Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/UwqAz229B0jtEX1W3lM8w3_RcZ8.cer
File:                     UwqAz229B0jtEX1W3lM8w3_RcZ8.cer (raw, json)
Hash identifier:          K087gPKAOiNQMXqM85JnhMtlQJMgyqNegSP8tqEhDPU=
Subject key identifier:   53:0A:80:CF:6D:BD:07:48:ED:11:7D:56:DE:53:3C:C3:7F:D1:71:9F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018570FAE4D94CE40610757A4DE8FA86AF14
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/17/d096ee-cb19-47af-b0fe-08cae50f0060/1/UwqAz229B0jtEX1W3lM8w3_RcZ8.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/17/d096ee-cb19-47af-b0fe-08cae50f0060/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 02 Jan 2023 05:36:08 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 146.19.13.0/24

Validation:               Failed, certificate revoked on Fri 08 Dec 2023 11:19:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:fa:e4:d9:4c:e4:06:10:75:7a:4d:e8:fa:86:af:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 05:36:08 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=530a80cf6dbd0748ed117d56de533cc37fd1719f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:ed:d9:fa:37:16:2c:9d:75:27:13:c4:c8:4c:
                    6c:ad:b2:cd:62:17:bb:7c:20:c9:7e:77:ea:0d:ad:
                    ac:0f:d3:10:60:83:1a:7b:d3:8b:c0:fa:ed:95:81:
                    32:35:f2:ad:fd:d1:83:b5:f2:3a:8d:b6:6a:af:58:
                    dd:55:74:68:06:ce:ae:d6:50:9d:26:14:28:bd:50:
                    d9:2a:78:0c:ea:b4:8b:0f:1e:53:92:c1:a4:65:3e:
                    6c:c2:63:2e:0e:ae:19:b7:1b:9c:22:56:6a:e9:22:
                    8e:75:0b:d5:75:6a:aa:63:0f:6c:d8:0a:76:2c:f7:
                    18:31:20:90:cb:86:14:33:19:27:d0:17:6d:cb:9b:
                    f8:84:19:02:62:d4:f0:17:ce:ce:4b:8a:bb:26:8e:
                    3d:be:06:15:f4:ed:42:28:24:69:4d:58:bf:77:be:
                    ea:2a:e8:dd:9d:88:cb:da:31:df:0b:ca:0c:7e:81:
                    fd:a6:44:86:56:bb:6b:ce:56:13:4a:92:2d:99:13:
                    36:c9:9d:09:ed:87:d1:a5:c5:40:4e:93:c0:55:f5:
                    3b:76:be:27:c4:ff:b3:f9:74:84:22:2d:9f:db:c7:
                    09:6a:1c:b3:47:b6:80:5f:8c:65:27:66:0d:53:ef:
                    41:12:ad:4b:a1:44:9a:b5:35:99:4d:3f:20:21:fa:
                    3f:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:0A:80:CF:6D:BD:07:48:ED:11:7D:56:DE:53:3C:C3:7F:D1:71:9F
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/d096ee-cb19-47af-b0fe-08cae50f0060/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/d096ee-cb19-47af-b0fe-08cae50f0060/1/UwqAz229B0jtEX1W3lM8w3_RcZ8.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.19.13.0/24

    Signature Algorithm: sha256WithRSAEncryption
         30:7c:57:12:9b:4e:cc:46:73:90:74:8b:dc:ac:a3:be:c3:39:
         57:db:f8:14:fc:d0:50:42:00:11:da:b5:4f:26:8c:1f:0a:ff:
         45:63:dd:39:bd:d1:e6:d3:2a:42:96:f9:5b:06:0d:58:ed:df:
         ef:19:2e:4f:0c:c8:5d:98:3b:13:c0:e2:66:dd:33:53:a1:e5:
         b5:86:d6:1e:b5:1e:14:b1:0a:0d:16:68:44:64:68:b2:7d:6b:
         49:d9:09:e4:52:8c:96:2a:c4:2e:79:47:45:6f:e5:42:bb:5b:
         f5:5e:18:b7:ef:31:9f:b7:2a:f3:d3:fa:cc:1a:2b:f6:24:ed:
         3f:b6:66:4f:39:6e:31:7d:9f:ab:5b:44:af:ef:c2:de:07:58:
         e1:24:1d:9f:1f:fd:c1:ab:43:46:5c:50:ba:ca:8d:e5:c6:02:
         f2:4d:41:1c:3d:d6:fe:fe:0c:8a:0c:07:58:ec:2c:4e:2d:c5:
         7d:2c:61:36:61:4e:45:b7:e0:e1:72:b7:39:8a:02:e2:9a:b1:
         55:14:c0:74:68:f2:5c:58:97:e2:bd:ea:f7:bf:9c:3e:83:09:
         34:39:1d:e9:d5:f1:53:a4:30:73:4e:20:be:fb:3c:5e:59:88:
         03:37:55:d1:35:a1:ce:6d:9a:b9:95:65:e9:16:ff:8f:27:6a:
         41:62:3c:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----