Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/snnauRUcKcLPOcMFnnr0ikE6cuY.cer
File:                     snnauRUcKcLPOcMFnnr0ikE6cuY.cer (raw, json)
Hash identifier:          LnjR9fypDgJ+7062di8AewkDR2R/6BuCrkauSIke+Hk=
Subject key identifier:   B2:79:DA:B9:15:1C:29:C2:CF:39:C3:05:9E:7A:F4:8A:41:3A:72:E6
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018BAE901BC62A6E6E6D7978EC3983AC114D
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/33/8fd238-3ad6-448b-b902-caae24fa1d00/1/snnauRUcKcLPOcMFnnr0ikE6cuY.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/33/8fd238-3ad6-448b-b902-caae24fa1d00/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 08 Nov 2023 10:52:41 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 176.97.220.0/24

Validation:               Failed, certificate revoked on Mon 13 Nov 2023 14:52:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:ae:90:1b:c6:2a:6e:6e:6d:79:78:ec:39:83:ac:11:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Nov  8 10:52:41 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=b279dab9151c29c2cf39c3059e7af48a413a72e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:a3:e5:63:1f:92:f5:d2:70:55:1c:1b:80:78:
                    b3:02:c0:46:7c:9e:c7:4a:9c:70:e1:64:81:bb:00:
                    b2:41:10:2e:59:4a:21:1e:d8:1b:b6:c4:ef:9f:51:
                    ff:ed:d5:4b:be:c4:15:2a:67:12:f3:fe:e3:8b:9a:
                    54:f9:dc:56:92:a7:81:3c:0e:43:15:39:ac:6b:7d:
                    aa:89:eb:13:86:ff:93:47:65:98:2e:f8:43:d5:c9:
                    5b:bb:d7:33:ff:d6:31:8e:c3:c5:ef:1c:3c:d1:79:
                    f7:49:74:b1:20:11:57:6b:89:11:96:32:84:f8:36:
                    e4:60:1a:3d:62:c9:55:28:ae:87:f4:2e:cd:68:e0:
                    01:b0:98:c3:b1:a5:e9:6e:b3:3c:81:d5:d7:8c:39:
                    52:ab:fa:fb:d2:e5:bd:cd:57:1e:3e:2e:1d:88:86:
                    bc:b6:47:66:5b:97:5e:d1:4d:aa:7d:14:14:ab:43:
                    07:ae:cb:c1:c5:db:19:f2:73:45:26:66:9e:45:1b:
                    c9:0f:e7:b9:3b:5b:78:53:e7:a0:97:d3:83:25:1a:
                    62:5b:d4:e6:3f:bd:0c:52:52:5d:a3:9d:2a:a5:ac:
                    b2:a0:9f:77:01:01:92:8a:9c:d7:2d:16:3b:ce:37:
                    66:82:1b:09:52:f2:a1:46:32:8f:df:26:26:03:bd:
                    d4:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:79:DA:B9:15:1C:29:C2:CF:39:C3:05:9E:7A:F4:8A:41:3A:72:E6
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/8fd238-3ad6-448b-b902-caae24fa1d00/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/8fd238-3ad6-448b-b902-caae24fa1d00/1/snnauRUcKcLPOcMFnnr0ikE6cuY.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  176.97.220.0/24

    Signature Algorithm: sha256WithRSAEncryption
         51:21:27:6c:b5:f1:d5:5c:4c:d3:59:62:82:38:37:cc:42:2c:
         fe:76:55:5a:07:9a:db:79:77:70:76:94:80:14:4b:31:ef:e1:
         7c:12:1a:00:46:1c:39:c4:6e:55:0c:52:71:34:47:44:3e:78:
         ed:3e:03:ce:1b:6d:85:c9:75:8d:9e:87:f4:c9:4f:e9:6a:04:
         d3:85:15:b8:19:a7:3c:f2:f1:62:d1:75:b9:12:ce:8a:4b:7c:
         fb:ad:2a:b4:36:d0:00:6c:85:ed:92:e4:80:1f:b3:2e:e2:8a:
         3c:65:8d:ff:d1:2c:4f:e9:8c:68:a5:aa:a6:1c:63:25:1d:75:
         5d:f5:d1:c3:d9:8b:1a:24:39:62:ff:9b:fe:72:d1:7b:99:a4:
         a4:11:2b:2e:dd:41:f2:57:d0:8d:5a:60:84:83:5f:69:80:62:
         59:6f:e6:f8:b3:e8:ef:88:24:64:24:d0:7d:f5:3a:14:37:32:
         32:27:a5:de:d1:b5:09:fc:b3:35:87:43:d0:f1:3b:1d:4a:df:
         fa:b8:05:d1:1d:5b:a8:d6:91:fd:e5:f1:92:57:be:7a:45:75:
         4f:6d:87:60:5a:fc:b1:c7:f5:79:ee:74:85:f8:0f:7e:5e:8c:
         ba:53:92:62:89:cc:1a:9e:f2:82:89:f8:6d:bb:94:cd:a2:52:
         73:93:e8:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----