Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/yjt6AdfbQCXJi0kLOVb6nkbh82I.cer
File:                     yjt6AdfbQCXJi0kLOVb6nkbh82I.cer (raw, json)
Hash identifier:          mRf2RHnTKkZVuxHqZVjiTeseIm/akx3xug/mIM4BtF0=
Subject key identifier:   CA:3B:7A:01:D7:DB:40:25:C9:8B:49:0B:39:56:FA:9E:46:E1:F3:62
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856E65F7AA50713FE514F6DF3EA8463567
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/d5/72b0bf-6ffd-456c-92c4-759496cf7383/1/yjt6AdfbQCXJi0kLOVb6nkbh82I.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/d5/72b0bf-6ffd-456c-92c4-759496cf7383/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 17:34:14 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 146.19.29.0/24
                          IP: 2a12:3100::/29

Validation:               Failed, certificate revoked on Wed 15 Nov 2023 14:05:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6e:65:f7:aa:50:71:3f:e5:14:f6:df:3e:a8:46:35:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 17:34:14 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=ca3b7a01d7db4025c98b490b3956fa9e46e1f362
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:f2:8c:69:09:ce:e0:8c:ed:da:5b:27:78:b4:
                    f4:e6:f7:81:54:11:bc:d3:02:16:18:bf:06:12:54:
                    05:c4:56:c2:ca:c7:53:77:45:85:90:fe:5b:e9:c8:
                    d1:fa:b1:85:f7:08:35:1e:98:08:da:06:9b:95:16:
                    75:b9:cf:f7:f6:0d:c6:75:13:f9:aa:19:9a:cc:66:
                    9f:30:75:94:77:8c:cd:e5:9d:1b:ee:58:e7:34:e1:
                    17:95:6f:ab:03:fb:a2:d9:ed:ad:2f:ca:9d:1d:43:
                    83:b6:28:49:9e:90:08:be:f5:67:81:87:c2:2d:04:
                    4c:21:24:a0:cf:c9:3d:0c:91:12:a2:ec:78:dd:52:
                    c4:28:dd:b7:e2:86:46:f5:c3:6e:02:d0:d5:b3:84:
                    05:b1:bc:a3:dc:c9:c2:e8:f8:c4:cc:ce:42:12:4c:
                    b6:a9:d5:30:2d:3f:b6:68:85:52:b8:68:f4:aa:f7:
                    8e:6b:0e:43:c1:f8:93:d0:9c:42:e9:ae:6f:cd:7d:
                    4a:bd:91:bc:b5:fd:cb:c9:81:e9:17:de:d4:76:3d:
                    e2:28:5d:e2:e9:c0:04:64:2d:e4:af:f8:a3:4a:cb:
                    9b:3a:64:0e:ed:71:43:5b:0c:9d:d8:6f:2d:e8:a9:
                    8c:5a:f4:5f:5a:4b:68:63:d2:a7:6c:9a:d3:c8:9b:
                    11:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:3B:7A:01:D7:DB:40:25:C9:8B:49:0B:39:56:FA:9E:46:E1:F3:62
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/72b0bf-6ffd-456c-92c4-759496cf7383/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/72b0bf-6ffd-456c-92c4-759496cf7383/1/yjt6AdfbQCXJi0kLOVb6nkbh82I.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.19.29.0/24
                IPv6:
                  2a12:3100::/29

    Signature Algorithm: sha256WithRSAEncryption
         55:21:bf:b3:cc:f9:0d:9e:58:45:96:6a:17:d5:85:af:d8:43:
         64:28:3a:1b:20:cf:fe:ce:48:da:ab:97:b8:02:60:31:93:2a:
         d6:d2:92:a9:97:65:16:90:9d:df:5f:0c:ee:f2:6c:64:05:e8:
         08:4b:eb:f2:bd:e4:18:04:8d:3d:7f:ac:a7:28:f3:11:69:54:
         19:34:5a:de:2e:7d:aa:f9:7c:bc:0f:8e:b0:e1:d2:cf:9e:ed:
         72:83:68:ad:62:19:5a:f3:7a:32:36:ff:49:27:4e:8e:2a:4b:
         81:0a:e6:2b:02:c6:8f:8f:22:b9:b9:88:f4:13:8d:eb:94:b2:
         66:bc:29:57:01:01:39:4b:41:51:56:f5:18:c9:2c:44:74:e0:
         b2:c5:71:aa:50:7e:30:eb:b3:07:c8:2b:53:9d:30:b8:0a:75:
         24:dc:2a:d5:8e:66:d2:12:29:c9:e3:c2:01:8a:ae:ea:4d:45:
         5d:70:d0:f5:04:b8:a1:d3:9f:2d:37:89:93:37:a7:e7:71:f6:
         4f:20:e3:b5:ce:8f:ec:50:98:80:ef:85:92:e5:c5:82:de:e6:
         f9:3b:72:8e:eb:63:61:0b:f9:82:af:dd:47:9f:6f:29:04:71:
         da:39:a1:38:bb:ee:27:e5:d4:87:80:19:0d:a1:65:a3:10:d0:
         bc:60:70:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----