Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/hcP2qehVDAkLw7JX9yuPZbaan2E.cer
File:                     hcP2qehVDAkLw7JX9yuPZbaan2E.cer (raw, json)
Hash identifier:          Tq3ervatIwPqnIwWugNfPXe7814sZo0Qun5lElg1m2E=
Subject key identifier:   85:C3:F6:A9:E8:55:0C:09:0B:C3:B2:57:F7:2B:8F:65:B6:9A:9F:61
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856DF7C25FB4FCCE9962861707D4347274
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/da/524ba5-096d-47ff-a8f4-dc8a2d9ec6f3/1/hcP2qehVDAkLw7JX9yuPZbaan2E.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/da/524ba5-096d-47ff-a8f4-dc8a2d9ec6f3/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 15:33:51 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 185.212.119.0/24

Validation:               Failed, certificate revoked on Fri 03 Nov 2023 08:37:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6d:f7:c2:5f:b4:fc:ce:99:62:86:17:07:d4:34:72:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 15:33:51 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=85c3f6a9e8550c090bc3b257f72b8f65b69a9f61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:4b:0c:09:55:e2:3b:4f:5e:cd:1f:2b:4d:78:
                    b2:81:84:13:7a:87:c6:f1:2d:46:68:0d:47:f0:92:
                    3d:12:ae:76:b7:ae:7f:f9:cf:a7:c9:50:8e:45:6b:
                    49:27:94:af:85:49:48:7e:3f:b8:ca:b5:35:08:ee:
                    d5:78:a4:78:35:c4:52:f3:e7:df:89:68:25:cb:ec:
                    6b:1e:da:b4:c9:45:de:e5:35:08:b6:b0:6c:e6:da:
                    24:38:00:fd:40:75:f4:42:45:6a:44:20:cd:e8:03:
                    21:6b:0f:29:57:65:f4:82:fd:a7:ed:1c:66:60:53:
                    48:52:94:e2:5b:8b:80:72:1c:22:fa:3c:42:bc:1a:
                    28:40:11:7e:4b:79:d6:6f:92:8a:13:b0:fc:bf:c4:
                    1f:b8:98:38:5d:22:d2:48:49:bd:c5:7f:6d:2b:31:
                    92:19:dc:a5:36:91:24:c2:dd:47:60:2d:06:e5:3f:
                    e5:33:ea:cc:1f:9e:1f:3d:7f:cf:60:fd:dc:c1:a5:
                    35:82:67:7c:b3:1f:e1:7f:c8:4a:a9:27:0d:6c:69:
                    c3:d5:b5:dc:8a:59:2b:34:4e:00:52:fb:1f:bb:4d:
                    82:e4:da:99:f4:21:0a:a8:02:94:0a:2a:9d:69:86:
                    d2:9a:47:52:9a:3f:2f:4a:67:a3:25:3c:e0:55:92:
                    f2:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:C3:F6:A9:E8:55:0C:09:0B:C3:B2:57:F7:2B:8F:65:B6:9A:9F:61
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/524ba5-096d-47ff-a8f4-dc8a2d9ec6f3/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/524ba5-096d-47ff-a8f4-dc8a2d9ec6f3/1/hcP2qehVDAkLw7JX9yuPZbaan2E.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.212.119.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0a:ba:10:89:38:ff:b5:29:7d:87:6b:7d:c6:62:01:1c:fd:79:
         a0:f7:46:2d:4b:d6:f0:70:a6:a7:69:f4:2f:ae:fa:72:e2:3f:
         98:f7:74:68:72:21:5b:46:7c:41:25:24:15:82:9a:34:34:68:
         0d:41:07:e6:ab:85:88:d0:2a:30:be:6c:30:49:73:05:35:ac:
         5b:46:d5:52:d2:36:90:17:4f:24:5a:7c:a5:8b:51:a1:d6:c6:
         ec:dc:04:37:12:a2:83:98:fd:6f:4e:55:99:6f:d7:22:37:62:
         2c:ec:3c:0b:ea:b1:88:0d:c8:b8:31:5d:52:a1:62:35:6e:67:
         9e:90:26:ac:3d:50:8e:fc:b0:e8:ef:c5:b1:51:04:72:99:00:
         fd:b5:78:fb:35:15:99:6d:05:61:c7:d4:8e:47:31:1a:51:5e:
         5a:72:2d:1f:68:86:d7:4d:b5:fa:86:c3:88:d6:88:e6:f3:3e:
         ad:c3:73:bb:f6:fe:bf:a7:ac:da:f7:59:fc:5f:07:cd:33:29:
         37:67:f7:f8:6b:bf:d6:9e:7b:5e:8a:22:c3:6d:ac:24:de:0e:
         cc:7e:61:06:21:1f:d1:a0:40:dc:4f:69:7c:c2:30:74:06:d3:
         0d:7b:20:83:e1:da:6e:fe:f9:f3:0b:87:26:f6:37:1e:ed:52:
         c1:72:ca:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----