Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/zHYgGl5RZl6AV9JsRW3rsDJzDLc.cer
File:                     zHYgGl5RZl6AV9JsRW3rsDJzDLc.cer (raw, json)
Hash identifier:          IGwBPodyhwFDB6NcdtZ4WPK5y9QviAYM20vVIcckSOk=
Subject key identifier:   CC:76:20:1A:5E:51:66:5E:80:57:D2:6C:45:6D:EB:B0:32:73:0C:B7
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0185708BFC126AC33FCD0EE5B1AE072CB532
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/79/04f02d-2ef4-4b62-8c1c-3e3311b27d2f/1/zHYgGl5RZl6AV9JsRW3rsDJzDLc.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/79/04f02d-2ef4-4b62-8c1c-3e3311b27d2f/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 02 Jan 2023 03:35:00 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 185.173.130.0/24

Validation:               Failed, certificate revoked on Wed 19 Jul 2023 10:38:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:8b:fc:12:6a:c3:3f:cd:0e:e5:b1:ae:07:2c:b5:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 03:35:00 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=cc76201a5e51665e8057d26c456debb032730cb7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:da:ff:87:1d:69:65:af:08:46:6e:98:77:7b:
                    a9:eb:64:9d:86:a2:6d:f7:f2:75:bd:96:0b:b8:9b:
                    29:bb:e4:24:46:72:d1:2b:6c:3d:e6:92:7c:f0:15:
                    63:26:97:ef:07:67:a0:8f:69:ba:60:5b:a4:c2:9c:
                    59:ec:d7:4d:45:e7:93:f6:a6:da:e8:61:c0:cd:b2:
                    96:ec:f1:9a:a8:f7:32:de:f8:22:14:c0:57:9b:52:
                    e7:aa:9c:dd:df:a7:4b:b3:69:88:7e:ed:be:0a:27:
                    b1:d2:43:99:66:ab:54:0e:06:09:bc:79:70:9d:7b:
                    91:f8:15:06:1f:f8:97:cd:79:01:ad:17:38:ce:15:
                    bd:5c:d2:31:a2:4e:66:50:65:ad:53:af:b7:7f:d1:
                    49:6a:c8:a2:1d:22:9e:14:61:30:0b:1e:c3:df:1d:
                    2e:70:22:d0:a1:ab:87:29:f1:d7:7a:25:25:5f:bb:
                    1e:4e:fc:4d:e5:ea:e3:de:f2:a7:d4:9c:7b:dc:80:
                    5a:0e:c8:e1:ab:42:96:70:19:45:41:ab:bf:62:4e:
                    ed:6b:47:58:ba:ec:b4:57:11:7f:31:5c:d6:e9:0b:
                    23:b8:13:12:d2:e6:99:47:13:32:38:6f:79:4a:3a:
                    4f:1c:99:79:6d:2c:f0:5c:3b:87:e8:1a:10:81:28:
                    0a:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:76:20:1A:5E:51:66:5E:80:57:D2:6C:45:6D:EB:B0:32:73:0C:B7
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/04f02d-2ef4-4b62-8c1c-3e3311b27d2f/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/04f02d-2ef4-4b62-8c1c-3e3311b27d2f/1/zHYgGl5RZl6AV9JsRW3rsDJzDLc.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.173.130.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8e:e5:ec:33:7c:bb:fc:e5:cf:de:95:56:28:ff:8f:55:c2:0b:
         d0:fd:8b:a6:43:cf:59:7a:33:56:d9:b3:ac:fe:42:14:58:91:
         02:44:d9:a1:a2:94:dd:8d:a8:c5:62:40:26:c4:92:0e:72:61:
         bf:28:b0:41:75:84:df:fa:92:97:9e:1c:90:57:2d:eb:bc:99:
         80:8e:05:bf:42:4a:4c:b8:6b:af:a6:5c:8c:99:48:d0:01:4d:
         9c:47:ab:f1:51:0a:98:90:a2:64:57:29:12:1a:84:ca:1c:74:
         c5:58:1c:54:8a:7a:00:b5:3c:07:b9:5e:a5:46:17:fd:54:a0:
         12:42:69:bc:40:f5:05:f9:06:c3:b2:35:d9:05:c5:97:eb:d9:
         44:53:ea:99:60:13:51:87:68:0c:14:6d:d2:f4:ed:15:2e:f1:
         76:b0:18:96:bb:69:c0:82:b5:f5:86:05:bf:66:2d:34:ab:d2:
         77:d7:96:6d:bf:b6:d8:81:4d:aa:6e:3c:18:47:66:14:60:b7:
         66:ed:11:68:3c:44:a5:eb:bb:a5:b3:53:51:d9:56:80:ba:f9:
         5e:67:f6:fb:49:98:bf:d8:f1:ad:28:41:bb:0d:f4:dc:6f:19:
         b4:2d:e0:a2:46:16:80:59:92:7c:15:de:b8:b6:4a:36:9f:3d:
         aa:ab:8b:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----