Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/grxH53k3eKZ7jTy3Fn5jUoeMz38.cer
File:                     grxH53k3eKZ7jTy3Fn5jUoeMz38.cer (raw, json)
Hash identifier:          n2fNxyt0krnxmz9htsgnrG+vXTjz6dzPQim+DThGmX8=
Subject key identifier:   82:BC:47:E7:79:37:78:A6:7B:8D:3C:B7:16:7E:63:52:87:8C:CF:7F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0187222C42F8313B4AAD6E509057900B50A5
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/219/82BC47E7793778A67B8D3CB7167E6352878CCF7F.mft
caRepository:             rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/219
Notify URL:               https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before:   Mon 27 Mar 2023 08:25:38 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 185.212.118.0/24

Validation:               Failed, certificate revoked on Thu 21 Dec 2023 14:02:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:22:2c:42:f8:31:3b:4a:ad:6e:50:90:57:90:0b:50:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Mar 27 08:25:38 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=82bc47e7793778a67b8d3cb7167e6352878ccf7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:22:34:84:1d:cf:60:94:3a:38:00:fc:6d:5d:
                    45:37:20:df:b4:ff:b5:a3:5d:51:91:fe:07:29:4d:
                    8d:eb:96:1e:11:d2:42:1a:0a:af:a1:70:46:5a:a2:
                    db:2c:88:d7:a1:89:0c:99:2c:3a:1b:d3:2e:bf:30:
                    ba:7f:68:a1:6d:bb:fa:ae:55:f2:01:96:4a:01:6e:
                    e9:4a:16:97:23:a8:de:6f:ec:60:7b:e4:c5:f0:a2:
                    4c:42:60:4e:ca:50:65:57:c3:ea:2f:be:72:76:ba:
                    c3:20:0a:51:b0:6d:56:72:6c:90:7e:2e:04:d9:1c:
                    ea:63:16:bf:f3:0e:42:75:ae:a1:76:7c:9e:a3:27:
                    eb:46:52:33:f8:13:e2:83:80:26:3b:b5:9c:47:31:
                    70:e6:7f:5c:f4:87:50:61:54:79:51:3a:1a:d3:e8:
                    50:65:6f:b2:05:56:03:98:a2:59:74:a0:6c:99:8f:
                    08:29:7b:59:c4:83:db:49:6e:f3:18:25:b9:15:d6:
                    f2:3f:d9:d8:5d:99:74:55:fd:21:d7:ff:75:8a:43:
                    d1:6f:8a:25:36:58:1d:36:ae:57:19:4f:47:bb:0a:
                    22:09:3b:83:63:ee:39:c5:95:57:ae:ba:24:ec:08:
                    8f:cc:d3:04:7f:65:f7:fc:4a:25:55:73:10:3c:e5:
                    60:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:BC:47:E7:79:37:78:A6:7B:8D:3C:B7:16:7E:63:52:87:8C:CF:7F
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/219
                RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/219/82BC47E7793778A67B8D3CB7167E6352878CCF7F.mft
                RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.212.118.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ae:91:d6:e8:f5:52:b1:ad:d7:8e:fd:2a:c3:bc:b9:b0:c3:c4:
         4c:94:92:f7:b3:a8:1a:af:59:49:42:65:2a:6f:d9:01:77:fe:
         1d:f0:f0:38:43:88:50:8a:4b:c6:74:79:df:15:e1:46:d1:60:
         f3:08:e9:dd:39:f4:d8:fb:3c:ff:68:47:d4:1a:0e:dc:5d:4f:
         26:9d:50:0b:a4:e3:e0:4e:33:65:f8:ba:26:63:49:05:b9:6d:
         df:78:bc:f0:6c:d3:cc:0e:64:1a:1e:e9:d8:82:df:fb:3d:2d:
         aa:eb:c8:f4:80:33:7f:96:a7:27:aa:d3:ae:5e:cc:8f:5f:d8:
         4a:91:02:81:06:da:0d:ef:ae:b5:7b:d8:b0:7f:f0:b8:a1:2d:
         f6:93:cd:5b:c4:54:16:a2:a4:15:d6:d4:54:ea:20:57:a4:72:
         c0:c1:0b:fd:13:80:e2:ca:23:17:1f:de:35:68:54:36:43:38:
         52:7d:35:13:fe:60:83:74:00:11:de:b8:f3:25:8c:3c:e8:dd:
         44:f9:0c:49:95:f3:11:d8:a2:de:5b:85:71:f8:54:e7:e0:54:
         4e:ba:34:0f:c6:b0:33:5c:b6:75:eb:5a:09:00:54:70:dd:fc:
         2a:c0:37:09:04:78:b4:5e:03:9d:0c:20:c6:fe:fd:d8:1b:94:
         8b:79:19:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----