Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/kS1g6NeqQSWII82Bq8Eb2mQu9As.cer
File:                     kS1g6NeqQSWII82Bq8Eb2mQu9As.cer (raw, json)
Hash identifier:          9/Ty9SN9YXakrpDXWUCcz1sfBy2XgRfmIigSUvNeOG4=
Subject key identifier:   91:2D:60:E8:D7:AA:41:25:88:23:CD:81:AB:C1:1B:DA:64:2E:F4:0B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856AF526AB7FDE362A3E05F7EEA74DFCA7
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/8a/cb17f8-36b2-4646-b08e-bb5636bdd53e/1/kS1g6NeqQSWII82Bq8Eb2mQu9As.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/8a/cb17f8-36b2-4646-b08e-bb5636bdd53e/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 01:32:09 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 176.126.110.0/24

Validation:               Failed, certificate revoked on Wed 13 Dec 2023 12:09:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6a:f5:26:ab:7f:de:36:2a:3e:05:f7:ee:a7:4d:fc:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 01:32:09 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=912d60e8d7aa41258823cd81abc11bda642ef40b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:c1:9f:2f:67:c8:e5:7e:c3:cb:17:09:1e:a5:
                    a0:47:4a:95:1b:c8:39:4c:56:dd:6c:11:65:2e:b7:
                    e5:7e:4f:38:47:be:47:44:53:e1:52:dc:cc:e6:65:
                    6a:ee:8f:65:cf:47:0f:84:c2:ab:70:a3:c9:03:f9:
                    71:62:46:1b:b1:4c:9c:a1:de:f0:1d:fd:7d:95:2e:
                    f8:14:9e:29:fb:c6:ca:e2:a0:8b:f5:33:2b:dd:0f:
                    26:c8:38:c5:a2:4a:97:4c:52:be:48:19:1b:95:43:
                    84:19:6d:1d:f9:0d:02:50:fd:5b:69:64:a8:60:d2:
                    cb:e5:f1:d4:52:7d:3f:4d:13:d8:4a:c4:1d:34:56:
                    ae:22:ec:57:2f:be:43:f2:33:c1:63:92:9f:b3:30:
                    70:8a:9e:3b:19:1e:50:02:90:e3:36:64:0f:c6:a1:
                    39:20:a5:34:8e:10:fd:69:7d:b1:47:1b:37:78:67:
                    57:42:92:24:32:6a:54:42:72:99:ff:c0:95:17:5f:
                    62:3a:69:1b:48:14:9b:1c:a2:a2:b1:fd:38:bb:70:
                    16:4c:6c:b3:e0:54:dc:0a:b0:bc:b0:2d:31:c8:36:
                    e4:00:8a:7b:89:d0:21:d8:53:1d:ee:e8:aa:0b:d7:
                    6c:21:62:75:f8:02:9e:61:4f:cb:1c:43:3e:30:a9:
                    c7:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:2D:60:E8:D7:AA:41:25:88:23:CD:81:AB:C1:1B:DA:64:2E:F4:0B
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/cb17f8-36b2-4646-b08e-bb5636bdd53e/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/cb17f8-36b2-4646-b08e-bb5636bdd53e/1/kS1g6NeqQSWII82Bq8Eb2mQu9As.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  176.126.110.0/24

    Signature Algorithm: sha256WithRSAEncryption
         47:c6:50:ee:0e:0b:14:d6:93:c3:31:7c:ea:8d:f7:23:6b:c9:
         b6:5a:bf:7f:d3:af:19:d3:a6:31:99:d3:0d:66:ee:7e:1b:c9:
         95:b7:a6:bf:43:d6:53:0c:ce:ce:9f:3c:af:dd:a7:00:66:de:
         50:31:e3:9f:a7:21:ff:9e:b4:eb:91:26:f4:6f:c4:ea:19:9b:
         83:43:2f:ea:96:11:bb:98:65:03:69:2f:ba:4b:20:71:97:b4:
         19:19:c1:59:15:8b:ec:85:be:c9:fc:e3:29:79:b9:eb:8e:b9:
         c2:37:b1:63:09:45:8b:e5:69:39:7c:65:a0:74:b0:7e:c7:b3:
         5d:c8:0c:78:74:5d:20:c1:ca:9c:a4:c0:46:39:cc:69:84:b7:
         fc:35:fc:15:e6:d5:37:83:08:4b:d7:b6:0f:65:ce:b1:66:c4:
         54:36:61:a0:b0:b6:ed:76:be:a1:0f:e6:fd:fe:d9:60:01:f8:
         9e:a2:f2:4e:46:10:8a:de:76:96:46:f7:33:f1:da:e2:ac:95:
         d4:6c:56:ca:f4:8d:87:e5:fd:ba:c8:f8:18:66:23:97:d6:19:
         46:32:dd:3e:29:bb:fa:54:d1:20:5d:b1:25:57:8c:e1:31:64:
         19:3a:81:21:c1:98:92:26:8a:15:d4:df:14:37:ce:84:e7:2e:
         ee:7c:80:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----