Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fyySp59i_LkZ55WrXeMT9L2nHd8.cer
File:                     fyySp59i_LkZ55WrXeMT9L2nHd8.cer (raw, json)
Hash identifier:          2hk0zVIlXJZNRVbkLDGMPOFkshU2ngiDUGUSMimo8rg=
Subject key identifier:   7F:2C:92:A7:9F:62:FC:B9:19:E7:95:AB:5D:E3:13:F4:BD:A7:1D:DF
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018708E23D599B3AD97856BD9CD90637C221
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/56/ffb906-676e-4e0a-82f6-11f83d70c898/1/fyySp59i_LkZ55WrXeMT9L2nHd8.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/56/ffb906-676e-4e0a-82f6-11f83d70c898/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 22 Mar 2023 10:34:17 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 193.34.81.0/24

Validation:               Failed, certificate revoked on Fri 23 Jun 2023 09:16:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:08:e2:3d:59:9b:3a:d9:78:56:bd:9c:d9:06:37:c2:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Mar 22 10:34:17 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=7f2c92a79f62fcb919e795ab5de313f4bda71ddf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:27:7f:21:85:e9:63:34:07:3b:cf:33:f1:67:
                    f6:09:9d:d3:fe:29:c4:68:36:0b:49:02:17:d3:aa:
                    4c:07:07:c0:a7:e8:17:8d:df:fb:65:f6:d6:5f:9a:
                    56:4a:ce:c0:c4:1e:16:dc:e8:83:dc:f4:e1:56:86:
                    fc:b8:dc:56:56:86:d0:76:f2:cb:65:ae:a6:f3:74:
                    00:f1:3b:98:96:5b:25:ff:aa:84:6d:9a:77:d2:ef:
                    04:e2:bb:4d:97:e4:6c:9b:a4:6f:24:72:5e:6a:12:
                    24:81:fe:f5:4d:07:e3:6c:9e:64:71:57:78:61:17:
                    5a:07:24:3a:4c:64:81:99:8a:11:cb:98:2f:16:5d:
                    ff:b5:6c:c1:61:13:ac:bc:29:cd:39:ed:bb:9c:61:
                    8c:41:64:64:79:f4:05:fa:07:f3:c6:89:85:b5:52:
                    b7:86:b4:2f:b0:69:21:cb:9b:1e:33:0c:b3:3c:40:
                    d2:f8:a9:ee:0b:d0:b5:99:63:98:7e:92:83:d1:68:
                    e9:d2:23:eb:34:11:6e:4d:f4:76:0d:b0:08:80:a8:
                    a6:31:45:dc:34:e8:10:b0:ea:6f:6a:4d:22:f0:59:
                    dc:b1:25:52:b3:85:d6:5b:74:73:c0:f6:eb:5c:86:
                    0d:73:75:b5:9a:01:0f:57:f0:24:4f:f8:f4:80:28:
                    5b:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:2C:92:A7:9F:62:FC:B9:19:E7:95:AB:5D:E3:13:F4:BD:A7:1D:DF
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/ffb906-676e-4e0a-82f6-11f83d70c898/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/ffb906-676e-4e0a-82f6-11f83d70c898/1/fyySp59i_LkZ55WrXeMT9L2nHd8.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.34.81.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6a:09:11:a0:42:64:4c:fe:22:60:23:24:7c:46:3c:51:ab:79:
         57:9a:82:e6:b8:17:42:27:1e:8a:10:f4:ff:6e:36:ee:ac:79:
         a3:b3:fc:cd:b8:b7:2d:03:ad:46:05:10:6b:3e:27:db:07:7d:
         79:19:3b:48:ba:42:57:b9:02:a9:b2:80:67:64:b2:d0:9c:1c:
         23:39:d2:4d:89:ea:c7:dc:9d:62:43:9e:dc:7c:44:8c:84:a9:
         b5:69:3e:ea:ad:5b:82:8d:0f:d1:16:f1:71:7a:78:6f:cf:f8:
         38:3d:0d:29:d5:c5:77:05:f3:5a:c3:3b:ac:bb:6e:91:42:a7:
         35:4d:0f:ee:9b:f5:eb:fc:96:2c:44:9d:f8:5f:82:8a:5c:19:
         a1:08:42:b6:81:53:30:7e:fa:dc:e8:c2:e7:1f:46:18:7b:76:
         83:31:8a:4f:de:e7:80:68:25:72:91:2a:98:dc:48:c5:30:b0:
         6f:a3:5f:34:e5:43:69:27:2a:31:46:fb:3c:71:6a:af:07:27:
         c8:5a:90:77:2e:3a:a0:db:57:1c:44:e1:d7:32:87:59:3d:99:
         0d:b0:a3:c8:a4:ea:d3:b7:d7:61:15:70:0e:e0:b0:cc:5c:06:
         dd:0d:62:d5:ee:d1:ea:53:7c:b2:24:1b:c5:3b:12:fc:24:49:
         4f:18:8f:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----