Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/lCmzpJDsh9-uC4imtsiazdPLt88.cer
File:                     lCmzpJDsh9-uC4imtsiazdPLt88.cer (raw, json)
Hash identifier:          WczGToikG2ZlipcKzYNOq/0QOnkb+Xy1Av3p0McLwik=
Subject key identifier:   94:29:B3:A4:90:EC:87:DF:AE:0B:88:A6:B6:C8:9A:CD:D3:CB:B7:CF
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856EFAF9F6DD19282B9EE8E75E44606090
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/9a/e32f2e-35db-4afc-9c3b-cab8ef3902a4/1/lCmzpJDsh9-uC4imtsiazdPLt88.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/9a/e32f2e-35db-4afc-9c3b-cab8ef3902a4/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 20:16:59 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 80.71.149.0/24

Validation:               Failed, certificate revoked on Thu 26 Oct 2023 10:07:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6e:fa:f9:f6:dd:19:28:2b:9e:e8:e7:5e:44:60:60:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 20:16:59 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=9429b3a490ec87dfae0b88a6b6c89acdd3cbb7cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:d4:63:ab:db:4d:34:60:05:41:58:a6:7e:8b:
                    6a:c4:b4:da:6b:7e:0e:55:fb:7d:a7:4f:c1:55:4d:
                    14:bd:7b:ba:be:3b:41:81:67:a7:de:59:73:58:f7:
                    55:14:72:52:2a:fb:71:af:60:40:6c:65:9b:cb:44:
                    10:e3:84:bd:a2:8a:e9:b4:17:99:c9:54:b4:74:7a:
                    ef:22:2f:d2:05:e3:3f:9d:34:89:e6:79:13:65:25:
                    e9:db:1a:9e:1a:53:48:4a:eb:44:c6:5a:5c:46:9a:
                    2d:3d:e2:d3:75:af:c6:09:38:8e:f2:3d:b0:43:6a:
                    cd:d7:7b:61:74:5b:e7:77:b8:3b:1a:a3:ef:a3:32:
                    f0:e8:de:46:55:13:21:38:11:e5:21:66:3a:8f:42:
                    fe:20:42:78:ad:61:ca:e7:d0:3c:16:81:f9:71:e6:
                    79:ff:04:cb:e1:a5:22:12:31:e3:6f:09:3d:68:91:
                    bd:6a:7a:48:75:7f:a8:82:bd:08:94:09:f0:b0:55:
                    17:fe:a9:32:72:8d:76:9e:8b:11:36:98:a7:18:04:
                    45:68:84:c8:1a:4d:b8:32:4c:16:e8:09:90:db:6e:
                    86:cd:5f:a2:f2:2e:5e:8e:b8:7e:5a:f9:84:81:ad:
                    ff:f1:32:ff:39:3a:1d:75:b8:13:c4:c3:69:e5:a7:
                    d5:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:29:B3:A4:90:EC:87:DF:AE:0B:88:A6:B6:C8:9A:CD:D3:CB:B7:CF
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/e32f2e-35db-4afc-9c3b-cab8ef3902a4/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/e32f2e-35db-4afc-9c3b-cab8ef3902a4/1/lCmzpJDsh9-uC4imtsiazdPLt88.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.71.149.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a7:31:83:05:85:dd:cb:19:48:dc:d5:6b:9d:52:fd:bb:a8:c5:
         3c:87:6a:30:3a:e9:ae:ac:18:3d:c6:6a:f6:02:22:81:f3:12:
         d4:0c:0e:0e:a4:d6:70:24:81:f3:f1:88:3b:41:69:a8:39:4d:
         3f:2c:88:76:64:98:93:31:3d:d8:26:39:28:f1:76:7a:51:d9:
         1d:ca:0c:91:07:48:84:c0:34:43:d3:57:bc:29:70:44:54:07:
         c6:69:48:e2:80:8e:42:77:53:84:7b:43:4c:80:96:e1:7d:0c:
         db:0c:92:90:10:3a:58:eb:5d:8f:40:d8:c9:86:2e:ce:88:97:
         82:1d:18:59:29:4c:63:c6:22:0c:5d:2b:33:85:02:e0:a8:6f:
         c7:d3:bc:6c:72:4b:7f:c4:8b:67:bb:a5:fe:33:63:f4:2e:bd:
         ce:c7:c5:3e:64:e4:d7:40:c6:1c:74:b5:2b:82:df:05:da:f6:
         19:26:5f:98:a9:8b:b0:dc:7f:df:42:92:b9:30:55:a8:ce:d8:
         8d:27:33:ac:32:85:2c:4b:48:ad:66:6e:3e:4f:46:25:13:e9:
         fd:a0:34:03:01:89:0c:03:e7:9d:c3:12:cc:18:78:33:4c:4a:
         da:1b:b4:87:f8:6a:d6:7d:03:a7:22:e2:58:8d:e9:3a:12:9b:
         46:e7:0a:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----