Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/umqU2lritWqRDpKskcmedwQ5v9w.cer
File:                     umqU2lritWqRDpKskcmedwQ5v9w.cer (raw, json)
Hash identifier:          wcSKXa2/ODwsO4qstMPYw54EUS7GV46CeRWjy0dKNt8=
Subject key identifier:   BA:6A:94:DA:5A:E2:B5:6A:91:0E:92:AC:91:C9:9E:77:04:39:BF:DC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01859FE7154A9D172DFD5300D8CC306A31D0
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/7f/fd56a1-09d5-431a-b97e-82657d0c4979/1/umqU2lritWqRDpKskcmedwQ5v9w.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/7f/fd56a1-09d5-431a-b97e-82657d0c4979/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 11 Jan 2023 08:16:39 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 62.106.92.0/24

Validation:               Failed, certificate revoked on Mon 09 Oct 2023 13:18:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:9f:e7:15:4a:9d:17:2d:fd:53:00:d8:cc:30:6a:31:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan 11 08:16:39 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=ba6a94da5ae2b56a910e92ac91c99e770439bfdc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:ec:3c:ee:91:4b:a6:5b:c6:ac:1a:fe:01:f6:
                    19:ba:a9:49:73:5b:07:c6:11:b6:43:81:c9:88:e3:
                    05:97:79:df:bc:45:8c:bd:15:94:47:5e:b9:c5:1b:
                    c3:70:0f:2c:c3:27:ca:9a:a9:3e:0d:d0:15:f5:b2:
                    18:2b:2a:8f:32:28:d0:a7:38:9b:23:8d:9c:bb:d7:
                    06:17:48:f8:a9:d3:87:98:69:42:22:e3:a6:43:bf:
                    d8:1c:b9:62:03:68:0d:3c:92:b4:50:04:b0:6b:92:
                    62:c6:2f:64:5e:1b:30:68:df:73:25:23:a1:da:49:
                    8b:d1:27:47:1d:04:7c:4f:c2:47:6a:19:dd:1a:81:
                    78:ea:14:f3:d6:45:c8:70:29:b6:48:06:6b:36:75:
                    ef:62:c7:32:e0:68:cb:2b:d2:25:5a:df:af:27:64:
                    45:42:78:98:b9:8d:ee:1e:e2:62:04:7a:5a:ab:7b:
                    ac:f2:95:93:e8:4d:32:57:7a:f5:fb:a1:e1:7c:47:
                    25:6b:80:d1:33:76:05:ab:7d:b8:b2:de:1d:1a:d0:
                    7a:0b:16:c1:e2:6b:54:c3:96:61:f7:b9:0f:21:7f:
                    3d:eb:8c:75:5a:67:fb:f2:75:9e:99:6f:da:6d:5d:
                    74:5b:44:13:49:50:04:ae:e9:e5:ed:aa:ec:c8:ae:
                    b9:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:6A:94:DA:5A:E2:B5:6A:91:0E:92:AC:91:C9:9E:77:04:39:BF:DC
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/fd56a1-09d5-431a-b97e-82657d0c4979/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/fd56a1-09d5-431a-b97e-82657d0c4979/1/umqU2lritWqRDpKskcmedwQ5v9w.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.106.92.0/24

    Signature Algorithm: sha256WithRSAEncryption
         85:e3:e6:83:64:aa:d2:a3:d7:a9:d5:b3:0d:5c:6e:b0:0e:3e:
         63:f6:4c:79:00:0a:fe:2b:92:0e:98:02:8d:cb:bf:fe:0d:61:
         e8:51:78:ba:aa:8b:de:5c:f8:8f:9d:8f:23:a7:0e:07:79:4c:
         b7:87:c8:b2:0e:9b:06:a9:df:9b:4d:d0:79:a8:31:82:8b:f2:
         a8:6f:5b:71:e4:f8:70:8d:5f:cd:5a:96:d4:08:33:4b:cc:e6:
         69:2d:8b:d0:8a:6d:6c:44:18:e2:bb:6f:ae:4c:ac:e9:86:e1:
         c7:80:0e:7e:0b:e8:4a:25:24:32:12:ab:fb:e5:84:57:40:93:
         c8:d9:e8:8a:85:0e:bd:bf:93:38:99:15:94:cd:73:32:30:ed:
         d2:40:52:a4:c8:35:61:45:81:6c:df:70:7a:34:9a:c6:f6:3e:
         67:62:95:69:32:3f:70:67:3f:fc:8a:59:d7:2d:e7:3f:0e:86:
         24:0e:1f:38:b5:b1:80:88:ce:31:b9:d3:52:30:27:24:c7:6c:
         5b:e9:2d:f1:44:f6:0a:1d:65:57:6b:84:78:31:6d:aa:53:e6:
         98:55:98:60:d2:e5:dd:3c:20:bf:f1:ee:ba:9a:8b:a1:be:9b:
         d2:05:a3:96:98:5a:16:86:e7:a8:ea:43:a8:4c:33:ac:17:24:
         33:f0:ad:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----