Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/tjB7go_8hRVjTOl65QT1pSnNJwE.cer
File:                     tjB7go_8hRVjTOl65QT1pSnNJwE.cer (raw, json)
Hash identifier:          ZtP+lHfWACpIASEi8dRNjUc3pHxj8K++EIs2pPURPb0=
Subject key identifier:   B6:30:7B:82:8F:FC:85:15:63:4C:E9:7A:E5:04:F5:A5:29:CD:27:01
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0187937CC78B5A83E0B6561CB06EB8B68853
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/00/00fe6e-1476-4288-8d15-9d4ae9d00c2e/1/tjB7go_8hRVjTOl65QT1pSnNJwE.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/00/00fe6e-1476-4288-8d15-9d4ae9d00c2e/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Tue 18 Apr 2023 08:30:41 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 213.232.236.0/24

Validation:               Failed, certificate revoked on Mon 11 Dec 2023 15:09:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:93:7c:c7:8b:5a:83:e0:b6:56:1c:b0:6e:b8:b6:88:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Apr 18 08:30:41 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=b6307b828ffc8515634ce97ae504f5a529cd2701
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:12:a7:bf:cd:5d:4d:26:a8:1c:db:f0:19:83:
                    f4:0b:92:6e:3b:7c:97:ed:b9:12:15:f0:df:0b:57:
                    7a:31:65:7b:05:5d:30:f6:b3:c6:6e:80:e4:0c:e0:
                    61:2f:4b:1d:5e:9b:5d:be:ec:03:f2:13:76:c3:18:
                    9c:39:05:0d:c2:d3:04:58:09:85:4c:31:9b:a4:81:
                    68:e8:04:db:64:4a:ef:70:2b:3d:c8:0a:c2:af:b0:
                    29:22:3e:85:c4:4a:9d:53:d9:46:5f:ae:f9:70:65:
                    d1:af:1e:64:59:52:05:a0:fa:f8:41:dd:25:5d:72:
                    43:6b:66:ac:b2:cd:84:0b:87:3a:45:76:7f:a2:b6:
                    9f:e5:c2:99:42:fe:1c:a8:05:1f:fc:00:0a:d0:1a:
                    51:8d:b1:c9:c2:b6:95:c4:d3:65:97:41:22:92:37:
                    7d:5d:08:fd:3e:4a:b1:b3:7f:d5:50:f1:72:a4:fb:
                    66:10:2f:33:4f:b1:47:49:41:5d:64:da:2d:17:f2:
                    c5:6a:ed:5c:a4:0c:5c:20:da:a9:92:63:80:71:e0:
                    35:27:0b:1f:73:80:1e:69:3d:a7:1b:46:49:b8:b7:
                    74:7a:f6:f8:d2:c5:de:4b:90:bf:6b:c2:ce:f4:ab:
                    9e:9f:eb:9f:aa:29:a9:20:f2:b3:b0:ca:fc:f8:ce:
                    c7:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:30:7B:82:8F:FC:85:15:63:4C:E9:7A:E5:04:F5:A5:29:CD:27:01
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/00fe6e-1476-4288-8d15-9d4ae9d00c2e/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/00fe6e-1476-4288-8d15-9d4ae9d00c2e/1/tjB7go_8hRVjTOl65QT1pSnNJwE.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  213.232.236.0/24

    Signature Algorithm: sha256WithRSAEncryption
         75:43:0d:c4:8d:9c:27:d9:e9:b3:87:94:d4:25:f3:c0:46:af:
         c3:d5:89:76:fc:fd:6f:d8:ac:a3:23:ae:d3:40:d4:db:2e:68:
         06:5f:7e:98:07:6b:70:f8:f5:06:90:18:2e:57:1c:b9:d7:18:
         c5:f8:44:a2:16:ea:b4:6a:5b:d7:5c:e2:13:44:1b:d4:3e:41:
         7c:22:57:d6:79:2e:70:5e:5c:6a:24:c0:1c:37:e8:36:92:5f:
         bc:64:89:a8:e9:98:4f:eb:ca:65:c3:07:ff:fa:5b:8a:a4:6e:
         41:50:39:d8:b4:73:cf:23:6b:64:4c:ea:74:b4:c4:4e:4a:a4:
         d0:a7:87:96:68:bf:e2:9a:20:87:03:0c:7e:6c:3b:86:c8:99:
         21:7e:74:e6:31:62:42:29:87:4e:19:73:44:1f:15:1d:69:f7:
         30:38:f9:f1:72:19:90:5e:eb:d0:51:2b:42:26:7a:db:20:12:
         63:74:20:dd:df:4e:3c:dc:4f:de:0a:38:53:7f:8c:b1:a4:a1:
         44:d7:73:27:74:cf:44:1a:b5:91:7c:03:e2:b0:a5:4e:45:82:
         76:51:6e:d4:05:dd:41:65:0c:5d:7c:dc:59:de:36:13:e8:91:
         19:74:1e:64:6f:34:d2:1c:fb:fb:28:a3:f0:59:86:53:6d:e6:
         c5:df:37:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----