Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/UJxuI_1YcsB9GmZoimt1wnNq9S4.cer
File:                     UJxuI_1YcsB9GmZoimt1wnNq9S4.cer (raw, json)
Hash identifier:          zOJaM3ilLdHo8SmwY5+ACBsU5ezbmPYYGsAGCM5Vtb4=
Subject key identifier:   50:9C:6E:23:FD:58:72:C0:7D:1A:66:68:8A:6B:75:C2:73:6A:F5:2E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0185708A5F6A72B8AE176F80C00DE89C3664
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/d5/591f1a-e6e0-4866-8f7a-6b8bb701d30a/1/UJxuI_1YcsB9GmZoimt1wnNq9S4.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/d5/591f1a-e6e0-4866-8f7a-6b8bb701d30a/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 02 Jan 2023 03:33:14 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 146.19.37.0/24

Validation:               Failed, certificate revoked on Wed 22 Nov 2023 12:28:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:8a:5f:6a:72:b8:ae:17:6f:80:c0:0d:e8:9c:36:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 03:33:14 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=509c6e23fd5872c07d1a66688a6b75c2736af52e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:01:55:ba:b4:4b:d9:2e:bc:03:04:75:ed:e0:
                    6f:7a:0a:cf:fe:28:42:b6:e4:a0:8a:d5:5a:b9:41:
                    9e:3e:64:4c:47:81:b1:f4:b3:98:c0:a4:3e:ee:bc:
                    1c:82:dd:73:ae:05:26:fa:b1:c1:3f:55:8f:7e:d0:
                    18:a6:78:f5:f4:25:df:ef:62:d3:24:0a:50:6b:18:
                    4b:fd:fa:d7:e7:8e:bc:8d:c0:b5:34:36:f4:95:a6:
                    bb:3e:79:64:07:04:42:3e:5a:d9:ab:cc:d6:8f:86:
                    80:ec:24:03:c4:fc:64:47:67:40:91:61:ef:ea:1d:
                    9a:57:b2:31:ec:6e:b0:38:d6:a5:5b:9a:c1:61:58:
                    39:f2:b1:1c:db:cf:df:51:c8:ea:aa:59:6f:b5:89:
                    43:92:65:de:ca:05:5a:4b:b2:34:dd:f5:74:bd:2a:
                    07:8f:97:fe:53:f7:6a:42:c2:be:e9:7e:4d:fc:05:
                    a4:72:b4:a8:85:9d:b8:de:66:32:50:d6:5d:bb:1f:
                    1a:5a:51:ec:1b:9d:74:4f:e1:c0:97:56:39:db:11:
                    37:5a:f4:29:39:73:88:f3:1a:f2:11:af:60:cf:d9:
                    30:90:8b:31:71:8f:d6:2f:26:5a:b0:99:26:8b:7d:
                    56:60:ba:17:9f:1d:37:97:ef:b2:1d:7e:0c:84:d7:
                    5b:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:9C:6E:23:FD:58:72:C0:7D:1A:66:68:8A:6B:75:C2:73:6A:F5:2E
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/591f1a-e6e0-4866-8f7a-6b8bb701d30a/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/591f1a-e6e0-4866-8f7a-6b8bb701d30a/1/UJxuI_1YcsB9GmZoimt1wnNq9S4.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.19.37.0/24

    Signature Algorithm: sha256WithRSAEncryption
         63:8c:14:b6:34:c0:df:88:d0:e0:cf:f1:7d:71:96:04:fd:e8:
         3f:fc:9d:39:ee:88:12:95:e4:8c:ae:f2:5b:32:59:ec:86:de:
         fc:36:8a:aa:03:bf:5f:45:d4:ed:16:d4:b9:45:c6:64:d2:d6:
         9d:93:b0:61:aa:28:a3:29:43:8a:74:06:1c:29:c0:d6:51:dc:
         70:e5:44:da:32:0a:50:4d:5a:68:72:9b:4e:2c:78:40:3b:8b:
         61:39:07:95:ab:d8:e2:67:4b:1d:36:37:85:17:a5:c6:7c:e0:
         93:4a:50:29:e0:bd:d9:10:10:c1:71:b0:13:75:42:48:e6:a4:
         99:e2:19:79:b0:36:c5:ed:e8:f8:79:79:74:86:17:58:e3:db:
         5b:68:88:3b:c1:dc:50:7a:80:e1:56:c2:6d:55:d3:ac:56:d4:
         02:42:f8:62:46:fa:2b:43:b1:8c:ea:ec:27:46:b5:99:79:e3:
         39:1c:b7:b3:7a:20:96:c1:5b:39:5e:72:e6:67:b2:75:ea:8c:
         25:8b:c8:a8:af:bd:b0:2c:2f:b7:5a:d6:88:b3:6f:82:e7:61:
         f0:c8:23:1a:77:88:71:be:da:db:2d:44:3f:d5:4d:ec:46:a0:
         74:97:a5:f2:19:fa:e0:b0:f3:59:7e:06:ff:d4:f3:e8:00:1c:
         bf:82:52:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----