Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/r8OkGSqYAFRgP2a93O7Wnq_EOXA.cer
File:                     r8OkGSqYAFRgP2a93O7Wnq_EOXA.cer (raw, json)
Hash identifier:          5DZw1Q8hFcDbHazin6aeclaiFWv8hy6xavIRHan6EGo=
Subject key identifier:   AF:C3:A4:19:2A:98:00:54:60:3F:66:BD:DC:EE:D6:9E:AF:C4:39:70
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856D899C2509C54187B7E6E478550A783B
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/4e/768112-8bc2-49a0-9ebc-67dd78c70d96/1/r8OkGSqYAFRgP2a93O7Wnq_EOXA.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/4e/768112-8bc2-49a0-9ebc-67dd78c70d96/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 13:33:33 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 185.147.53.0/24

Validation:               Failed, certificate revoked on Fri 25 Aug 2023 08:39:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6d:89:9c:25:09:c5:41:87:b7:e6:e4:78:55:0a:78:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 13:33:33 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=afc3a4192a980054603f66bddceed69eafc43970
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:46:32:06:fb:7a:38:44:d5:d8:84:ec:cb:a2:
                    0e:f8:d8:94:f1:94:3c:ed:b2:a0:57:82:c7:0e:3e:
                    6d:42:ae:28:55:4d:03:1d:14:cf:eb:d2:e5:60:04:
                    9b:a2:e9:b2:fe:4f:3a:37:04:9e:77:6d:ea:a8:2b:
                    05:a4:a5:35:c0:b9:9f:b9:af:56:74:ea:f5:25:13:
                    06:f2:0e:dd:df:7c:1c:15:03:29:21:a8:57:96:39:
                    df:03:7f:54:12:00:89:ce:a0:5b:13:58:09:28:05:
                    fb:72:9f:55:89:5a:61:66:03:b8:91:3c:14:0f:68:
                    9c:91:a0:5c:c3:4f:92:71:3e:5a:44:5c:de:ec:3e:
                    84:24:a8:b0:cc:68:7e:9b:e4:3a:e6:0e:9f:1a:ed:
                    44:ac:17:7d:3d:44:64:2e:5a:47:d5:e0:dc:fd:ee:
                    86:e3:31:19:5c:e0:f7:c0:dd:04:a2:19:ea:7d:76:
                    a1:b9:94:7e:2f:c2:3a:39:a2:22:93:24:7a:c5:34:
                    a0:30:67:0d:45:d6:4d:70:cb:45:75:5a:8f:2f:bc:
                    7f:ab:54:62:ac:49:5c:36:aa:0f:64:fa:c4:3d:f7:
                    37:1e:d2:60:ec:98:8f:60:0b:1c:c3:d6:af:cc:6b:
                    27:da:f7:60:ec:75:bb:67:69:a3:89:0b:57:f8:55:
                    c9:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:C3:A4:19:2A:98:00:54:60:3F:66:BD:DC:EE:D6:9E:AF:C4:39:70
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/768112-8bc2-49a0-9ebc-67dd78c70d96/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/768112-8bc2-49a0-9ebc-67dd78c70d96/1/r8OkGSqYAFRgP2a93O7Wnq_EOXA.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.147.53.0/24

    Signature Algorithm: sha256WithRSAEncryption
         71:24:26:7d:94:af:74:d9:c4:9c:d8:af:95:70:17:c4:be:b3:
         b2:99:d9:e1:91:48:d0:9a:dc:77:79:ed:a8:1b:b2:06:d6:52:
         54:fa:25:47:d8:73:1a:e0:29:64:74:65:0c:e6:8e:4b:94:38:
         b3:07:ea:2b:65:34:68:0d:aa:62:78:31:89:e1:41:47:4d:d3:
         2a:34:ec:ee:06:1f:22:d1:43:33:29:e4:79:c7:20:cc:06:0e:
         19:eb:8e:0c:13:16:ad:3e:e7:32:77:e1:25:d8:b0:94:9b:36:
         a7:df:ee:87:c4:dd:fe:47:88:8b:9a:5e:50:3a:84:a9:67:3b:
         3a:5c:e0:f8:91:13:4e:64:64:07:08:d2:58:5a:f3:e7:1e:a2:
         5b:e6:bd:3e:1d:3f:06:66:3b:9d:b2:ff:04:be:72:8a:e2:a9:
         cd:91:ec:7c:72:97:11:8c:b5:6d:40:8c:23:31:f6:47:dd:77:
         97:fa:17:e3:f7:47:7f:c6:e8:c0:b6:79:b2:a9:25:7b:4f:f9:
         fd:0c:7b:41:86:2e:53:d5:31:48:15:f1:76:65:9e:c1:4d:a6:
         d8:b2:70:ec:51:d8:7c:fe:48:62:6f:43:2b:4d:a4:73:e2:4a:
         6d:80:ef:54:3a:2b:da:54:03:d4:5c:24:da:5b:3e:2a:db:64:
         f6:45:7b:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----