Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9ARAEB_VT8PsTG-crMuSYEjfvw.cer
File:                     d9ARAEB_VT8PsTG-crMuSYEjfvw.cer (raw, json)
Hash identifier:          rqywtdB3e/vtnXxXR55/bNdTLhGe/Zv19pT5UWuZtEc=
Subject key identifier:   77:D0:11:00:40:7F:55:3F:0F:B1:31:BE:72:B3:2E:49:81:23:7E:FC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01905E92B0F6413E93CF5986F9BF88246EDC
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/ab/dfb03e-cb87-4ba4-8836-2f13abdd205f/1/d9ARAEB_VT8PsTG-crMuSYEjfvw.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/ab/dfb03e-cb87-4ba4-8836-2f13abdd205f/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 28 Jun 2024 11:19:50 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    IP: 2a0c:6200::/29

Validation:               Failed, certificate revoked on Mon 01 Jul 2024 07:19:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:5e:92:b0:f6:41:3e:93:cf:59:86:f9:bf:88:24:6e:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jun 28 11:19:50 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=77d01100407f553f0fb131be72b32e4981237efc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:58:10:f0:d6:93:ee:12:1f:be:9d:69:52:ee:
                    5d:22:ac:11:ab:e4:63:61:01:f3:4f:9d:ad:a5:25:
                    39:3b:c1:1a:cc:49:36:1c:e9:c7:4e:32:76:52:f9:
                    bc:6b:c4:24:f8:14:88:aa:9b:f7:56:1a:63:80:7a:
                    d9:e1:5d:b6:f4:0b:2c:20:1f:58:8a:3a:48:c2:0a:
                    29:ea:1e:eb:91:f8:ff:7b:8a:81:24:8a:68:31:de:
                    31:be:54:a9:6a:3d:99:0d:a0:8b:de:ea:ea:f7:92:
                    a7:dc:f6:b6:79:b8:a1:c6:43:c6:bb:74:9e:96:9e:
                    3e:9a:f9:05:48:35:e5:09:71:6e:9b:ef:fe:a4:58:
                    cd:86:ae:a2:87:62:38:b3:d8:96:d3:15:9b:4b:3c:
                    25:8a:0c:a1:4e:7e:00:59:4b:a7:da:1d:30:ed:d8:
                    bf:0d:e6:22:c5:e5:33:49:5f:cb:2d:c9:09:6e:1c:
                    59:00:2b:1b:5a:13:c1:89:2c:a0:14:11:b9:3b:ba:
                    10:3d:8d:bb:af:93:2b:78:9b:86:75:cc:4b:d5:0c:
                    ab:fc:23:e7:30:64:2d:0d:4e:26:c0:53:fd:e8:2d:
                    0b:c2:4a:51:5c:93:37:ca:b1:96:bd:f8:1c:0f:87:
                    7c:a5:b3:f9:63:48:d6:57:fd:26:f0:0b:6b:02:b1:
                    15:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:D0:11:00:40:7F:55:3F:0F:B1:31:BE:72:B3:2E:49:81:23:7E:FC
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/dfb03e-cb87-4ba4-8836-2f13abdd205f/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/dfb03e-cb87-4ba4-8836-2f13abdd205f/1/d9ARAEB_VT8PsTG-crMuSYEjfvw.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0c:6200::/29

    Signature Algorithm: sha256WithRSAEncryption
         3d:90:ab:82:b8:2a:de:97:d9:e6:b9:85:2c:4a:7f:99:7c:c8:
         de:70:9e:35:a1:3d:47:65:6d:12:f1:50:fb:57:49:81:92:39:
         09:9f:76:22:75:07:df:4f:5e:c8:c6:e2:45:ac:bc:a0:5d:3f:
         07:e2:26:a4:02:f4:13:81:e3:f3:c4:88:8c:2f:8e:db:09:ef:
         25:0e:73:2f:f6:85:d6:bb:ae:83:ee:c9:c4:7a:b4:f5:f8:4b:
         b1:ad:08:05:60:b8:8c:d3:90:a3:60:c8:ce:ac:8d:bd:6d:2f:
         f1:01:98:6d:19:56:08:33:68:c9:b5:86:f8:98:d6:f5:3d:fb:
         b0:4f:b1:1e:a7:c1:00:f7:2b:ae:ab:13:9a:b2:a0:5a:2f:5a:
         6b:e4:0c:4d:12:d2:6f:ef:5f:b5:85:a9:fa:c5:67:a6:fd:dd:
         ad:5f:7a:3c:4f:33:30:8e:35:cf:00:3b:a3:f2:56:5e:da:be:
         b0:8d:21:48:18:dd:d6:f4:5d:2c:ff:09:6a:11:5c:00:aa:89:
         03:ae:4f:ab:3e:94:dc:c3:77:f6:bf:bf:bb:c0:f3:17:6b:cf:
         4e:72:63:6d:57:99:61:de:b8:ac:c4:03:f1:92:ce:ee:96:24:
         02:d3:34:74:0a:e8:7b:e3:11:ec:4b:be:19:2c:7c:90:bf:32:
         93:e0:a6:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----