Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/xky4s7RSP7D_IE45mpClPHMtvPY.cer
File:                     xky4s7RSP7D_IE45mpClPHMtvPY.cer (raw, json)
Hash identifier:          6jXJiNfwW1FzvoarJgFqXsXKxEyqLNudNz2kmAgB9kc=
Subject key identifier:   C6:4C:B8:B3:B4:52:3F:B0:FF:20:4E:39:9A:90:A5:3C:73:2D:BC:F6
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01884E91EC11E1541C01DC5BDE78E2B26CEC
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/2a/c1e14a-f1fd-4b99-a445-57c6142b6033/1/xky4s7RSP7D_IE45mpClPHMtvPY.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/2a/c1e14a-f1fd-4b99-a445-57c6142b6033/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 24 May 2023 16:22:46 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 194.104.231.0/24

Validation:               Failed, certificate revoked on Mon 11 Dec 2023 13:09:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:4e:91:ec:11:e1:54:1c:01:dc:5b:de:78:e2:b2:6c:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: May 24 16:22:46 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=c64cb8b3b4523fb0ff204e399a90a53c732dbcf6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:78:8e:19:58:b5:c9:93:49:bb:03:05:96:67:
                    ba:60:41:5b:18:bd:3f:0e:7c:f5:b6:81:61:d2:26:
                    d6:80:71:a0:09:c7:c9:91:3f:45:a2:d1:d7:a7:7d:
                    e4:00:33:c1:8d:a1:58:fd:92:1a:72:7e:66:7e:20:
                    46:5b:83:b7:6c:d7:0a:8c:91:91:25:32:e5:3f:34:
                    fa:e4:c2:6c:20:9b:4a:77:df:38:ff:dd:75:02:70:
                    f4:ad:43:a1:7b:c3:02:5c:43:28:5c:18:fc:82:2b:
                    8a:59:56:4a:90:45:51:cc:68:e5:56:11:19:39:cf:
                    c6:26:37:9b:52:63:7d:c0:60:b3:ee:16:74:dd:15:
                    89:64:8b:01:f2:5c:dc:b5:45:a6:6e:f3:4b:76:2f:
                    32:ed:96:23:0c:8b:2d:cd:03:92:28:a0:28:96:5a:
                    d8:14:3a:bb:83:18:9f:f7:b9:b6:de:50:eb:20:28:
                    e2:36:9a:93:dc:fc:12:72:bb:a1:ad:9a:18:81:38:
                    ec:e7:bb:a2:76:8b:aa:a0:8a:ca:8d:01:74:53:91:
                    a2:47:20:4d:e1:be:78:4c:9e:3c:40:c5:cd:c5:3a:
                    dd:99:16:64:9a:98:d3:c3:29:5a:ae:c9:8f:d4:61:
                    fc:b2:6c:51:a9:8d:99:2a:41:90:25:83:0e:30:ed:
                    c1:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:4C:B8:B3:B4:52:3F:B0:FF:20:4E:39:9A:90:A5:3C:73:2D:BC:F6
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/c1e14a-f1fd-4b99-a445-57c6142b6033/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/c1e14a-f1fd-4b99-a445-57c6142b6033/1/xky4s7RSP7D_IE45mpClPHMtvPY.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.104.231.0/24

    Signature Algorithm: sha256WithRSAEncryption
         78:a2:66:5d:02:0d:f4:51:8b:39:c8:5b:67:15:ca:71:e3:48:
         25:d2:b7:96:d5:b2:11:97:cb:d0:9e:9a:a3:85:67:a1:13:75:
         9c:44:50:73:e9:46:da:64:7c:6c:46:35:38:a2:ea:78:05:e4:
         3d:6c:ac:fb:fa:2b:b1:84:ee:10:bc:85:0d:cf:ea:1b:9e:69:
         bf:fa:38:1e:48:a9:c4:11:38:21:5f:dc:a6:b2:67:d5:1a:00:
         b1:2a:52:00:65:08:d7:62:ff:28:af:dd:e7:a0:98:6f:6e:26:
         0d:c7:94:9b:f4:ae:9b:b3:30:ce:bf:e4:a7:a7:50:fa:76:ea:
         ca:2d:54:f6:5e:76:f3:60:04:f7:44:8a:86:0c:f3:c1:db:64:
         55:21:0c:01:89:81:57:4c:b4:d9:32:a3:94:5a:2b:2e:f4:88:
         b4:fd:e8:e8:08:a7:12:83:55:43:88:8f:bc:20:44:82:97:79:
         7d:44:1f:55:e5:22:4e:c8:af:71:6d:b7:e0:11:e8:3a:cc:7f:
         00:23:f5:01:79:a3:49:39:4c:df:d1:bd:ea:49:2b:3a:f3:b4:
         44:f1:4c:19:0d:c0:69:c1:8c:fa:8c:7b:8b:71:d4:d8:96:d0:
         91:5d:e1:f1:a5:f7:df:26:77:fd:0f:e8:e7:35:1e:ba:42:bc:
         c2:f9:cf:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----