Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/pLZo0jRn8sj2dCbJ5ovknEJH7nk.cer
File:                     pLZo0jRn8sj2dCbJ5ovknEJH7nk.cer (raw, json)
Hash identifier:          hTTCVCOOJAtyFU3dv/BDLoYXXf3v84VqF1H4yu8f9Wc=
Subject key identifier:   A4:B6:68:D2:34:67:F2:C8:F6:74:26:C9:E6:8B:E4:9C:42:47:EE:79
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018CC500F9411591303F29B7299B74F890D7
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/91/2e28f5-8268-41e9-8bc7-146641f208bc/1/pLZo0jRn8sj2dCbJ5ovknEJH7nk.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/91/2e28f5-8268-41e9-8bc7-146641f208bc/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 12:30:24 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    IP: 178.211.139.0/24

Validation:               Failed, certificate revoked on Mon 15 Apr 2024 05:43:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c5:00:f9:41:15:91:30:3f:29:b7:29:9b:74:f8:90:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 12:30:24 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=a4b668d23467f2c8f67426c9e68be49c4247ee79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:ff:56:85:02:0b:52:92:a3:e2:a1:04:c0:8b:
                    6f:a8:47:61:af:dd:6e:bf:c1:21:82:df:15:81:6c:
                    1d:c3:ed:cd:b6:56:85:f9:c3:09:18:f6:cc:b3:61:
                    5c:a3:b9:41:26:d2:6b:52:a1:9d:46:c7:8d:b5:51:
                    17:d1:04:06:e4:e0:0a:1e:e2:88:90:f7:04:8d:7b:
                    84:d3:af:dc:a0:3c:9f:af:97:0c:94:b5:c1:8f:05:
                    71:94:94:0a:41:01:6c:10:54:8b:42:df:86:55:53:
                    b4:e3:8e:d4:a2:8e:47:79:23:6c:e1:60:58:15:56:
                    0a:0c:29:72:70:72:e5:95:ac:a4:c1:59:4d:24:03:
                    c0:b3:3f:32:08:54:6e:65:dd:6f:db:58:31:5f:27:
                    fd:e2:91:c5:da:1a:62:b6:19:0b:c8:e5:31:64:2b:
                    87:af:4e:b8:2e:8d:15:0e:8c:e3:d8:c7:59:a3:bc:
                    eb:b5:f7:28:09:7c:6b:36:8f:9a:bc:28:22:23:69:
                    29:3f:e4:a8:23:ba:a5:fa:1a:a4:d1:2b:91:1e:b8:
                    0d:58:d8:ad:ee:62:89:56:92:d1:ba:ae:82:f0:fe:
                    dd:69:a2:08:b4:52:8a:37:e3:5c:01:75:19:41:d7:
                    05:6e:ab:d0:73:3a:a8:af:07:f1:43:02:9a:39:0e:
                    9a:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:B6:68:D2:34:67:F2:C8:F6:74:26:C9:E6:8B:E4:9C:42:47:EE:79
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/2e28f5-8268-41e9-8bc7-146641f208bc/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/2e28f5-8268-41e9-8bc7-146641f208bc/1/pLZo0jRn8sj2dCbJ5ovknEJH7nk.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  178.211.139.0/24

    Signature Algorithm: sha256WithRSAEncryption
         07:7c:63:e3:15:a1:6a:8a:ce:8e:d6:37:86:81:c7:8f:e3:02:
         ea:85:b2:67:16:62:c5:21:6a:45:f8:6a:7e:c5:c2:57:65:47:
         77:b3:37:f9:25:00:d5:b7:a4:d6:5c:92:c2:d4:84:ec:db:9c:
         75:b2:63:df:2c:92:3e:3f:93:c6:4b:38:eb:b9:05:75:d8:47:
         c3:5e:8d:2b:d3:18:37:1f:1e:65:e8:9f:18:44:d5:73:9e:6a:
         bc:c0:48:ec:bc:71:42:89:32:19:14:0a:de:ba:7b:ff:29:18:
         e0:fb:47:8e:e7:71:d7:37:96:85:ea:b7:16:5c:de:2e:f3:7e:
         9e:89:41:53:8c:0a:86:ec:b9:2e:54:97:e8:81:18:7d:d7:32:
         c2:db:ed:9c:a6:7a:54:ef:f2:b0:41:51:8a:d6:89:4c:85:ed:
         09:fe:06:da:44:0d:e1:3b:f3:c0:4d:c8:62:9f:b5:15:c3:48:
         80:41:f6:ef:6a:dc:09:ad:7e:42:6d:98:b9:6b:b1:e3:af:62:
         7d:67:fd:8b:4c:10:5e:3d:3e:9a:4a:7b:ed:bf:9f:ba:e1:41:
         f9:af:2b:c2:7b:02:f3:7e:be:64:4d:0c:f8:53:b7:d7:35:35:
         72:4d:61:0f:36:62:22:66:6e:29:ed:17:1d:69:8a:1a:b2:a3:
         f3:ec:dd:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----