Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/uuz01e1oqmkmNX5JdH7HAUETGxo.cer
File:                     uuz01e1oqmkmNX5JdH7HAUETGxo.cer (raw, json)
Hash identifier:          C3aT5j6i+Pr6P14hzaTfmESHtB+4+n1EngFlQw45LA4=
Subject key identifier:   BA:EC:F4:D5:ED:68:AA:69:26:35:7E:49:74:7E:C7:01:41:13:1B:1A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0185C4DFFE37D92E2F5286FAF1A7D0837F8A
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/86/38198a-bdd8-496e-b802-296b6175849c/1/uuz01e1oqmkmNX5JdH7HAUETGxo.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/86/38198a-bdd8-496e-b802-296b6175849c/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 18 Jan 2023 12:34:52 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 62.233.59.0/24

Validation:               Failed, certificate revoked on Mon 16 Oct 2023 10:20:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:c4:df:fe:37:d9:2e:2f:52:86:fa:f1:a7:d0:83:7f:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan 18 12:34:52 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=baecf4d5ed68aa6926357e49747ec70141131b1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:6f:ff:1f:6e:d7:b8:d2:a7:04:7d:12:53:6c:
                    cc:a5:9b:32:e8:8e:d7:44:bd:08:a9:cb:25:d9:34:
                    0c:01:0e:ee:06:f6:0b:cb:3d:41:0b:ca:db:cb:26:
                    9a:6e:bd:2d:8f:66:f1:78:e0:d7:46:d5:89:6a:70:
                    ba:58:9b:51:3a:e0:d0:3e:f1:70:27:cb:40:fa:89:
                    ac:5f:47:81:4b:7c:8d:8c:53:2f:ff:d3:a5:fd:d9:
                    41:86:4e:99:de:4d:c4:9d:e1:ea:f4:49:15:ca:05:
                    1f:37:75:3b:3b:e7:00:7c:a4:04:f1:c5:85:62:f9:
                    3f:6b:b4:f5:eb:98:2b:1c:46:06:22:ab:6b:77:4a:
                    7d:cf:a8:47:4e:11:03:28:00:72:b5:f5:a1:b7:88:
                    4f:25:3a:76:3c:dd:f4:eb:2b:03:ed:fd:8b:7c:cc:
                    24:0d:dd:57:ac:f5:29:25:eb:2c:d6:d2:43:5e:9e:
                    e6:50:1e:87:47:b0:9e:03:26:2e:c4:05:30:69:bf:
                    fb:4a:84:08:2f:08:38:62:8d:36:a9:c1:64:a7:41:
                    d3:bb:0c:a0:63:1a:75:53:19:bd:18:60:34:e6:81:
                    89:a0:43:4f:fb:b4:42:98:61:1c:0b:8d:ec:3f:b9:
                    5b:2c:94:38:4b:9c:59:35:7f:23:86:12:3c:04:ff:
                    8c:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:EC:F4:D5:ED:68:AA:69:26:35:7E:49:74:7E:C7:01:41:13:1B:1A
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/38198a-bdd8-496e-b802-296b6175849c/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/38198a-bdd8-496e-b802-296b6175849c/1/uuz01e1oqmkmNX5JdH7HAUETGxo.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.233.59.0/24

    Signature Algorithm: sha256WithRSAEncryption
         95:e5:89:00:43:1e:79:f7:44:c0:da:ec:9d:bb:87:f7:71:38:
         ed:61:4f:e8:41:57:76:4b:4b:a0:c3:2b:dd:e3:81:54:3a:24:
         90:4e:7e:fc:09:28:26:0f:e9:79:cb:63:c2:10:4e:e7:3c:74:
         4e:21:93:f9:95:91:d0:d6:68:d0:0c:1f:e1:df:29:70:ed:ea:
         05:3e:99:cb:d2:f8:ff:6e:d2:df:dc:19:bf:4d:50:0c:ce:49:
         ee:d9:39:fb:9c:81:e4:59:97:fb:e6:51:7f:03:73:56:26:e1:
         c4:aa:e6:77:bf:13:75:62:80:c4:32:5f:d2:99:d4:67:93:af:
         a2:0f:48:1b:90:25:e5:4d:fa:c3:9a:ac:bf:b5:bc:3b:6c:97:
         21:53:dc:20:4c:d0:e3:27:fb:b2:90:ab:b3:a6:d9:bb:a2:11:
         e9:af:fa:15:75:51:e6:94:50:a8:8e:f2:39:c4:5b:cf:5d:4c:
         ed:6e:7d:77:df:af:0a:1a:b2:76:c5:22:1d:28:74:7d:db:a6:
         5f:fd:a4:d7:27:9c:73:e8:0d:dc:b6:ec:45:50:57:2e:5b:91:
         f7:12:c8:a1:e5:5b:d8:95:d5:0d:f3:13:e8:f6:cf:36:14:ce:
         f4:21:08:1d:3a:56:13:6e:b2:26:48:e2:b1:4b:13:4e:e1:9e:
         40:07:4f:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----