Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/gp8b5Xt5YGiOGXXJjciJC59KmFI.cer
File:                     gp8b5Xt5YGiOGXXJjciJC59KmFI.cer (raw, json)
Hash identifier:          jutXk7hff1AGolhkrPEgPio1Mjbyhaq6xCysaryiqCI=
Subject key identifier:   82:9F:1B:E5:7B:79:60:68:8E:19:75:C9:8D:C8:89:0B:9F:4A:98:52
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0189FED4CB9E2EE64DAA4BFB22F3F521DCB6
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/b4/38bc90-1d53-4d47-bbdb-f4e7c9cc43ff/1/gp8b5Xt5YGiOGXXJjciJC59KmFI.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/b4/38bc90-1d53-4d47-bbdb-f4e7c9cc43ff/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 16 Aug 2023 14:51:45 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 2a0e:d300::/29

Validation:               Failed, certificate revoked on Wed 01 Nov 2023 14:07:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:fe:d4:cb:9e:2e:e6:4d:aa:4b:fb:22:f3:f5:21:dc:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Aug 16 14:51:45 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=829f1be57b7960688e1975c98dc8890b9f4a9852
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:0b:aa:11:c2:18:b0:0e:d8:0d:58:38:10:b6:
                    20:a5:d9:c7:3d:02:f1:e6:0e:76:d6:92:75:7d:a7:
                    9d:13:75:32:fa:d6:30:f2:22:a4:e2:a6:b5:df:a4:
                    f7:de:6c:61:e4:a6:ea:72:8f:ed:e1:15:43:69:b7:
                    91:27:3d:a0:68:4e:ef:44:fc:31:6e:3e:1b:ea:8a:
                    43:fc:ce:62:3a:e3:8f:ee:2c:5a:28:28:d4:02:fa:
                    25:2c:cb:94:38:4d:4f:c0:e6:32:32:0e:9d:e6:12:
                    ca:0b:3c:33:2b:50:0d:5a:5a:2e:dd:f3:d4:01:68:
                    bc:ec:1e:24:0e:1a:f7:c4:9b:5a:4f:96:40:8b:3b:
                    e9:af:3d:52:e9:fa:7f:65:f7:43:9f:06:36:e2:b9:
                    7c:35:13:77:48:da:14:08:94:33:1f:28:d3:d1:f7:
                    f4:52:19:2b:e1:9b:c3:af:ec:ef:8f:36:18:c3:9e:
                    d1:1e:8c:99:2f:f4:4f:88:c9:e3:ae:fc:11:b2:76:
                    b7:18:90:65:2e:55:b7:f5:c9:d7:89:57:3a:b2:8b:
                    2e:6a:89:2b:8e:b0:bd:09:a3:cd:7e:69:ef:3b:a9:
                    7d:14:00:40:f6:52:56:e3:5c:59:e3:5d:c5:3f:e7:
                    7d:13:ec:c7:fc:52:d8:33:bb:ab:7f:af:d3:e9:bc:
                    ef:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:9F:1B:E5:7B:79:60:68:8E:19:75:C9:8D:C8:89:0B:9F:4A:98:52
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/38bc90-1d53-4d47-bbdb-f4e7c9cc43ff/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/38bc90-1d53-4d47-bbdb-f4e7c9cc43ff/1/gp8b5Xt5YGiOGXXJjciJC59KmFI.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:d300::/29

    Signature Algorithm: sha256WithRSAEncryption
         3a:0e:61:a1:73:40:9a:22:d5:80:d5:7e:98:52:b0:93:99:5b:
         46:18:43:ca:31:3e:2d:70:09:fd:85:81:08:a7:b7:71:4c:ed:
         1d:83:1f:36:a0:b3:4a:52:1d:cd:c2:5b:be:3a:fa:8b:37:40:
         2f:71:3f:37:5b:a9:e0:86:1d:31:fa:be:6c:1c:7f:65:01:73:
         85:cc:ec:19:a2:48:eb:a8:95:21:43:fe:52:87:bc:39:c2:0a:
         86:81:7a:85:7f:6b:8d:fa:db:02:b4:64:7c:ab:61:8f:95:81:
         eb:3d:a9:45:d4:1c:e7:c7:03:bd:29:da:56:34:88:54:56:59:
         09:f9:17:16:3a:a0:15:91:f7:56:8a:cd:8c:4c:20:b2:0e:ed:
         80:a8:2c:f2:8c:62:f9:d7:c8:b2:3a:fe:57:9f:09:b5:e0:a3:
         51:6b:be:95:0c:51:73:54:d1:49:9e:73:de:70:14:40:54:6b:
         f8:00:d7:af:97:69:46:ee:7b:82:d4:82:66:27:10:31:07:b5:
         9f:e9:66:f8:7a:01:b5:b3:48:d8:1d:75:33:7c:52:48:2a:2b:
         fe:ef:52:93:db:c9:f6:14:c0:51:0b:d5:ad:b3:78:20:55:31:
         05:2e:da:88:b6:30:72:48:a1:11:d2:59:0f:00:df:db:1a:1a:
         6b:9b:cb:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----