Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bU_HElxDUIksBN6JpnPeEYyKTpE.cer
File:                     bU_HElxDUIksBN6JpnPeEYyKTpE.cer (raw, json)
Hash identifier:          jxU23hqxnAJgDAg9PNhk1OlCQILq9ramaXZvJV2CLZQ=
Subject key identifier:   6D:4F:C7:12:5C:43:50:89:2C:04:DE:89:A6:73:DE:11:8C:8A:4E:91
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018708E23D31EE14EE97607F8CE872D12158
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/a2/4d2d90-04bb-44dd-ab1b-2a9db942adb7/1/bU_HElxDUIksBN6JpnPeEYyKTpE.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/a2/4d2d90-04bb-44dd-ab1b-2a9db942adb7/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 22 Mar 2023 10:34:17 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 193.38.244.0/24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:08:e2:3d:31:ee:14:ee:97:60:7f:8c:e8:72:d1:21:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Mar 22 10:34:17 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=6d4fc7125c4350892c04de89a673de118c8a4e91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:48:d7:0f:48:a3:91:40:e3:12:e4:22:9c:ae:
                    80:22:95:63:97:ac:53:3c:47:1d:cf:b7:83:42:f2:
                    82:ce:94:f4:c7:d0:57:ed:a3:65:2b:77:43:29:b3:
                    e1:0b:97:db:e8:e7:17:bd:52:b0:8c:53:39:14:59:
                    cc:19:24:e9:41:ca:51:4d:da:d1:ac:ac:34:51:de:
                    fe:e5:d5:a6:8a:1f:52:fc:3d:63:74:69:90:6b:8c:
                    92:c8:dd:f3:8a:64:1b:9b:30:cb:d8:22:81:13:13:
                    95:87:70:7d:60:0c:9c:dd:4e:cf:01:c7:e5:9b:83:
                    49:04:31:e8:92:c6:a4:38:b2:1a:89:4b:04:f7:ea:
                    05:21:50:ff:b9:96:bf:97:bc:aa:b5:43:cb:6e:85:
                    54:41:24:fb:5c:b5:a6:cf:0c:8f:18:5c:c8:09:9a:
                    28:41:4c:25:16:32:71:b3:cd:92:18:05:15:b8:5d:
                    d0:a6:9f:fb:7a:3b:54:48:30:bb:ca:dc:fa:f4:89:
                    f9:a7:f5:b9:4e:38:8e:71:6e:16:db:5f:6e:f6:18:
                    d3:e4:f9:c4:5f:19:f1:fc:ee:f4:e5:7a:cb:95:92:
                    2c:04:d4:10:e8:a4:99:e4:36:d3:92:d2:22:55:4b:
                    b1:24:5c:db:fe:79:ab:96:3b:83:3c:b4:dc:c7:1a:
                    38:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:4F:C7:12:5C:43:50:89:2C:04:DE:89:A6:73:DE:11:8C:8A:4E:91
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/4d2d90-04bb-44dd-ab1b-2a9db942adb7/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/4d2d90-04bb-44dd-ab1b-2a9db942adb7/1/bU_HElxDUIksBN6JpnPeEYyKTpE.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.38.244.0/24

    Signature Algorithm: sha256WithRSAEncryption
         17:09:45:fe:e2:bf:64:f3:88:91:5d:01:42:44:9a:1e:1e:d1:
         40:d2:58:43:0c:71:31:72:73:f7:ec:63:fa:f6:68:dd:70:77:
         cf:e1:4d:59:5d:2e:d8:cb:ed:65:de:50:76:07:c1:b9:61:96:
         31:35:f6:83:1e:29:cf:78:6c:5a:2f:28:e4:ec:94:98:94:57:
         eb:2c:75:fa:70:b4:2a:74:94:94:a2:a4:f9:08:9f:d5:56:b7:
         43:b6:e8:34:f8:52:5e:b3:e1:b0:ec:d6:6c:4a:bb:3b:74:69:
         59:fb:9d:58:23:65:51:13:aa:51:f3:2f:08:1a:f9:6e:b1:b8:
         e0:17:d1:b5:48:c0:9d:64:12:5a:a8:b3:6a:2d:aa:7a:fd:73:
         18:af:09:94:7b:2c:74:a4:16:a7:42:de:bd:cd:dd:3a:4a:ac:
         31:bc:26:46:c6:b3:0a:6d:ab:5c:89:14:8e:8f:3d:f1:7e:69:
         cc:98:82:f5:bb:a2:83:86:0c:e2:58:4e:54:8d:79:3e:87:c6:
         f7:e5:28:8e:1e:4f:e1:cb:2d:cb:db:c2:0c:23:42:23:1d:37:
         eb:30:0b:f6:bf:36:d6:d8:63:58:54:26:4d:2f:f6:63:66:81:
         59:16:70:c8:c3:3e:cc:54:e1:77:a6:eb:fe:c1:e3:74:9b:9d:
         13:20:52:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----