Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/nVDqrhcx0jP3RDVwmnsdurj4Yc0.cer
File:                     nVDqrhcx0jP3RDVwmnsdurj4Yc0.cer (raw, json)
Hash identifier:          RDnWuRoAPE74/O1ZkHEKGjeXZkV6HMjJTK2/DKq5NRg=
Subject key identifier:   9D:50:EA:AE:17:31:D2:33:F7:44:35:70:9A:7B:1D:BA:B8:F8:61:CD
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856EFB1C955D5596E821C242DFF51D7918
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/30/067cf3-4e23-4c56-bd14-c9ffa095baba/1/nVDqrhcx0jP3RDVwmnsdurj4Yc0.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/30/067cf3-4e23-4c56-bd14-c9ffa095baba/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 20:17:08 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 185.235.245.0/24

Validation:               Failed, certificate revoked on Wed 19 Jul 2023 13:55:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6e:fb:1c:95:5d:55:96:e8:21:c2:42:df:f5:1d:79:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 20:17:08 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=9d50eaae1731d233f74435709a7b1dbab8f861cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:bd:bd:9a:0e:89:0e:3e:d8:9c:15:b9:2d:3d:
                    44:ba:86:9a:a6:57:fd:a4:67:90:e8:a3:de:1c:06:
                    37:d2:70:fb:cc:d3:aa:5a:ae:bd:ec:00:5e:b7:7f:
                    8c:09:26:ef:ea:0f:ec:61:e7:90:95:3c:54:e3:18:
                    aa:04:1b:91:6d:b9:f7:1f:2d:b2:e0:f2:b3:e0:d5:
                    bd:ee:26:62:d0:89:c0:5c:e8:68:8b:7c:50:d4:1b:
                    ec:12:25:64:71:b3:ec:a5:e0:92:60:af:1f:61:46:
                    98:6e:10:56:29:a1:6f:be:5a:f7:a3:72:7a:d1:0d:
                    b2:68:81:f0:3a:04:86:ac:ff:b2:ba:9e:08:42:ff:
                    b8:1f:9e:dc:ea:91:f4:33:61:6a:dc:17:69:30:7f:
                    d8:48:77:90:6c:e8:f7:b1:b0:12:4d:27:19:77:71:
                    ee:01:92:0b:d1:b5:bb:ff:35:ff:58:e9:9b:42:38:
                    44:30:a4:51:27:56:bf:86:a5:dd:64:0a:60:67:fe:
                    e9:e6:1a:54:63:23:1d:82:86:09:8e:47:39:e0:2d:
                    c6:8c:cd:f9:58:9e:dd:11:1c:47:f9:68:d8:97:bb:
                    42:f1:26:f8:97:f7:ac:05:51:bc:20:d0:1a:22:93:
                    6a:ce:bf:99:92:d4:9d:79:0c:06:53:7f:68:d7:44:
                    0b:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:50:EA:AE:17:31:D2:33:F7:44:35:70:9A:7B:1D:BA:B8:F8:61:CD
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/067cf3-4e23-4c56-bd14-c9ffa095baba/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/067cf3-4e23-4c56-bd14-c9ffa095baba/1/nVDqrhcx0jP3RDVwmnsdurj4Yc0.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.235.245.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3b:96:a9:64:68:71:00:1f:36:b3:5c:f4:39:a0:08:b7:f0:af:
         ae:41:8c:09:a9:c6:f8:2a:53:55:69:78:c9:95:da:46:b7:ac:
         eb:fc:10:39:69:27:53:c2:51:33:c1:7c:f2:8c:52:2a:4a:88:
         a0:33:2a:43:ed:eb:03:f7:af:8c:f6:81:71:18:4d:35:b2:c7:
         40:64:bd:0f:60:46:9d:f3:da:73:c7:27:86:5b:4e:57:93:84:
         da:3a:19:67:bd:d2:df:71:31:b7:76:70:78:c8:c6:be:f9:35:
         c2:36:eb:d6:c1:46:2f:95:99:74:62:51:09:ac:d2:8f:c4:d4:
         e4:01:c9:c1:c4:2f:71:10:15:32:8d:98:62:47:d0:a8:17:7a:
         ec:57:0f:ef:d4:b8:c6:02:ea:5e:ea:f4:52:e6:40:ca:97:58:
         5c:43:58:bc:cd:c0:bf:07:c8:e8:73:39:8b:ad:32:9e:22:1e:
         a6:cd:d4:2b:46:38:d5:33:27:01:0e:0c:92:42:b0:6a:87:e4:
         97:91:4b:4e:0b:58:55:8c:55:82:f0:2a:18:32:18:c5:37:6a:
         6d:8a:31:73:f4:a9:84:8b:b3:99:c1:54:81:25:29:e4:f7:df:
         19:17:b5:f1:18:9b:b9:a4:b8:c2:36:e3:a5:58:ec:ce:c0:a8:
         ab:5c:66:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----