Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ypqFxVL8xgg5BZ_q2wUZxlwb31Q.cer
File:                     ypqFxVL8xgg5BZ_q2wUZxlwb31Q.cer (raw, json)
Hash identifier:          R/YGMoCuBwTRs3i3XuXeCxA7sfScoZ0WKV+ar+tPVgc=
Subject key identifier:   CA:9A:85:C5:52:FC:C6:08:39:05:9F:EA:DB:05:19:C6:5C:1B:DF:54
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018A5F85FA039024709CD769DECB23E000CC
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/aa/cd3dd7-b6bc-4a00-a64a-c376bc532e65/1/ypqFxVL8xgg5BZ_q2wUZxlwb31Q.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/aa/cd3dd7-b6bc-4a00-a64a-c376bc532e65/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 04 Sep 2023 09:28:50 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 217.114.43.0/24

Validation:               Failed, certificate revoked on Wed 27 Dec 2023 12:02:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:5f:85:fa:03:90:24:70:9c:d7:69:de:cb:23:e0:00:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Sep  4 09:28:50 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=ca9a85c552fcc60839059feadb0519c65c1bdf54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:6b:db:85:21:94:1d:5a:cc:f9:5d:6b:19:e7:
                    94:35:a9:b9:f0:5d:0d:e8:c6:a4:e3:ac:34:73:27:
                    c6:4a:ce:4a:3b:0f:32:30:7d:70:be:01:03:cd:fb:
                    6c:4b:f9:33:34:99:11:ea:c2:a3:5c:66:f6:40:d2:
                    40:2c:84:98:2c:73:41:84:c0:a0:1c:ed:41:6a:aa:
                    37:53:8f:07:5d:50:56:b8:3d:d2:2e:64:4b:51:e4:
                    4e:9d:cb:73:83:b7:ff:bd:24:19:3f:7a:76:87:2c:
                    2e:34:15:1c:99:8b:7c:27:9a:e9:8f:53:4d:b5:e7:
                    57:31:df:52:9b:3f:cc:67:ab:dc:b8:23:25:79:28:
                    d3:a5:6f:c4:d4:da:d7:db:6b:ae:fc:ab:bf:99:13:
                    29:4b:ba:e6:bd:91:da:0e:09:90:61:04:3b:38:6f:
                    fd:b9:1e:1e:97:2c:7a:77:30:97:50:34:e0:d0:a4:
                    35:73:64:33:33:8a:ac:cd:b6:a0:17:df:ea:de:e8:
                    dc:bc:a3:52:f6:78:03:3c:f8:db:68:15:a8:1f:39:
                    67:d9:fb:57:1c:32:e4:70:b0:fd:79:29:fe:b1:01:
                    7d:7f:93:75:dc:4c:0a:76:2e:34:39:32:c7:b7:6e:
                    65:9f:7c:07:9c:9c:92:33:78:c0:e9:d4:82:6b:7b:
                    ee:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:9A:85:C5:52:FC:C6:08:39:05:9F:EA:DB:05:19:C6:5C:1B:DF:54
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/cd3dd7-b6bc-4a00-a64a-c376bc532e65/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/cd3dd7-b6bc-4a00-a64a-c376bc532e65/1/ypqFxVL8xgg5BZ_q2wUZxlwb31Q.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  217.114.43.0/24

    Signature Algorithm: sha256WithRSAEncryption
         50:e0:9b:b2:ab:1d:56:32:18:70:a2:fb:80:ba:dd:bc:ad:e2:
         3d:1a:42:7d:03:62:fd:96:ba:29:d4:78:c0:fe:62:ad:fd:b9:
         41:1c:63:93:28:b3:ff:4d:d5:52:72:56:86:fe:22:d5:8a:ca:
         16:00:b7:da:31:ca:11:f0:0b:69:20:2e:88:d5:fe:33:c0:4d:
         e8:a7:fb:35:bd:11:2e:97:f8:3f:18:d2:8a:5b:42:fc:07:52:
         58:a2:af:96:75:94:05:ac:e3:d3:32:6c:fc:52:b0:54:34:34:
         93:fe:31:fc:64:45:d5:28:14:5d:27:1e:14:19:f3:67:0e:9d:
         99:ef:16:66:4d:88:80:70:9b:ed:04:f7:a5:ab:7b:27:50:b7:
         ce:f4:43:8c:ec:86:2b:c3:e9:08:63:92:40:e5:cc:ee:97:64:
         f5:68:21:28:6a:1b:97:fc:b1:73:2b:c4:86:ad:58:54:bc:e6:
         28:76:59:a9:3c:8d:4f:6f:b8:5a:88:86:8b:05:bd:cd:a3:49:
         c8:68:e8:ae:ae:9a:77:a7:a0:d1:38:89:16:73:b2:d2:09:30:
         5e:a9:54:4d:f1:c8:84:0e:0d:66:ab:7a:2c:4e:15:45:b5:02:
         94:da:0c:5e:14:bf:f1:66:b2:59:07:f0:94:60:6b:df:82:49:
         4b:5f:1f:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----