Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/UX2W17D_dSA7mSSeN6VmyKW1HUo.cer
File:                     UX2W17D_dSA7mSSeN6VmyKW1HUo.cer (raw, json)
Hash identifier:          IdJvx2t1eFJGHeKLUcnCjuVMGLMdvFnUIaMSQoJ0NM4=
Subject key identifier:   51:7D:96:D7:B0:FF:75:20:3B:99:24:9E:37:A5:66:C8:A5:B5:1D:4A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0185724611AB81F583FB44419DE506E2C5BB
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/28/8ef679-5a0e-412e-bb04-3465ded52707/1/UX2W17D_dSA7mSSeN6VmyKW1HUo.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/28/8ef679-5a0e-412e-bb04-3465ded52707/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 02 Jan 2023 11:37:52 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 91.247.177.0/24

Validation:               Failed, certificate revoked on Fri 01 Dec 2023 14:43:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:72:46:11:ab:81:f5:83:fb:44:41:9d:e5:06:e2:c5:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 11:37:52 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=517d96d7b0ff75203b99249e37a566c8a5b51d4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:26:5a:9f:a9:f8:25:ef:cc:0e:42:f1:49:45:
                    59:78:f8:ec:10:8b:10:ea:47:af:c1:ac:4c:57:5f:
                    22:44:1f:66:11:a2:ab:af:7b:2d:7a:27:f6:11:df:
                    2f:ee:6e:ed:04:73:62:23:33:0c:a7:59:4a:6a:ce:
                    b4:31:6e:2c:39:d5:37:90:44:c0:27:36:e5:ef:3b:
                    95:7a:13:bf:d5:d2:f1:d4:fa:e6:f6:5e:e0:3b:47:
                    bf:ae:09:02:6c:11:67:b7:37:56:8c:d8:fa:57:5e:
                    2d:0d:cf:aa:54:ae:03:fd:87:05:12:3f:54:9e:d3:
                    e4:fb:32:50:7c:00:99:5e:19:ac:74:45:fc:71:63:
                    e1:aa:e5:b3:d8:1f:12:bd:87:b2:2d:56:15:8c:2c:
                    62:4a:55:43:73:a9:ca:77:12:e6:4f:61:72:d3:0b:
                    98:7a:cf:75:c4:44:2a:7e:19:43:f5:8c:66:12:8f:
                    26:89:57:24:14:61:72:f6:cb:c4:97:eb:a3:40:ac:
                    57:bd:86:9c:2c:06:ae:93:b1:1b:91:27:2a:5b:7f:
                    1a:53:d9:f2:4c:e5:b4:91:e2:ad:19:9b:05:d9:47:
                    1b:1f:8a:9e:02:62:4e:0b:88:ce:f6:c0:58:85:d8:
                    f4:4c:ca:31:9b:68:8f:a3:9c:ce:99:c5:74:18:0d:
                    33:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:7D:96:D7:B0:FF:75:20:3B:99:24:9E:37:A5:66:C8:A5:B5:1D:4A
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/8ef679-5a0e-412e-bb04-3465ded52707/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/8ef679-5a0e-412e-bb04-3465ded52707/1/UX2W17D_dSA7mSSeN6VmyKW1HUo.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.247.177.0/24

    Signature Algorithm: sha256WithRSAEncryption
         02:a7:aa:56:a6:d9:4e:cc:00:1f:df:a6:25:75:f5:b0:3d:b6:
         33:9f:80:e2:cf:d3:16:e1:6e:88:a2:f2:0a:74:cf:c2:1d:15:
         70:c1:cf:4d:97:4b:81:56:ed:5e:41:93:0a:5d:85:bc:7c:51:
         ae:6d:31:ff:f7:f7:93:df:bc:1e:08:6c:9f:c4:3d:a8:6b:4f:
         45:a8:18:80:30:bf:d2:40:04:46:b6:02:ea:00:b3:b8:06:ea:
         9f:c2:e5:5b:dc:46:37:1d:19:ec:89:67:b6:b8:4f:11:a5:b7:
         df:c1:39:69:a2:af:4b:25:dd:3e:c9:94:28:11:be:5f:e5:39:
         9f:4b:06:a3:fa:f3:44:89:69:8d:61:9c:f1:95:03:b0:bd:1d:
         d4:48:0a:1b:62:b5:9a:bd:3b:d7:4b:d1:23:23:4e:67:b9:75:
         3e:5e:8a:2a:c3:a7:c2:f7:f9:05:25:3a:80:f2:52:6c:f1:d2:
         40:d7:31:d4:d6:d3:a5:7b:3c:5b:14:d4:22:68:bd:29:2e:7a:
         22:a5:d5:e7:33:d7:2f:dc:4f:f9:8c:e4:8c:76:7b:4f:6d:6f:
         7b:c4:76:24:ae:d5:8d:b5:65:3a:89:19:be:c5:86:0d:17:42:
         f9:02:56:33:32:e0:4c:44:1b:e5:80:ac:5a:7c:4f:9f:39:73:
         63:c7:52:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----