Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/oaAfdqQr6HF779zhZ2IVmIpN_HM.cer
File:                     oaAfdqQr6HF779zhZ2IVmIpN_HM.cer (raw, json)
Hash identifier:          md2fRXX1FbUNuDf8I3wJhsi6UvVDdQPpe/R01W5euGk=
Subject key identifier:   A1:A0:1F:76:A4:2B:E8:71:7B:EF:DC:E1:67:62:15:98:8A:4D:FC:73
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01857245CA8B37D37F7D89DEB6D990F806EA
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/31/eda54a-772c-49db-a012-6100cd15e260/1/oaAfdqQr6HF779zhZ2IVmIpN_HM.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/31/eda54a-772c-49db-a012-6100cd15e260/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 02 Jan 2023 11:37:34 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 45.142.152.0/22

Validation:               Failed, certificate revoked on Fri 22 Dec 2023 15:02:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:72:45:ca:8b:37:d3:7f:7d:89:de:b6:d9:90:f8:06:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 11:37:34 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=a1a01f76a42be8717befdce1676215988a4dfc73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:9a:a9:cb:30:48:cc:ca:82:1b:24:0b:6a:e6:
                    94:e4:50:0c:c5:cc:26:c6:71:a2:14:39:3b:81:96:
                    f1:0f:fd:c1:b7:af:f6:7a:f6:3a:4f:51:b6:98:35:
                    d2:75:f5:89:71:e6:6e:f1:b3:9b:e0:3c:3f:06:6b:
                    39:79:32:41:da:fb:a1:21:e6:5f:6e:98:72:5d:98:
                    ac:9e:db:71:58:00:da:ad:1c:f6:d2:07:54:63:bb:
                    59:60:6c:a0:18:86:c9:60:d2:43:a4:88:78:d7:ab:
                    ac:f8:fa:34:9a:49:ce:5a:90:69:91:21:c6:2f:44:
                    8e:ec:0b:26:5d:09:15:66:06:0c:13:07:48:9f:1c:
                    49:7a:05:00:d9:3a:26:b9:19:9a:e4:09:2f:ed:16:
                    44:1f:dd:71:e3:76:b7:54:6a:fa:2a:ae:ee:28:28:
                    1f:94:37:3a:11:64:5a:d9:23:a7:9a:e0:4d:a7:58:
                    99:f1:6b:e8:13:26:85:bc:46:1e:33:80:58:4f:c9:
                    91:3a:9b:d1:71:72:23:3a:f8:9f:c2:7e:fa:96:2d:
                    5f:23:15:d1:22:24:65:7d:d7:7d:4d:73:68:9e:6f:
                    d6:f0:07:f9:f6:7d:ea:89:73:8b:7b:b8:c6:41:5c:
                    96:84:da:17:31:ec:c5:3a:08:1d:9f:27:7a:47:49:
                    b1:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:A0:1F:76:A4:2B:E8:71:7B:EF:DC:E1:67:62:15:98:8A:4D:FC:73
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/eda54a-772c-49db-a012-6100cd15e260/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/eda54a-772c-49db-a012-6100cd15e260/1/oaAfdqQr6HF779zhZ2IVmIpN_HM.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.142.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         16:28:da:22:79:6a:74:a4:53:ec:75:6a:ee:a1:18:20:82:fd:
         4d:ac:70:91:ae:6a:fc:0e:e8:da:93:14:c0:fd:cb:1a:aa:89:
         2a:bf:0b:6f:b8:dd:88:e9:e6:b5:57:f3:b2:4a:1b:d7:d1:86:
         c6:e8:a9:54:ca:11:ff:16:eb:0b:f0:25:71:f5:b7:17:50:2f:
         1e:26:39:1c:ff:a2:1e:c9:fc:43:75:e7:d3:2e:b2:48:a6:0d:
         1f:1a:c9:96:2b:ee:dc:50:ee:1c:02:4d:52:66:e4:0d:6f:82:
         e4:bc:d0:47:72:b1:be:fa:e1:27:82:f6:7b:e2:00:ee:a4:fd:
         ae:c8:74:4c:44:3a:44:96:de:e8:02:e0:f1:59:e5:57:2b:a8:
         d4:f4:38:06:2d:ad:46:6d:4a:50:8b:dd:ef:5b:af:b7:ac:95:
         f6:58:51:2b:e4:f3:fc:ce:b7:f6:e8:ea:2c:3b:7b:28:8c:38:
         08:30:5f:62:34:cc:2c:ad:b2:dd:a1:4e:17:ce:a9:40:a4:99:
         45:70:ba:59:61:e5:14:44:ed:89:9b:02:5a:f7:c1:73:b8:8d:
         dc:69:2f:cf:65:65:b0:4b:93:a3:53:e8:05:dc:95:e2:c6:05:
         ec:94:86:98:cd:aa:23:62:fa:19:03:dc:a0:4b:47:d9:0e:76:
         6a:17:e3:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----