Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/frBaLRQ9j59N-uJSc9pjHVb_pBQ.cer
File:                     frBaLRQ9j59N-uJSc9pjHVb_pBQ.cer (raw, json)
Hash identifier:          Z3Fn9nZhoutESCPS26KUgRmRl63da1SJJKZfhSpzxOI=
Subject key identifier:   7E:B0:5A:2D:14:3D:8F:9F:4D:FA:E2:52:73:DA:63:1D:56:FF:A4:14
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0188D48428DFA253F373284D07EC4FB8F7ED
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/47/c40fdf-a18f-4200-9150-32827cc88449/1/frBaLRQ9j59N-uJSc9pjHVb_pBQ.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/47/c40fdf-a18f-4200-9150-32827cc88449/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 19 Jun 2023 16:36:51 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 194.26.211.0/24

Validation:               Failed, certificate revoked on Thu 21 Dec 2023 14:33:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:d4:84:28:df:a2:53:f3:73:28:4d:07:ec:4f:b8:f7:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jun 19 16:36:51 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=7eb05a2d143d8f9f4dfae25273da631d56ffa414
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:a5:0c:cc:f8:04:f3:46:6b:04:22:12:96:fb:
                    d9:c4:89:ee:87:f4:4f:b5:ae:66:56:36:5c:eb:d0:
                    ea:7b:75:6c:e4:2c:91:4d:b7:3a:1e:dc:0e:95:e3:
                    a6:54:6d:5e:82:89:c1:f9:74:57:3b:90:74:62:d2:
                    55:af:f6:f7:71:22:57:c5:87:32:28:55:16:5f:03:
                    74:dd:cb:c4:34:29:3b:df:bd:79:47:6a:14:27:7d:
                    f6:0d:fb:ba:de:40:ce:d4:75:19:b1:bf:c3:67:2f:
                    04:a1:48:36:3c:64:0f:88:9f:b6:cf:08:b2:a6:b5:
                    24:a1:55:c6:f5:a3:f2:8b:f5:98:fc:b6:f8:63:90:
                    1c:3c:f3:58:8a:15:23:22:3f:cc:02:d8:e1:d5:e3:
                    a3:bd:e9:0f:c4:d2:df:63:89:c4:8c:39:2f:b9:96:
                    ae:58:24:44:54:cf:65:38:6c:59:cd:26:44:76:12:
                    0a:38:83:a5:f2:e8:92:b7:e5:6a:9c:a9:da:4b:d3:
                    17:a3:a0:a1:ec:b7:a4:93:0f:23:1a:9d:72:13:48:
                    59:68:08:38:ee:4f:37:41:75:a3:41:7c:3a:69:a4:
                    e0:69:8e:ee:96:a4:34:5f:4e:e9:1c:91:cc:e8:e2:
                    5f:9f:de:2f:88:b1:05:d5:98:e4:30:df:74:bd:90:
                    76:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:B0:5A:2D:14:3D:8F:9F:4D:FA:E2:52:73:DA:63:1D:56:FF:A4:14
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/c40fdf-a18f-4200-9150-32827cc88449/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/c40fdf-a18f-4200-9150-32827cc88449/1/frBaLRQ9j59N-uJSc9pjHVb_pBQ.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.26.211.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:49:0f:a5:a5:8f:66:32:c3:d1:f2:25:38:70:10:73:a7:aa:
         78:20:aa:d3:16:69:a6:07:be:1b:5b:88:b7:5b:bc:bb:e0:bb:
         12:67:ea:3b:f1:79:45:db:e0:57:0d:4c:54:a3:ac:b8:92:4b:
         d9:82:6c:db:a5:5a:1b:dc:33:12:a3:5a:ad:35:5d:c8:90:8d:
         5f:ca:30:0e:2c:6a:6a:73:34:38:d2:0f:0f:4b:49:9b:7f:92:
         e0:8d:26:05:6c:e7:b2:76:ed:30:d0:cc:d3:bc:e7:96:1b:3e:
         79:5c:95:a1:7a:8b:a5:4c:f6:a8:ed:f1:c9:9d:ad:b3:f6:e6:
         3e:05:d3:ed:eb:f2:4c:da:c8:17:d1:09:3a:0c:b2:6c:ea:2c:
         06:93:51:1e:6b:7e:85:e8:77:bd:98:62:21:ed:b3:04:19:60:
         2c:aa:f2:9d:38:e9:41:0d:60:10:4a:e7:ce:84:cf:0f:5d:39:
         b1:79:4c:af:98:41:a5:2a:9a:72:4c:93:c7:ae:17:b3:3c:26:
         c4:8e:ee:c8:be:50:87:60:54:77:25:88:8e:cc:52:6d:6b:31:
         5e:cd:0c:64:e5:f5:f7:92:e9:32:48:24:53:ec:ca:df:33:7b:
         c7:95:6b:03:33:fb:ad:a6:3f:f4:13:53:bd:99:1a:33:75:e8:
         cb:a5:d6:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----