Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/NPOJHHUo4cntCLLL49w2B6-zekw.cer
File:                     NPOJHHUo4cntCLLL49w2B6-zekw.cer (raw, json)
Hash identifier:          3NMTaWq6IXtSPbOYJZcfMju6uhE4ssR/qC6qtnDU4rI=
Subject key identifier:   34:F3:89:1C:75:28:E1:C9:ED:08:B2:CB:E3:DC:36:07:AF:B3:7A:4C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018692EB40A3AAD4219649B5C262F0FE2FB2
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/99/3d6407-72da-4568-843f-37641e999b8d/1/NPOJHHUo4cntCLLL49w2B6-zekw.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/99/3d6407-72da-4568-843f-37641e999b8d/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 27 Feb 2023 12:48:56 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 185.218.186.0/24

Validation:               Failed, certificate revoked on Wed 16 Aug 2023 08:28:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:92:eb:40:a3:aa:d4:21:96:49:b5:c2:62:f0:fe:2f:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Feb 27 12:48:56 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=34f3891c7528e1c9ed08b2cbe3dc3607afb37a4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:c7:36:7c:56:b2:65:b1:3a:44:cf:01:4a:a9:
                    71:bb:5a:bb:ce:b3:98:5c:7d:2e:1e:ec:2c:0c:36:
                    03:85:e3:7b:1b:f5:ba:43:48:52:1a:b4:71:8b:81:
                    fb:a1:4f:a0:e2:42:2f:0c:81:c5:7a:f3:a6:ae:c3:
                    21:28:40:35:bb:3a:d7:16:f5:8b:c9:74:98:47:7b:
                    1e:db:9d:7e:09:ca:93:1a:0e:e7:5d:5d:c1:fb:c3:
                    0b:bf:c0:b1:f1:0c:47:44:fc:ae:8c:f2:50:b5:43:
                    c5:10:d4:de:9d:b1:43:64:cd:98:f9:5c:a4:8b:17:
                    e5:09:58:ea:9a:26:3c:ec:04:52:40:53:93:dc:a2:
                    fe:92:4c:87:e9:71:74:b6:bb:8e:90:59:5f:33:02:
                    77:89:be:96:c6:d2:dc:48:60:db:01:b6:8e:71:92:
                    8c:b0:a3:f3:1b:a7:48:60:e1:18:2e:aa:2a:5c:4c:
                    1a:83:ac:3c:27:25:8b:e5:57:8b:9e:4e:c5:ee:55:
                    57:29:d6:1c:12:59:ab:54:05:bd:b7:5b:e2:4e:ef:
                    33:b8:0d:fb:2b:94:4f:fc:47:75:08:24:89:c4:c3:
                    c5:79:8f:0f:4c:0c:3a:af:9c:ae:66:df:73:0e:5e:
                    71:2d:56:99:63:81:4d:57:66:cf:67:87:15:ba:32:
                    64:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:F3:89:1C:75:28:E1:C9:ED:08:B2:CB:E3:DC:36:07:AF:B3:7A:4C
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/3d6407-72da-4568-843f-37641e999b8d/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/3d6407-72da-4568-843f-37641e999b8d/1/NPOJHHUo4cntCLLL49w2B6-zekw.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.218.186.0/24

    Signature Algorithm: sha256WithRSAEncryption
         49:83:e4:42:24:44:db:23:1a:dc:ff:2d:4f:79:30:5d:a4:b4:
         0b:83:f6:3c:61:4b:e1:51:c5:c7:d1:47:1d:04:88:44:ac:28:
         03:19:d3:18:2d:23:bb:43:07:fc:ed:eb:83:47:a4:c4:d6:23:
         ab:16:5c:b4:d2:b0:07:11:f5:e9:82:f1:8f:52:91:c9:b0:e4:
         ff:fe:b5:74:22:5e:eb:9b:29:e3:09:ee:5c:c1:ef:81:60:1a:
         35:17:e1:3d:2f:c7:b2:72:71:28:e0:45:9e:11:b7:25:6e:63:
         4b:e1:36:e2:b9:aa:07:ba:82:cf:9e:43:c8:61:8a:00:f6:d9:
         3a:22:64:d8:b0:8e:aa:15:f3:12:23:40:d0:63:c2:9e:73:b0:
         5d:f5:ff:a0:33:91:d5:58:64:24:5c:51:71:8c:df:a9:7f:80:
         2e:2a:db:c5:bb:d3:73:4d:c8:25:e7:c0:a6:f1:bc:cb:4f:21:
         15:ad:ae:44:09:38:b5:5a:46:6e:0f:c5:58:d4:93:31:b9:bb:
         f5:55:4c:30:24:48:c9:c8:66:cb:bb:38:3d:4c:6d:4c:2b:9d:
         56:91:ab:f8:f1:02:ad:e4:b7:ef:22:c7:42:5d:b0:be:cc:19:
         b6:aa:6b:a2:09:4a:ad:39:f6:78:50:7c:21:76:e2:b3:73:24:
         d8:4e:c7:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----