Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/QRpB3PSSjvXvjoN9qp1am_NBUsk.cer
File:                     QRpB3PSSjvXvjoN9qp1am_NBUsk.cer (raw, json)
Hash identifier:          9rxjQRy0b+F8NkFn9qBmQZN+c3KEnrsagsrvl6kQmCU=
Subject key identifier:   41:1A:41:DC:F4:92:8E:F5:EF:8E:83:7D:AA:9D:5A:9B:F3:41:52:C9
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018570FA4CF1D6A77BF28C98581449E5CBD4
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/91/1e1ca8-5ac4-44e6-8df9-d9fde6da633a/1/QRpB3PSSjvXvjoN9qp1am_NBUsk.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/91/1e1ca8-5ac4-44e6-8df9-d9fde6da633a/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 02 Jan 2023 05:35:30 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 188.64.140.0/24
                          IP: 2a0d:1940::/29

Validation:               Failed, certificate revoked on Wed 13 Sep 2023 14:07:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:fa:4c:f1:d6:a7:7b:f2:8c:98:58:14:49:e5:cb:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 05:35:30 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=411a41dcf4928ef5ef8e837daa9d5a9bf34152c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:2d:26:ec:7f:40:c7:e7:94:5e:e7:76:e9:a5:
                    7a:fb:14:8a:1c:c2:ca:da:fc:09:c1:6d:47:b5:7e:
                    a1:ff:5c:66:54:ec:0d:98:87:da:ca:48:12:5f:57:
                    4e:b1:18:87:cb:84:30:64:be:93:03:93:13:ad:8d:
                    a9:e3:6d:cb:ad:0f:c4:d9:2b:9f:36:35:e7:8d:db:
                    78:5c:74:61:4b:9a:95:2c:cb:62:2f:f5:98:1f:f4:
                    47:25:50:3d:70:f3:ee:38:18:76:fe:23:80:97:eb:
                    e9:7d:28:32:9a:9b:d7:56:bc:fb:ad:5e:76:39:c4:
                    cd:1e:bd:85:69:a0:d0:f9:d1:41:43:63:86:39:d6:
                    9c:2c:c6:ac:5d:de:a5:3e:dc:fc:df:0e:7a:e1:2e:
                    e6:d6:86:4d:e5:ba:c7:05:fe:ac:59:fa:07:c4:32:
                    2d:13:69:42:dd:42:c2:b9:0b:16:ba:31:5b:ef:b2:
                    0d:ce:8f:e4:fe:eb:e3:f0:00:29:99:a6:4b:27:23:
                    18:e4:58:36:d1:c8:bd:b7:d0:ee:72:3e:4d:cf:79:
                    ec:b8:06:a0:be:05:67:16:e0:11:e3:85:9a:bd:68:
                    53:1f:8d:a3:80:f6:7e:18:35:cb:45:6a:d4:6d:22:
                    cd:c0:a9:ca:f5:4f:c4:6e:c5:29:11:e7:b9:dd:99:
                    ae:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:1A:41:DC:F4:92:8E:F5:EF:8E:83:7D:AA:9D:5A:9B:F3:41:52:C9
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/1e1ca8-5ac4-44e6-8df9-d9fde6da633a/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/1e1ca8-5ac4-44e6-8df9-d9fde6da633a/1/QRpB3PSSjvXvjoN9qp1am_NBUsk.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  188.64.140.0/24
                IPv6:
                  2a0d:1940::/29

    Signature Algorithm: sha256WithRSAEncryption
         aa:f2:b7:d6:92:ef:3e:8a:16:e7:14:87:5a:ad:18:29:fd:4f:
         78:c0:6e:b2:41:7b:54:de:a2:ad:64:9b:aa:63:4d:af:eb:a7:
         e5:b4:dd:ba:fb:d7:bc:98:d1:9e:f6:85:aa:54:75:c1:ed:93:
         17:90:59:98:c1:98:8a:c4:29:da:33:2e:ee:a6:e7:29:e8:ad:
         d4:7d:32:5b:79:70:43:d7:5f:93:c9:68:f6:ec:9d:c6:8a:0a:
         6b:b4:2c:d6:72:ef:66:16:76:1c:34:90:d4:c0:50:d8:33:db:
         f9:c9:f0:a6:89:ea:9e:ac:a8:83:33:d6:b0:b7:49:36:24:71:
         56:d9:97:ea:3c:00:15:32:35:ef:74:db:8d:70:31:72:77:c5:
         47:06:5e:67:9f:16:8e:5f:cd:fa:67:0f:32:ac:c1:1f:4d:c8:
         da:35:f4:2b:36:8e:77:61:bf:0d:45:44:14:b5:08:94:ff:aa:
         1a:7f:5e:bc:c5:e5:51:b1:df:22:de:86:e3:cf:e5:98:30:ce:
         f3:d9:ea:b3:ce:18:56:a3:3f:5b:3c:58:1d:fb:f4:1a:e1:72:
         38:22:a1:e3:8b:d7:4b:b9:5b:b9:5b:1b:71:61:13:2c:9d:b4:
         25:18:27:04:b5:10:26:a1:a8:6d:48:9d:f6:d3:16:5a:98:67:
         1b:13:f9:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----