Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/oA4m67RNKklqQvjNhhm_jYbOTtA.cer
File:                     oA4m67RNKklqQvjNhhm_jYbOTtA.cer (raw, json)
Hash identifier:          8KCJoXylvxTWSyRS9TMFZ3qcD5K8HxYOyTYfdV3kk2M=
Subject key identifier:   A0:0E:26:EB:B4:4D:2A:49:6A:42:F8:CD:86:19:BF:8D:86:CE:4E:D0
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856B636607379E8A377BFB3A88428762F2
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/d4/361f6d-ae67-4291-afba-05d2aa84d2c0/1/oA4m67RNKklqQvjNhhm_jYbOTtA.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/d4/361f6d-ae67-4291-afba-05d2aa84d2c0/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 03:32:34 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 185.233.131.0/24

Validation:               Failed, certificate revoked on Mon 24 Jul 2023 08:53:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6b:63:66:07:37:9e:8a:37:7b:fb:3a:88:42:87:62:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 03:32:34 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=a00e26ebb44d2a496a42f8cd8619bf8d86ce4ed0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:4d:1f:93:bc:29:c2:b3:a2:6d:b9:84:ec:81:
                    f2:71:21:43:1e:ec:1b:bb:d3:99:a9:1e:18:06:3e:
                    32:95:93:ef:6c:92:7c:0c:0a:07:04:50:e1:a1:53:
                    72:11:d2:44:45:1a:13:dd:62:b7:a8:46:da:a5:59:
                    2b:12:5a:8a:f2:a9:84:44:7e:fc:b6:d9:e7:83:bd:
                    a5:2b:05:65:67:10:46:6d:80:82:c2:ce:cd:1f:04:
                    85:43:cf:7f:18:df:5c:18:ca:ca:b1:e7:06:c3:5f:
                    64:1d:57:28:12:cc:db:62:df:0a:77:53:01:7f:7e:
                    1f:c9:dd:c4:c2:ee:8f:b5:20:19:c1:11:24:2d:0c:
                    7d:8f:21:4e:df:62:49:96:a1:49:80:5c:18:df:65:
                    2b:1a:9e:44:99:0d:74:d6:60:b9:84:32:5e:59:d9:
                    53:86:43:ea:81:6c:b2:4a:fa:c9:ed:01:a1:c4:1d:
                    fb:2b:08:13:c1:2c:ab:6a:e6:55:66:9a:94:d4:a4:
                    5c:5f:0b:2a:dc:6c:7f:08:16:0a:21:4f:f3:e3:b4:
                    77:f5:03:d3:cb:2b:a8:f5:34:5a:ae:66:b5:14:e3:
                    80:a2:ee:83:4a:03:4a:12:92:0c:58:6f:42:a8:9d:
                    9f:1a:aa:c8:f5:b2:b6:6c:57:be:29:b6:5a:c1:4c:
                    fc:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:0E:26:EB:B4:4D:2A:49:6A:42:F8:CD:86:19:BF:8D:86:CE:4E:D0
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/361f6d-ae67-4291-afba-05d2aa84d2c0/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/361f6d-ae67-4291-afba-05d2aa84d2c0/1/oA4m67RNKklqQvjNhhm_jYbOTtA.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.233.131.0/24

    Signature Algorithm: sha256WithRSAEncryption
         16:8b:58:a0:55:50:ba:22:f1:35:45:0f:24:c1:96:80:aa:f8:
         61:ef:0c:3c:53:29:23:0d:b6:0c:a8:6e:0b:64:0f:59:fe:b0:
         cd:08:e1:fb:df:d2:d4:4c:b0:43:39:20:f9:ca:7a:82:68:71:
         8d:9c:bc:89:ed:2f:35:5b:6f:37:2a:fd:b5:9d:fb:85:08:b0:
         ea:1c:a1:83:d6:64:38:d6:7f:44:82:29:76:ae:b3:2b:e4:a2:
         a1:d6:05:59:77:2a:a5:42:a5:e9:53:76:5e:60:77:bb:86:b4:
         9e:c8:c3:44:4e:6d:2f:ea:79:34:64:13:a3:19:7c:48:f3:e8:
         e1:7c:6e:a1:d8:3f:30:ec:08:f1:16:b7:88:db:5c:3c:5f:be:
         1f:ac:f5:63:70:3e:9b:d4:e7:4a:d2:61:fd:b1:e0:fd:f0:75:
         89:37:5f:e2:99:be:19:55:52:de:5b:c1:93:b4:cb:d8:a9:0f:
         67:c1:91:cf:09:25:e3:e4:b9:03:ac:90:e7:e1:ba:5b:a7:f6:
         6c:db:14:93:0f:df:e4:fe:6d:4d:42:44:98:fe:6f:61:32:27:
         9c:ad:1f:fa:a0:69:ef:c9:6f:62:57:73:98:3d:c3:db:f2:25:
         94:16:d1:28:94:fa:76:53:12:36:80:b1:0e:c9:27:52:57:1d:
         33:0e:77:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----