Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/WyYsmwPaXuvsCTQ2M2hjXRpNOok.cer
File:                     WyYsmwPaXuvsCTQ2M2hjXRpNOok.cer (raw, json)
Hash identifier:          cs95n/ZW94lJ2wnaP3NrQI7gYsq5DINlCM6jx1ojckc=
Subject key identifier:   5B:26:2C:9B:03:DA:5E:EB:EC:09:34:36:33:68:63:5D:1A:4D:3A:89
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018DACB9D761958F8C3ED20BF59B41AADFEF
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/01/8fd5b9-284a-47c2-956e-db8a731e502c/1/WyYsmwPaXuvsCTQ2M2hjXRpNOok.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/01/8fd5b9-284a-47c2-956e-db8a731e502c/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 15 Feb 2024 12:24:36 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    IP: 185.229.207.0/24

Validation:               Failed, certificate revoked on Mon 19 Feb 2024 11:15:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8d:ac:b9:d7:61:95:8f:8c:3e:d2:0b:f5:9b:41:aa:df:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Feb 15 12:24:36 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=5b262c9b03da5eebec0934363368635d1a4d3a89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:4a:25:3f:40:67:f4:05:68:82:98:d6:47:02:
                    9e:13:8d:8d:c6:29:34:e7:d7:86:35:1c:12:59:40:
                    0b:f0:f7:cd:46:a4:a4:f6:af:c1:37:7a:df:97:7b:
                    8f:92:8d:84:98:b6:ee:08:b4:34:e5:06:00:7d:c1:
                    71:06:67:e9:3d:7c:9e:a2:0f:03:1e:c6:38:64:2a:
                    d7:00:0c:38:43:b9:6b:85:2b:3d:fe:3e:6f:b0:54:
                    12:0f:f5:b1:a3:ee:81:c3:83:c1:54:6b:4a:f0:91:
                    45:db:20:bf:70:ea:ef:cb:91:95:be:79:01:07:25:
                    62:d9:d1:97:84:c9:3d:8b:b1:33:99:80:65:9d:de:
                    51:8a:e1:3e:9f:d6:41:88:44:91:5f:ad:ce:33:70:
                    a8:d8:0c:7a:37:13:e1:2d:49:c3:27:c7:3a:ca:22:
                    b5:2e:8f:77:66:ed:b0:6f:f0:4d:48:ed:84:b9:89:
                    0b:36:80:d9:50:9d:21:13:01:0d:8e:99:f6:08:9f:
                    72:d6:8b:84:1a:3f:18:62:68:2e:13:97:25:15:15:
                    e5:56:6f:62:25:79:1c:7f:5d:ad:53:84:12:85:34:
                    50:88:98:e3:66:d8:7d:0b:f1:a9:89:45:29:19:6f:
                    b8:a2:90:22:d6:6d:e5:68:07:19:e8:88:60:81:b6:
                    91:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:26:2C:9B:03:DA:5E:EB:EC:09:34:36:33:68:63:5D:1A:4D:3A:89
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/8fd5b9-284a-47c2-956e-db8a731e502c/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/8fd5b9-284a-47c2-956e-db8a731e502c/1/WyYsmwPaXuvsCTQ2M2hjXRpNOok.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.229.207.0/24

    Signature Algorithm: sha256WithRSAEncryption
         76:a7:69:ca:e9:e0:5e:c5:1a:d8:bf:5f:db:96:f3:14:4a:bf:
         3a:5a:fb:9b:41:21:d7:03:29:59:e7:47:ed:da:88:1e:84:26:
         15:e9:eb:69:a3:18:c2:8f:db:e3:91:37:33:f6:86:ba:fb:92:
         78:a9:04:7c:bb:9e:6a:0a:8b:94:25:de:9b:0a:92:d1:23:f4:
         ba:b6:b2:72:e8:90:e8:ee:a3:25:06:f4:e3:04:2d:02:4f:fa:
         90:47:31:b8:d2:f2:86:a1:38:81:9d:51:84:07:ca:44:a5:a3:
         d7:8e:00:31:a4:8e:91:c1:01:e7:80:d4:30:b7:04:00:e9:c6:
         94:58:9a:c8:49:6e:a2:24:0c:1e:1e:31:eb:1a:8f:aa:42:1d:
         95:e3:95:02:48:cf:5e:d1:72:bd:65:7e:69:52:96:b2:dd:30:
         9b:be:29:cb:3d:25:e9:be:23:05:c9:45:7d:92:4d:19:cc:c3:
         fe:8b:52:74:47:48:15:8f:bd:ee:40:1c:ad:9e:3c:0c:45:4d:
         3e:d5:8e:02:b5:5e:c0:46:78:78:a2:da:0c:e3:6d:a6:23:b8:
         cc:d5:65:7e:f5:34:c8:ac:fd:ef:23:44:7f:1b:22:c0:20:54:
         fc:aa:af:44:db:22:56:b7:a8:26:b1:86:84:25:0f:25:ca:04:
         ef:9f:7c:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----