Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/jIlVMEGw01v4L_tKe6fepIYZPk4.cer
File:                     jIlVMEGw01v4L_tKe6fepIYZPk4.cer (raw, json)
Hash identifier:          lRlt5leFHoXjkdRQGlBogkxP+Kc7ijpd9fbL/URTtDk=
Subject key identifier:   8C:89:55:30:41:B0:D3:5B:F8:2F:FB:4A:7B:A7:DE:A4:86:19:3E:4E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018CC56E9E267CFA08A5B2D7FFBB77DF6220
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/d5/4e95d7-7f76-454d-aa47-8389f43ed6f6/1/jIlVMEGw01v4L_tKe6fepIYZPk4.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/d5/4e95d7-7f76-454d-aa47-8389f43ed6f6/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 14:30:10 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    IP: 5.181.104.0/22

Validation:               Failed, certificate revoked on Wed 23 Oct 2024 09:43:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c5:6e:9e:26:7c:fa:08:a5:b2:d7:ff:bb:77:df:62:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 14:30:10 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=8c89553041b0d35bf82ffb4a7ba7dea486193e4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:60:75:82:f4:8a:31:a7:7f:fe:2c:d8:00:f2:
                    4e:bf:74:a6:27:70:cf:68:56:3b:8b:35:3f:a1:71:
                    77:3a:5f:d9:fa:4a:73:39:f1:4e:3b:1f:24:4b:4e:
                    20:d8:a2:2a:5b:7d:13:9f:05:74:14:64:86:87:1b:
                    5b:d2:1e:5a:35:0a:46:70:51:71:3c:81:c7:72:5b:
                    b0:98:30:82:70:05:ef:7f:97:23:81:96:0b:2e:5b:
                    bd:2f:b1:4e:c4:96:27:44:79:a7:f7:c0:02:c8:0f:
                    20:8f:5d:f7:91:08:78:17:7d:f6:38:6c:5b:ee:1b:
                    6c:4c:14:96:4d:25:a7:c9:4d:fc:29:3e:e2:1d:45:
                    b1:e9:c3:9e:23:50:1b:04:94:c9:1c:0f:9b:3e:dd:
                    1c:03:be:71:31:04:d3:ec:dc:52:4e:3a:56:0d:9b:
                    d8:33:af:d5:6e:71:2e:d8:b3:5e:53:16:26:08:a7:
                    4c:4c:34:3f:62:f6:7f:9e:4e:dc:22:5d:37:cf:87:
                    1c:db:48:ac:98:db:52:93:8a:76:f8:f5:c7:89:89:
                    9c:9d:3b:74:20:7b:37:65:2f:ee:1a:07:36:61:50:
                    9e:e9:9c:4c:82:03:82:c3:2f:71:3b:66:d6:5e:09:
                    6e:3d:c9:c4:83:d5:5d:d2:34:97:b7:10:12:0a:ab:
                    f9:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:89:55:30:41:B0:D3:5B:F8:2F:FB:4A:7B:A7:DE:A4:86:19:3E:4E
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/4e95d7-7f76-454d-aa47-8389f43ed6f6/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/4e95d7-7f76-454d-aa47-8389f43ed6f6/1/jIlVMEGw01v4L_tKe6fepIYZPk4.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.181.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         64:1e:a4:7c:f3:59:a6:8e:73:79:4f:03:cb:c8:3e:b7:06:a2:
         b1:25:3f:3f:07:f0:8c:bc:35:85:17:f7:19:20:3d:87:42:ed:
         2e:43:45:f9:e1:ef:42:b7:dd:10:46:1a:5d:a2:f0:89:33:9c:
         45:b4:42:e8:e7:55:1a:bb:4c:f1:41:e5:af:b9:f7:af:38:95:
         21:5a:f9:33:c7:af:ad:1d:b1:34:cc:24:d4:df:9d:ba:91:c2:
         d0:6d:14:61:df:0e:cb:d5:79:a4:47:c6:f3:bd:54:3d:44:1a:
         d5:d7:1b:51:9e:86:db:fd:82:78:23:98:24:fc:56:6f:2c:0d:
         af:00:2c:14:a2:49:4e:ad:87:ed:d4:65:d6:eb:e3:fd:a6:44:
         ab:19:21:a3:e0:00:9f:a5:da:d0:a9:fd:b3:72:f7:3b:54:bc:
         70:69:5a:c5:e9:aa:03:70:fe:17:7a:d6:91:cd:53:93:38:83:
         83:6f:9b:1f:57:53:b7:02:20:73:71:c4:d2:12:99:54:8f:8b:
         6b:96:75:d5:22:f0:b0:c5:ec:06:34:e5:5f:bd:d8:a5:29:6d:
         3f:2c:18:95:13:a3:2c:e3:59:56:7c:99:79:3d:34:e9:c4:f2:
         a4:57:a0:5b:80:34:bd:a0:a5:5a:07:69:95:87:bb:f6:3b:7d:
         bb:fa:da:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----