Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/oc5tOQmePRamA5kqwh9YVUquz38.cer
File:                     oc5tOQmePRamA5kqwh9YVUquz38.cer (raw, json)
Hash identifier:          IhOrwrYnb6CuYD9MJ8+j8q/oRKVQysLFQ1EzDjDF+Cs=
Subject key identifier:   A1:CE:6D:39:09:9E:3D:16:A6:03:99:2A:C2:1F:58:55:4A:AE:CF:7F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01864A4D9B6E950A0E0CA20F42F6AB553F7B
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/64/1fe36a-f58e-44e1-b415-3bf0dfbc748e/1/oc5tOQmePRamA5kqwh9YVUquz38.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/64/1fe36a-f58e-44e1-b415-3bf0dfbc748e/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 13 Feb 2023 10:24:05 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 45.81.40.0/23

Validation:               Failed, certificate revoked on Wed 15 Feb 2023 12:35:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:4a:4d:9b:6e:95:0a:0e:0c:a2:0f:42:f6:ab:55:3f:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Feb 13 10:24:05 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=a1ce6d39099e3d16a603992ac21f58554aaecf7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:b4:26:5e:b3:90:8d:e9:a2:d6:22:34:ff:52:
                    01:c6:d1:27:84:31:2d:7d:e8:dd:15:f2:0a:f2:97:
                    12:bc:97:29:5d:bb:15:0f:30:01:2c:ed:22:a7:f2:
                    4a:72:09:37:26:f3:fa:3b:68:20:14:26:a3:07:bc:
                    1b:1e:21:60:e0:ad:e7:b3:1d:21:69:49:80:90:3c:
                    20:72:d5:0a:b8:99:db:4d:a9:a6:fe:52:e9:07:d3:
                    75:5e:21:57:14:bf:6b:ba:a9:eb:13:90:85:c4:ad:
                    a8:ab:9c:c3:2a:7f:88:d6:bd:67:1c:5d:89:23:4d:
                    d4:c1:1e:7f:7d:c4:d9:17:81:8e:ba:5d:66:21:7d:
                    a6:9c:97:32:bf:b1:ee:47:21:01:20:82:c4:2a:8d:
                    2b:26:7c:86:33:9a:47:f6:e4:6d:e1:30:a3:2f:e5:
                    a8:73:18:d5:97:d0:42:b2:3a:95:54:a4:87:00:93:
                    2f:af:26:77:42:77:8f:2f:5a:4f:64:9e:86:c0:5f:
                    d8:8c:85:e2:fe:95:88:4c:88:a5:dd:93:46:37:b1:
                    23:c8:56:a5:8b:4d:d9:30:e3:4d:20:96:5b:57:c0:
                    62:80:04:91:3a:01:74:6c:62:ca:57:0a:94:d1:b7:
                    14:3d:5a:f2:cf:e6:2d:27:5a:47:a6:c0:03:9c:b4:
                    28:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:CE:6D:39:09:9E:3D:16:A6:03:99:2A:C2:1F:58:55:4A:AE:CF:7F
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/1fe36a-f58e-44e1-b415-3bf0dfbc748e/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/1fe36a-f58e-44e1-b415-3bf0dfbc748e/1/oc5tOQmePRamA5kqwh9YVUquz38.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.81.40.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3e:73:56:cb:bc:98:14:5a:c0:a2:75:a0:f2:63:eb:af:65:48:
         c4:b5:e0:91:ca:ff:1c:cd:ff:2c:45:48:9d:dc:7d:c7:97:7f:
         f8:33:78:2d:9c:79:ff:15:10:09:3f:47:24:e8:d4:b5:33:d6:
         a9:a8:74:f2:38:55:f3:45:ce:52:d9:17:2c:db:ff:8b:66:53:
         50:bb:87:6e:80:2c:55:65:17:5e:f7:14:bd:d0:95:f9:ef:e0:
         bb:64:10:38:0f:6e:01:7d:c7:d9:7e:87:ad:61:cf:8f:aa:96:
         79:92:ee:ae:9a:ee:f5:32:7a:44:e1:c8:b8:2d:b9:2c:c1:53:
         32:e6:b1:db:d7:b4:83:91:b8:e3:10:ee:88:cc:58:f0:6f:b6:
         2c:02:40:b0:c8:63:c2:a5:0b:64:d1:ea:36:9f:15:56:eb:37:
         07:99:75:92:27:76:47:cd:79:fb:6c:2e:44:2d:e9:33:be:ff:
         c0:0e:99:99:0b:b8:63:37:de:5d:57:93:f5:b4:a0:d1:6b:ee:
         c3:1f:e3:91:95:98:40:43:19:4a:d5:de:26:04:cd:20:99:fd:
         a4:10:5f:eb:d8:74:a8:30:e7:33:0e:b9:2c:b5:d7:b0:86:3e:
         76:39:20:ef:5f:41:35:ed:98:05:bf:cc:63:d2:d7:48:90:2f:
         b3:d7:e2:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----