e84-8183-2318eab9f63a/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 13:33:33 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 45.137.184.0/22

Validation:               Failed, certificate revoked on Mon 16 Jan 2023 15:36:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6d:89:9d:96:0c:37:d6:46:df:f3:0b:de:df:2d:be:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 13:33:33 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=2ee80cb1b12d669785e17a8ee3ef9c8244e64e00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:71:3d:f6:38:71:2d:f0:b6:e0:90:d6:90:8e:
                    31:85:14:8f:d6:54:e1:c6:bd:a1:57:6f:65:31:48:
                    4d:e9:66:e4:0e:5f:d1:55:a3:bb:64:0b:13:f6:72:
                    a1:65:0a:7e:92:72:a8:10:50:77:50:2a:50:29:35:
                    c9:52:0c:9f:b1:cd:36:1b:ee:61:18:ad:6a:74:35:
                    a0:5e:e9:96:2c:bd:ef:01:84:d7:3d:5b:79:58:c3:
                    15:ad:d0:3c:c2:f7:2a:73:80:f8:f3:b8:b5:94:9e:
                    32:93:ca:56:bf:ed:20:b8:60:8d:27:6a:fb:13:e1:
                    31:61:52:e5:22:c5:0d:eb:e1:7d:66:96:dd:56:60:
                    3c:cf:92:9a:89:cd:58:d4:fe:58:2c:74:03:3c:e3:
                    f7:cf:a5:f3:f8:72:1a:1a:58:16:97:53:d7:40:b1:
                    ee:1b:92:c6:52:c3:cc:3c:66:90:4a:2a:7f:c2:6b:
                    53:03:38:19:ab:b0:f1:b2:0b:e5:e2:9f:d0:d7:03:
                    0a:f3:c7:47:df:4b:7a:cd:04:20:94:34:23:d0:57:
                    a6:e1:7b:69:9c:49:52:64:eb:14:f4:53:e4:10:8e:
                    65:86:a6:9a:85:38:b2:3e:93:f6:4c:c3:58:7f:65:
                    bc:6c:f9:d5:ef:42:b6:ae:60:ea:d7:b6:ef:19:5a:
                    f5:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:E8:0C:B1:B1:2D:66:97:85:E1:7A:8E:E3:EF:9C:82:44:E6:4E:00
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/6e1d77-adf6-4e84-8183-2318eab9f63a/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/6e1d77-adf6-4e84-8183-2318eab9f63a/1/LugMsbEtZpeF4XqO4--cgkTmTgA.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.137.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         41:0c:6d:c4:28:87:b2:a6:e4:ff:0e:3b:e1:b5:33:50:9e:8a:
         a5:11:e6:cb:d8:19:83:dc:51:7c:a8:aa:65:88:37:1c:b6:74:
         f9:ec:7a:dc:51:a7:1e:32:15:63:4c:6e:2d:e9:ab:a8:a6:82:
         2c:2f:fc:3e:56:30:25:23:d9:b5:6d:42:b4:c5:67:53:e0:fb:
         a5:8f:7c:c4:d0:83:00:e8:16:f3:28:d5:f1:7c:3d:1f:47:7c:
         1f:aa:64:8e:b0:de:91:82:80:d7:8d:e5:5b:f3:a3:5c:14:91:
         20:bb:54:75:43:b8:f7:1c:68:85:1e:a3:f6:f6:c2:ed:58:b7:
         da:a1:a4:90:ac:7f:5a:3b:c3:bf:dc:93:2d:91:2a:7c:b9:c2:
         0b:78:20:58:70:bb:5a:b2:97:5f:bc:3a:f2:14:c9:6b:19:4f:
         95:17:7e:dd:5d:5b:cb:24:30:31:a2:f8:dd:1f:fd:97:2f:aa:
         63:87:dd:04:a6:5b:a0:6c:30:e2:53:c9:15:30:1f:01:0b:fe:
         26:43:a6:6c:12:2f:c3:69:2d:a7:1b:20:f2:07:d4:f7:69:39:
         c2:92:f7:03:31:65:64:08:d1:03:40:09:24:08:5f:12:5d:2a:
         5b:bb:12:1c:87:cf:d5:e5:36:4f:34:95:7b:b0:51:0b:4f:8e:
         e8:32:38:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----