Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/YXvJI40zq4-t50cDJc6Ck3c6a40.cer
File:                     YXvJI40zq4-t50cDJc6Ck3c6a40.cer (raw, json)
Hash identifier:          OhrkHQmZN/AcT6vfgE5gMKLi6boMf/0pqhlcfOoyReo=
Subject key identifier:   61:7B:C9:23:8D:33:AB:8F:AD:E7:47:03:25:CE:82:93:77:3A:6B:8D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01884E90AC2BE1F10A448B606EF1CC791271
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/e0/e894c0-e4bc-4b76-97fd-8ad49f2d7d33/1/YXvJI40zq4-t50cDJc6Ck3c6a40.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/e0/e894c0-e4bc-4b76-97fd-8ad49f2d7d33/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 24 May 2023 16:21:24 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 185.212.114.0/24

Validation:               Failed, certificate revoked on Mon 18 Dec 2023 11:09:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:4e:90:ac:2b:e1:f1:0a:44:8b:60:6e:f1:cc:79:12:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: May 24 16:21:24 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=617bc9238d33ab8fade7470325ce8293773a6b8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:a1:d9:23:b0:89:ee:63:65:fa:f7:f7:82:ed:
                    03:30:48:d9:a3:02:4b:c6:15:18:66:69:86:ef:1b:
                    3d:ee:1a:d1:9d:3b:dd:ac:70:0b:70:52:14:96:e1:
                    61:a8:d9:6b:90:1b:f5:d1:8a:1d:9e:50:17:9c:1a:
                    5d:d2:57:b8:e1:da:14:34:2f:b2:52:15:e8:f8:87:
                    00:fc:05:8e:c5:13:d2:35:cd:d1:76:c7:b7:af:f9:
                    3b:33:2c:26:88:7c:44:2c:59:c9:4e:81:5d:63:68:
                    54:6e:32:59:8b:73:c9:79:b5:d2:fc:6f:75:a1:e3:
                    34:7a:2a:3f:e7:51:18:11:70:c4:1c:77:de:10:cf:
                    fe:03:ee:2b:f9:46:0f:3d:df:e2:f5:5e:f9:29:1a:
                    d3:56:a5:85:fc:06:c5:8d:b0:ea:3b:e2:c9:df:11:
                    ad:ab:d2:06:62:7f:6a:46:55:09:2d:ff:b7:b2:91:
                    cc:26:c1:5e:e6:8f:d4:32:ac:a6:88:45:df:8f:62:
                    39:9c:09:ba:79:ab:de:c7:8d:2c:fe:b0:7e:36:e4:
                    79:8f:22:a1:df:c4:e4:bd:50:5b:c9:7d:51:bb:f8:
                    43:91:09:6e:a8:97:4b:e8:cf:6b:91:6d:92:5d:62:
                    eb:ed:74:45:86:26:fb:dd:14:89:b0:92:23:81:db:
                    87:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:7B:C9:23:8D:33:AB:8F:AD:E7:47:03:25:CE:82:93:77:3A:6B:8D
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/e894c0-e4bc-4b76-97fd-8ad49f2d7d33/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/e894c0-e4bc-4b76-97fd-8ad49f2d7d33/1/YXvJI40zq4-t50cDJc6Ck3c6a40.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.212.114.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4e:3a:32:d7:e3:59:cc:fc:bf:5a:1a:db:df:2b:f1:1f:70:a9:
         b2:1d:0a:5a:f5:5e:f1:83:03:fe:29:aa:53:fc:85:89:56:dc:
         72:dc:19:89:30:a3:ed:31:54:eb:ee:42:85:47:b1:b2:45:92:
         46:d9:5c:f5:32:f4:23:86:1d:ca:1b:1b:48:67:d2:c3:74:74:
         96:5a:8e:a3:f9:c0:4e:c9:dc:95:98:c3:80:14:70:12:b6:15:
         a2:9c:e4:30:b8:03:36:46:f2:1b:3d:fa:c6:44:e2:c8:a6:aa:
         11:c7:01:25:96:d6:96:ac:86:e7:bb:aa:af:2f:66:12:e1:23:
         ad:2f:a6:e4:0f:cf:7c:9b:17:7e:61:b4:96:5c:db:f0:76:55:
         0e:79:b1:b7:20:1f:b5:47:a2:70:7c:c1:81:61:60:db:a9:fc:
         0c:57:dd:75:a8:52:a0:6c:fc:ca:23:4f:be:a3:15:9c:4c:bb:
         cf:e2:07:c9:9f:d5:2e:a2:55:cc:49:89:37:40:a0:0b:1c:f8:
         f7:e5:b9:91:0d:a0:2f:ec:97:36:e9:d3:67:35:c3:63:4c:59:
         a9:e0:ea:9c:91:ca:10:5b:6b:f6:27:e3:29:56:1a:40:90:6c:
         8b:2e:09:1a:e3:20:c7:be:0b:c6:31:6c:e8:d4:53:c5:35:42:
         50:25:bf:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----