Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bIaDiq4WvDaBgnFPy0-Or4fID88.cer
File:                     bIaDiq4WvDaBgnFPy0-Or4fID88.cer (raw, json)
Hash identifier:          T5GhmbnM3uhkMS0s6/EFRhRBsQdLWSmmGNMAlhP16Bs=
Subject key identifier:   6C:86:83:8A:AE:16:BC:36:81:82:71:4F:CB:4F:8E:AF:87:C8:0F:CF
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856BD0F706754BF7299BB51FE06965CE0D
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/3b/68536b-da89-4063-90da-104984df48b1/1/bIaDiq4WvDaBgnFPy0-Or4fID88.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/3b/68536b-da89-4063-90da-104984df48b1/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 05:32:14 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 195.60.171.0/24
                          IP: 2a12:2980::/29

Validation:               Failed, certificate revoked on Wed 06 Dec 2023 09:55:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6b:d0:f7:06:75:4b:f7:29:9b:b5:1f:e0:69:65:ce:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 05:32:14 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=6c86838aae16bc368182714fcb4f8eaf87c80fcf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:bc:20:74:bf:af:04:17:30:c5:db:ce:7d:41:
                    09:90:e4:f4:07:3d:b1:84:0b:13:f9:b8:ab:73:df:
                    ce:c9:6c:6d:9f:f3:d2:bb:8c:a8:c5:70:30:8c:ec:
                    e4:a5:37:5e:20:92:67:f2:8f:1b:d3:9d:12:37:60:
                    9d:b1:13:00:7b:2b:43:e1:f6:34:0a:69:72:3b:ad:
                    9c:75:95:8c:44:1c:4c:2a:07:98:ef:8e:ed:61:09:
                    80:0e:99:cd:97:61:41:09:be:ec:8a:8d:61:03:f3:
                    d3:f6:b6:b0:d0:79:72:d3:aa:5a:58:e0:d8:3f:55:
                    4e:ac:f0:25:73:da:b9:a1:15:a8:00:45:18:3e:d2:
                    8a:97:f5:bc:62:2c:10:26:fc:d8:7b:55:d3:a0:73:
                    79:45:33:a0:72:c6:67:d4:6c:37:c6:cf:12:c6:16:
                    ec:0e:c2:e4:ce:d2:21:aa:15:52:93:aa:73:56:15:
                    90:18:1a:02:5f:21:9b:d2:f4:9e:3e:d8:f7:28:75:
                    fd:ef:d4:30:bf:83:85:bb:87:fd:3f:83:e1:79:5a:
                    7e:87:4c:41:bc:94:70:f6:52:07:b8:ca:cf:37:a2:
                    8e:9e:1b:2a:32:d6:5d:f9:26:92:99:ab:28:d4:73:
                    0e:ac:a6:c2:7b:5f:4c:8c:da:63:86:44:36:52:e6:
                    49:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:86:83:8A:AE:16:BC:36:81:82:71:4F:CB:4F:8E:AF:87:C8:0F:CF
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/68536b-da89-4063-90da-104984df48b1/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/68536b-da89-4063-90da-104984df48b1/1/bIaDiq4WvDaBgnFPy0-Or4fID88.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.60.171.0/24
                IPv6:
                  2a12:2980::/29

    Signature Algorithm: sha256WithRSAEncryption
         67:ce:b4:58:b5:e7:00:ba:6d:3d:ab:1a:71:63:90:f8:1e:01:
         20:0d:32:ae:2d:25:f1:73:5c:cb:dd:ed:26:b7:3a:af:9d:41:
         00:c0:4b:f8:d9:48:9b:07:30:79:f2:ed:87:c9:61:fd:93:a4:
         de:cb:36:17:3b:16:b5:01:0a:bd:dc:cd:81:2d:28:b6:b1:56:
         c6:4d:37:d2:3e:3a:2b:86:f4:ad:51:73:d2:80:52:85:5c:e2:
         92:01:1f:aa:de:d6:60:1b:71:1f:f3:1b:4f:86:e1:15:16:e4:
         73:6e:83:2a:9f:0e:0c:f3:dc:bd:77:ed:29:97:9c:9c:0a:55:
         88:62:57:2c:e3:6f:83:e7:b2:d0:e3:bc:31:56:60:75:35:6e:
         af:99:35:64:31:af:a7:e9:b9:f2:36:a9:4f:78:66:70:42:2d:
         07:7d:0c:f0:d3:75:c1:51:47:8d:3d:9e:29:05:72:f2:af:c4:
         a6:9a:d2:6d:7b:1b:e0:4d:74:cd:18:13:f5:10:1b:e7:e4:3a:
         04:7a:1a:b8:00:7e:49:6c:8e:88:69:cd:a2:57:01:86:30:11:
         a1:e4:fa:a2:4d:14:55:af:6c:84:e5:8e:ef:75:5c:2e:d5:5a:
         6c:0c:39:cc:6b:07:d3:b4:ae:41:0a:66:2e:52:ac:4c:67:45:
         7e:b0:0d:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----