Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Td-dR4MTNclxDcsaCvfTBLJwDn8.cer
File:                     Td-dR4MTNclxDcsaCvfTBLJwDn8.cer (raw, json)
Hash identifier:          MpHiZjo8or1sKFLmpP5Q45Rauj3260bb9DEradA+oHA=
Subject key identifier:   4D:DF:9D:47:83:13:35:C9:71:0D:CB:1A:0A:F7:D3:04:B2:70:0E:7F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01887D30F8B1520B78BAF01637845878087B
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rsync.paas.rpki.ripe.net/repository/47ade1b3-32d2-4e7d-a914-d7aaa438e0c9/0/4DDF9D47831335C9710DCB1A0AF7D304B2700E7F.mft
caRepository:             rsync://rsync.paas.rpki.ripe.net/repository/47ade1b3-32d2-4e7d-a914-d7aaa438e0c9/0/
Notify URL:               https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before:   Fri 02 Jun 2023 17:39:01 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 146.19.38.0/24

Validation:               Failed, certificate revoked on Mon 11 Dec 2023 13:54:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:7d:30:f8:b1:52:0b:78:ba:f0:16:37:84:58:78:08:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jun  2 17:39:01 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=4ddf9d47831335c9710dcb1a0af7d304b2700e7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:81:63:93:db:e4:50:fd:df:ec:fc:57:46:93:
                    f6:65:a5:98:0a:31:43:2a:b8:2b:95:f2:20:00:c3:
                    ea:d1:4c:78:80:a0:32:1b:d1:27:60:d6:99:2a:7a:
                    13:11:ca:32:08:51:7e:12:bc:55:f8:b7:60:be:b9:
                    45:df:29:6b:e3:0d:40:98:d2:dd:ff:43:48:73:cc:
                    cb:60:f3:e3:cd:7f:a7:d7:ae:72:1e:e9:a6:29:15:
                    46:8c:3d:02:ba:77:57:54:26:e3:74:de:68:f2:ca:
                    5b:0c:eb:a4:19:6a:b8:93:77:b8:36:85:75:22:cc:
                    8f:a9:1c:c3:b5:ff:1f:08:c1:15:c0:00:23:44:2d:
                    26:cf:69:b0:1f:a8:07:0a:52:73:48:6c:c9:a7:19:
                    9c:8c:f2:13:cf:13:ec:02:bc:4c:49:c8:6d:11:a0:
                    73:26:f6:16:72:d8:a2:cb:d2:71:80:af:27:89:2b:
                    26:fe:f3:73:eb:05:2c:70:5f:a8:05:83:7f:d7:a6:
                    9f:f6:59:79:6a:fe:f6:e0:73:44:c9:5f:1b:68:5f:
                    67:b1:6e:99:01:11:56:61:78:56:ad:9f:5d:be:71:
                    77:3f:ea:2f:36:91:f2:10:a9:f5:5a:b4:f3:c2:fd:
                    04:8c:ad:03:83:e7:f8:c7:16:9d:fc:20:82:ff:4a:
                    02:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:DF:9D:47:83:13:35:C9:71:0D:CB:1A:0A:F7:D3:04:B2:70:0E:7F
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/47ade1b3-32d2-4e7d-a914-d7aaa438e0c9/0/
                RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/47ade1b3-32d2-4e7d-a914-d7aaa438e0c9/0/4DDF9D47831335C9710DCB1A0AF7D304B2700E7F.mft
                RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.19.38.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a7:fe:76:fe:31:29:39:c7:45:1e:ed:ff:3c:76:03:f7:74:5c:
         c3:59:6e:40:07:c8:8e:07:a7:ab:68:9f:1b:15:40:84:fc:e0:
         50:00:25:94:fd:53:45:29:cb:02:83:d8:12:e5:58:f5:0f:6f:
         8d:51:01:da:62:46:bf:72:04:35:25:14:78:87:15:fb:00:d1:
         09:3b:1a:40:0c:3d:01:7b:4b:82:4f:a0:93:24:f6:64:ee:f5:
         1f:bc:65:0a:8a:12:a1:a6:e6:eb:8b:47:ed:bd:13:80:61:34:
         56:99:16:0a:bd:aa:b4:ef:e9:31:bc:6e:c1:d2:bd:ce:96:ac:
         8f:30:c3:c6:40:ed:8e:9f:3c:3f:f8:b8:f5:ab:aa:da:bf:07:
         61:a1:c0:b2:a4:4d:0b:98:d4:5b:89:07:da:17:1a:ed:0f:dc:
         40:a2:8d:6e:49:72:da:dd:dc:e3:80:af:95:bc:68:5f:0e:f5:
         54:74:da:94:4f:6c:d8:e0:1a:ee:3a:5c:b5:5a:93:50:24:f9:
         0c:0b:e0:c3:92:f7:f0:f7:f9:1e:c0:d9:a3:2b:4d:e5:96:9c:
         45:73:b3:25:f6:57:93:72:80:8f:ed:59:4d:45:89:f1:88:2f:
         0f:00:f6:29:70:bc:15:29:c7:03:ae:13:45:57:60:7f:2b:e8:
         bf:5c:46:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----