Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/gOmihG7BSmfSw-d1YUpXTBDs0Ks.cer
File:                     gOmihG7BSmfSw-d1YUpXTBDs0Ks.cer (raw, json)
Hash identifier:          sP7webZYyUUyizCafa1ICqmxx9m1wfkcFDe9eHJLse8=
Subject key identifier:   80:E9:A2:84:6E:C1:4A:67:D2:C3:E7:75:61:4A:57:4C:10:EC:D0:AB
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01887D53BDADB6DCC86B676229DB1329E393
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rsync.paas.rpki.ripe.net/repository/7bf94abc-3456-4a7d-8984-82fcc576ef8b/0/80E9A2846EC14A67D2C3E775614A574C10ECD0AB.mft
caRepository:             rsync://rsync.paas.rpki.ripe.net/repository/7bf94abc-3456-4a7d-8984-82fcc576ef8b/0/
Notify URL:               https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before:   Fri 02 Jun 2023 18:17:00 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 89.107.9.0/24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:7d:53:bd:ad:b6:dc:c8:6b:67:62:29:db:13:29:e3:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jun  2 18:17:00 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=80e9a2846ec14a67d2c3e775614a574c10ecd0ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:d7:b8:10:95:8e:66:3c:4d:8d:e8:65:bd:3a:
                    ea:0a:08:dd:44:3d:b6:25:a8:0a:34:2f:1a:e3:39:
                    05:0e:b9:8b:f0:c8:7f:82:c9:19:92:ed:9b:4a:ed:
                    81:09:9e:8f:93:51:b4:9a:27:b0:80:85:44:75:18:
                    81:27:97:1d:40:90:ba:8c:21:42:2b:d2:9c:cc:aa:
                    97:71:74:b6:f3:11:7f:0b:ad:b2:e7:7d:a4:37:7e:
                    7a:eb:9a:38:6f:00:7c:06:12:51:81:65:49:b0:c6:
                    fd:0a:ea:e7:da:a9:cb:73:39:6c:72:29:46:e2:69:
                    15:b2:5f:6a:c1:2d:c2:2a:36:99:8a:93:c8:9f:b6:
                    4b:5a:be:c9:a9:eb:70:55:8a:0a:95:84:01:f8:21:
                    13:ef:1d:8f:79:12:8f:75:1e:7c:1d:7d:8f:87:e2:
                    65:38:2b:73:62:db:b8:c3:6b:be:d9:33:b6:74:4b:
                    cb:cf:a6:9e:cf:f1:6c:3d:06:33:09:b8:51:3f:52:
                    38:3d:09:e3:0e:a7:2b:02:89:e2:f6:bb:c9:aa:d5:
                    c7:69:a1:b9:6f:c8:59:98:5e:ee:0b:63:e7:f3:21:
                    83:82:af:da:28:22:c8:b1:50:6f:0b:bb:c5:fa:e7:
                    0d:a6:5d:79:33:99:62:e1:f3:8f:29:c2:c5:c1:32:
                    ad:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:E9:A2:84:6E:C1:4A:67:D2:C3:E7:75:61:4A:57:4C:10:EC:D0:AB
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/7bf94abc-3456-4a7d-8984-82fcc576ef8b/0/
                RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/7bf94abc-3456-4a7d-8984-82fcc576ef8b/0/80E9A2846EC14A67D2C3E775614A574C10ECD0AB.mft
                RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.107.9.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8e:10:0c:fc:a3:18:6a:cd:57:59:dc:b2:b7:67:07:97:77:18:
         55:18:fd:07:99:b6:37:4d:02:73:3c:12:9d:cb:bc:bc:b3:03:
         47:08:a0:a3:fc:c6:63:cf:0e:da:86:b9:e0:e0:0f:8f:c0:87:
         bf:7d:c8:fc:a9:5e:c2:fd:f2:94:c4:a8:e4:2f:e9:6d:f4:c6:
         85:ea:48:d9:2c:4c:6f:1e:ed:c9:19:cb:8f:02:49:77:03:87:
         48:f1:d6:67:89:94:5c:5c:59:68:56:57:7a:39:d1:34:49:3a:
         f5:05:5c:80:e8:21:aa:62:b5:56:f5:ad:41:61:52:f2:f0:90:
         67:09:68:bb:17:85:5e:09:ad:33:fe:d7:ce:05:2d:e4:8b:83:
         12:af:f3:45:87:67:c3:a5:bd:77:3e:4c:de:73:ab:26:28:5d:
         fd:0d:7c:d6:44:bf:c5:78:01:92:56:97:0d:f3:e9:e1:d0:b4:
         94:00:56:ab:62:35:9a:f2:ac:dd:05:41:ae:27:50:71:80:1a:
         4f:ce:1c:11:1d:da:46:14:e3:53:9d:72:1b:e6:b8:08:8d:34:
         be:97:55:8e:fe:43:70:2c:3a:ae:09:cc:b0:05:f7:74:d5:8a:
         26:b9:33:99:ee:ef:40:3a:f5:fb:fe:9e:fb:2e:97:fb:00:28:
         be:68:9f:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----