Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/U7fHcJ7WvcOilcc1WlA-uNYf0jI.cer
File:                     U7fHcJ7WvcOilcc1WlA-uNYf0jI.cer (raw, json)
Hash identifier:          eb0QJ9RPM3x+Wvc3KWq1hN04AnsEPlls2zqJ9W+w9LU=
Subject key identifier:   53:B7:C7:70:9E:D6:BD:C3:A2:95:C7:35:5A:50:3E:B8:D6:1F:D2:32
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018571D7209AC399AB5D8155CAC2C30000A0
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/26/d7aed8-4a41-4df1-ae87-ee370ac6190b/1/U7fHcJ7WvcOilcc1WlA-uNYf0jI.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/26/d7aed8-4a41-4df1-ae87-ee370ac6190b/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 02 Jan 2023 09:36:42 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 85.8.152.0/22

Validation:               Failed, certificate revoked on Wed 12 Jul 2023 13:14:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:71:d7:20:9a:c3:99:ab:5d:81:55:ca:c2:c3:00:00:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 09:36:42 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=53b7c7709ed6bdc3a295c7355a503eb8d61fd232
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:7c:f5:ac:b9:12:bc:8d:f7:74:0e:53:f5:78:
                    4d:be:ec:00:9b:26:f0:29:cf:8a:6e:4c:23:4c:97:
                    dd:37:02:ce:25:28:43:f0:f6:5d:9e:79:ed:fe:86:
                    7b:aa:63:96:a7:5a:51:6e:fd:91:f1:ce:4e:81:44:
                    a9:3d:61:f9:f1:fd:e3:95:42:e2:2d:60:84:06:d3:
                    fe:bc:6e:f2:82:c0:3c:4b:52:90:8b:55:2d:a0:cd:
                    4c:dc:6d:81:9b:9c:98:20:85:c9:2e:41:3e:0b:0c:
                    f3:02:61:36:42:9b:49:91:cb:dd:7a:ff:d8:40:23:
                    34:be:b0:51:e4:24:38:d5:4e:0d:29:ba:ed:9c:90:
                    82:7f:5e:49:53:cf:b3:4d:09:ca:26:1b:34:50:da:
                    d1:d7:41:c7:b0:f3:6b:f8:4c:57:41:b6:b1:ac:a3:
                    ed:db:b5:ab:32:92:b1:cf:4c:e2:4b:1b:b9:68:a0:
                    c5:0b:83:3c:0f:de:25:5d:cc:e8:50:fe:f2:db:b2:
                    83:ba:9d:f2:fe:fd:dc:b7:96:50:13:43:ef:de:41:
                    30:88:08:84:7d:c8:d4:36:cb:97:71:0b:5a:75:2e:
                    80:e1:0c:fa:48:06:34:6b:1b:ce:7b:f4:a8:f9:4c:
                    91:7e:8f:e8:a0:95:a9:d2:71:13:14:9e:87:f4:f5:
                    d1:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:B7:C7:70:9E:D6:BD:C3:A2:95:C7:35:5A:50:3E:B8:D6:1F:D2:32
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/d7aed8-4a41-4df1-ae87-ee370ac6190b/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/d7aed8-4a41-4df1-ae87-ee370ac6190b/1/U7fHcJ7WvcOilcc1WlA-uNYf0jI.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  85.8.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         13:ae:f7:f3:38:76:74:2d:fd:82:47:1b:cb:5f:4c:ee:99:b0:
         75:29:60:0b:ec:4f:ce:0b:20:9a:db:37:8f:9f:cc:69:76:2f:
         fb:d3:9c:1a:7d:fc:e9:fb:4e:4c:07:b0:9d:0a:8e:26:17:84:
         a9:7b:fd:51:5c:f9:8a:f9:94:41:54:a1:f0:a0:54:5d:b4:1c:
         f4:79:36:c2:22:24:d4:cd:cc:3e:5f:57:54:be:2d:55:e5:4e:
         1f:6c:31:5b:c8:a5:ad:48:1f:92:17:7f:0c:76:8a:95:28:bc:
         90:0c:31:c0:3e:bd:28:8a:37:f9:60:14:63:55:d2:fc:60:c0:
         a0:67:ee:9b:a6:55:4f:f2:7c:36:5a:f1:d7:94:41:67:81:bb:
         bc:e5:2c:8f:1f:b6:e0:a2:2b:e0:18:38:fc:49:68:a7:5e:ec:
         cb:d9:f9:55:eb:fc:67:2d:19:f6:3b:98:fc:29:e5:55:cb:ca:
         2a:b1:dc:04:ae:fc:c5:aa:2f:85:7a:b5:74:ed:8a:7b:c5:70:
         f4:07:92:81:78:b5:cd:f8:4f:92:14:7a:fc:ec:ab:f7:57:8d:
         e2:95:29:20:b9:b2:60:86:87:e7:b5:94:57:33:0e:b0:62:cf:
         da:e2:e9:d7:a9:2d:58:fc:cd:59:03:7d:d8:1e:0e:02:00:fc:
         8e:2f:f9:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----