Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/NtAOt1th3SwEDMIAoCPjddEumvQ.cer
File:                     NtAOt1th3SwEDMIAoCPjddEumvQ.cer (raw, json)
Hash identifier:          tCZNHyVXaaUyuTyBqgCEKdMwYBXLxBkvh670YUN0n4w=
Subject key identifier:   36:D0:0E:B7:5B:61:DD:2C:04:0C:C2:00:A0:23:E3:75:D1:2E:9A:F4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018571D7202127759A573AACE6550388A12C
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/4f/9d3e62-588a-4067-84e3-f036b62c965f/1/NtAOt1th3SwEDMIAoCPjddEumvQ.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/4f/9d3e62-588a-4067-84e3-f036b62c965f/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 02 Jan 2023 09:36:42 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 146.19.53.0/24

Validation:               Failed, certificate revoked on Wed 22 Mar 2023 18:15:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:71:d7:20:21:27:75:9a:57:3a:ac:e6:55:03:88:a1:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 09:36:42 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=36d00eb75b61dd2c040cc200a023e375d12e9af4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:a3:b7:bb:63:bb:46:33:b5:4f:fa:0b:ed:79:
                    30:44:66:cd:5f:84:ae:82:92:6d:8d:73:12:b6:36:
                    ac:dd:2c:57:c7:79:2d:b5:29:13:f7:80:27:67:3a:
                    3d:ca:1c:70:4e:98:ad:3c:e1:9e:b6:54:5f:93:bf:
                    dd:bd:e7:ea:67:a1:d7:e6:2c:35:50:86:1b:81:40:
                    d9:0a:85:3c:0e:61:64:42:49:1a:26:18:9d:37:cc:
                    f4:f6:13:6b:a0:f7:c0:b2:00:05:18:75:3b:2e:d2:
                    b7:62:c2:07:41:c2:a2:d7:32:58:4a:5b:fc:36:15:
                    bd:be:26:30:8b:36:bc:df:91:5e:c3:76:b5:0a:5b:
                    be:c2:51:7e:0d:96:f4:8f:c4:ff:87:cd:3d:8d:90:
                    00:21:e7:69:a5:a2:35:b7:31:0d:fd:a5:69:e0:a2:
                    31:eb:5b:40:fc:6e:c9:23:71:4a:54:db:49:19:f5:
                    57:82:4b:45:99:dd:7e:33:40:62:15:eb:02:7b:a5:
                    0f:25:b3:ef:a4:74:58:62:7e:9c:74:ec:30:73:51:
                    f3:1e:4a:b8:dc:01:5c:a2:62:2d:36:39:83:5c:fe:
                    fb:33:bc:dd:37:03:f5:c8:f5:bb:4e:fe:72:3e:d0:
                    ae:e4:4f:a2:56:d5:86:58:62:ed:97:c1:5d:43:e9:
                    f1:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:D0:0E:B7:5B:61:DD:2C:04:0C:C2:00:A0:23:E3:75:D1:2E:9A:F4
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/9d3e62-588a-4067-84e3-f036b62c965f/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/9d3e62-588a-4067-84e3-f036b62c965f/1/NtAOt1th3SwEDMIAoCPjddEumvQ.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.19.53.0/24

    Signature Algorithm: sha256WithRSAEncryption
         19:0a:c0:15:88:ce:31:2a:d5:f7:c5:ce:91:5c:3d:13:3e:ac:
         6b:50:02:58:72:59:a8:a0:fd:01:17:3e:58:5c:97:e2:f9:a9:
         7e:98:1b:53:ab:3d:23:2a:c5:64:b8:a9:0d:32:f7:bb:7f:fd:
         9a:fe:da:2b:29:a3:b6:5d:d6:f3:55:b6:0e:c1:ba:2b:ed:af:
         96:8d:c7:f4:f5:3c:51:7c:e1:9a:ae:86:3d:a5:ec:39:85:72:
         f9:79:4a:1c:8e:f7:00:c0:43:3a:06:b8:73:9d:45:39:b8:96:
         85:d2:21:2f:16:b6:3d:75:c3:23:ba:6d:d3:6a:ea:38:73:47:
         b6:24:d2:dc:78:6c:d6:69:da:94:de:d6:02:11:b3:b9:e9:f6:
         96:1f:96:4d:f3:6e:49:cd:00:d3:53:04:b2:1d:26:2d:e9:7b:
         f6:aa:b2:38:36:b3:f1:69:00:69:26:67:92:ff:63:2a:28:4f:
         b1:e4:66:df:81:61:2f:da:cd:91:ad:09:39:73:ab:98:b3:b9:
         9a:62:59:7a:2f:35:e7:b2:d4:1a:dc:6e:e3:57:0b:53:3b:03:
         de:80:ee:18:d5:43:ed:30:5e:f7:b3:6d:55:1f:ba:f5:e9:ff:
         a1:1c:65:af:d9:e7:d9:27:66:18:ee:cf:b8:19:22:1c:2b:1b:
         82:c5:cb:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----