Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/nyKxytczPTS7093epLoHsaggRCY.cer
File:                     nyKxytczPTS7093epLoHsaggRCY.cer (raw, json)
Hash identifier:          MYXE551mVKxLHB+fagwGfI/4rsGArdX8nKtxjh7cDnM=
Subject key identifier:   9F:22:B1:CA:D7:33:3D:34:BB:D3:DD:DE:A4:BA:07:B1:A8:20:44:26
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856EFADA3CEA9C68CED079BBCB18FCD4B2
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/a5/85737e-5c58-4e0f-afef-88075d1f8dbc/1/nyKxytczPTS7093epLoHsaggRCY.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/a5/85737e-5c58-4e0f-afef-88075d1f8dbc/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 20:16:51 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 195.78.76.0/23

Validation:               Failed, certificate revoked on Thu 09 Feb 2023 09:23:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6e:fa:da:3c:ea:9c:68:ce:d0:79:bb:cb:18:fc:d4:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 20:16:51 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=9f22b1cad7333d34bbd3dddea4ba07b1a8204426
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:ac:37:4b:8d:39:70:91:36:28:3b:c8:4f:52:
                    85:32:1b:39:4c:ce:62:e8:45:3c:59:24:06:33:0b:
                    b6:7f:e6:a9:11:60:da:42:8e:da:76:96:b5:d9:5b:
                    58:1b:d7:89:3a:3c:72:00:c4:61:3b:ce:15:dc:0b:
                    19:df:63:da:12:cd:26:b7:2d:05:d0:0b:50:17:e2:
                    d6:79:7f:56:0c:fa:97:93:4c:1d:93:e2:a7:a1:1c:
                    35:b9:74:1d:2d:82:a8:b5:49:f7:3c:0e:38:ef:bb:
                    82:dc:41:07:8d:17:41:a8:06:94:bd:2f:7e:b2:f3:
                    f9:4c:69:3d:4b:ff:31:2b:4d:34:9d:22:f3:19:b7:
                    25:97:fa:33:10:72:0b:92:ed:b4:3a:b8:56:28:4a:
                    08:94:05:9a:8b:ea:74:3d:e9:ea:4c:0e:b7:54:85:
                    d6:e4:25:a9:34:02:00:1f:08:7c:91:fb:c0:ef:a9:
                    42:b2:db:40:d8:a2:33:d9:2f:7f:68:96:89:3e:51:
                    90:8c:6f:fb:25:1a:bf:d7:2b:a9:6c:ff:f2:99:9f:
                    cc:8a:99:cb:9b:a7:ff:35:07:63:9e:d4:9e:ad:5f:
                    50:07:18:a9:1b:29:b2:67:8c:11:47:16:40:a0:a4:
                    9b:a4:f4:c0:ea:e4:a2:79:3b:3d:c7:2f:e3:f5:0a:
                    b2:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:22:B1:CA:D7:33:3D:34:BB:D3:DD:DE:A4:BA:07:B1:A8:20:44:26
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/85737e-5c58-4e0f-afef-88075d1f8dbc/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/85737e-5c58-4e0f-afef-88075d1f8dbc/1/nyKxytczPTS7093epLoHsaggRCY.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.78.76.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5e:85:cd:9b:a2:74:0c:0a:5f:12:02:bf:00:29:09:d5:8e:71:
         fe:95:2d:9d:ca:a9:1a:62:c0:f9:dd:5c:1a:7d:d2:7c:39:5e:
         d7:7f:52:17:47:13:e9:28:ee:d0:01:59:c4:45:14:ff:43:57:
         8a:97:ec:c7:50:f1:2e:df:b2:d5:5f:78:93:6a:d6:81:36:1d:
         4b:ef:d9:b5:16:06:7a:d1:70:d4:d2:82:f0:41:1c:28:b1:46:
         ba:b6:74:cc:3a:4c:17:8c:80:a3:50:40:a6:47:e0:0a:90:97:
         b6:ee:05:c2:2d:1f:fb:06:5e:c7:ed:44:b4:51:c9:b3:cc:c3:
         66:a0:ad:68:7e:c9:f5:1d:5e:fb:67:92:a2:9f:53:bf:ac:70:
         87:2f:f8:8a:46:4a:92:f1:fb:33:1e:84:03:5f:9e:9e:3b:0b:
         74:15:b8:d2:fd:9c:50:76:94:f0:e9:d9:d6:0a:0c:38:d7:74:
         6c:42:30:91:80:c5:a0:96:6b:ef:e7:6e:bd:a8:0c:ad:65:0b:
         d5:4d:a7:e9:2d:8f:81:41:84:78:9e:2b:f9:54:42:84:5d:dc:
         b6:71:ab:96:38:10:a2:c8:6c:c7:9d:b1:3a:e1:04:cd:fb:60:
         8c:1e:1e:d4:e7:ed:e0:f4:df:16:84:a8:92:71:5d:29:96:31:
         9e:dc:d2:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----