Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0POP-iAelS1ltltost36onhmn7g.cer
File:                     0POP-iAelS1ltltost36onhmn7g.cer (raw, json)
Hash identifier:          uqeaXxyzgKKOiaWci5L6CGxQJQqo+K8UK3iJQzvqPkg=
Subject key identifier:   D0:F3:8F:FA:20:1E:95:2D:65:B6:5B:68:B2:DD:FA:A2:78:66:9F:B8
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018571D61D7A68E12C03CB1E391204D296BE
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/bf/8a149c-e7df-46e5-91a7-98e4e7afaabb/1/0POP-iAelS1ltltost36onhmn7g.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/bf/8a149c-e7df-46e5-91a7-98e4e7afaabb/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 02 Jan 2023 09:35:35 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 46.254.110.0/24
                          IP: 2a11:b700::/29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:71:d6:1d:7a:68:e1:2c:03:cb:1e:39:12:04:d2:96:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 09:35:35 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=d0f38ffa201e952d65b65b68b2ddfaa278669fb8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:36:96:50:60:75:f5:00:7c:19:27:58:56:d5:
                    96:27:02:6c:34:19:5c:99:6c:45:68:34:3d:a0:c3:
                    2f:11:de:63:a9:03:0d:71:d4:0f:ec:a3:84:51:66:
                    e6:ae:03:19:29:7f:72:de:65:49:81:63:05:24:51:
                    7f:3e:af:7c:ea:57:6d:e7:44:c1:4d:eb:c3:54:86:
                    38:79:f6:c5:cc:5b:07:7c:8e:fb:96:64:8c:e3:b7:
                    b2:be:2f:af:19:7a:e0:ab:88:67:9d:b1:d8:f9:22:
                    08:d6:6e:4e:8a:66:5b:92:95:68:b7:79:f7:6d:04:
                    c4:b8:05:8d:b0:36:12:2d:29:b3:16:8a:57:a9:2e:
                    6a:ab:03:78:56:24:b7:88:56:b2:e8:06:d1:ac:fd:
                    44:4f:b9:3f:17:67:79:d4:3a:14:5e:c5:48:23:e9:
                    11:8d:f9:0b:13:c4:4e:a5:5f:ee:fa:eb:f2:c2:c8:
                    c0:c4:3b:69:53:89:c1:54:08:33:a5:73:00:51:99:
                    97:34:7a:14:5c:53:04:c7:69:30:78:2b:f7:6d:8c:
                    4e:12:08:44:ea:88:7d:00:09:36:41:86:17:13:b1:
                    4b:d9:08:bc:be:c3:29:fe:77:59:48:e2:61:0f:0e:
                    3e:aa:8b:a4:9e:3f:36:63:9d:66:a5:3e:7e:5c:10:
                    0e:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:F3:8F:FA:20:1E:95:2D:65:B6:5B:68:B2:DD:FA:A2:78:66:9F:B8
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/8a149c-e7df-46e5-91a7-98e4e7afaabb/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/8a149c-e7df-46e5-91a7-98e4e7afaabb/1/0POP-iAelS1ltltost36onhmn7g.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.254.110.0/24
                IPv6:
                  2a11:b700::/29

    Signature Algorithm: sha256WithRSAEncryption
         95:a6:94:3b:09:ee:18:d3:40:14:1a:bc:b6:1c:e3:f3:10:6b:
         6d:7d:7a:e8:1a:c4:59:fb:57:7b:e3:46:ea:61:dd:e2:8e:ca:
         b4:e3:20:6b:bb:85:25:8f:55:e1:27:2b:45:9c:f7:02:6e:2a:
         13:c4:85:52:e4:ba:34:bc:a3:90:19:bd:ef:9e:05:a5:6d:fb:
         3c:30:79:a7:5b:42:6b:42:f1:b6:51:de:47:ee:64:23:3a:46:
         9c:cf:7f:1c:29:ae:9c:32:47:1c:c7:a4:63:66:a8:dd:6e:d4:
         7d:9b:e5:18:d0:ed:f7:6b:56:50:e0:54:ef:fd:da:fc:e9:bf:
         1d:ea:97:9c:ee:7f:d6:32:02:43:2b:86:dc:15:5f:17:33:47:
         82:40:94:ae:28:ac:09:0d:f9:9c:cb:9f:af:f7:93:a0:4e:d7:
         ee:3d:1f:b8:7b:56:5f:d0:8a:fb:07:1c:a5:ed:5e:33:d6:46:
         69:e8:41:fd:3b:cf:85:80:05:9c:c4:9c:39:2a:32:3f:60:a5:
         8c:da:53:d2:0c:0d:4c:eb:ba:f8:e9:ef:97:df:0a:3f:2f:80:
         70:33:a9:a3:67:23:5d:03:4a:d3:46:11:79:9f:63:46:44:d8:
         1d:38:34:ae:c0:31:7c:15:ad:ce:c6:8e:dc:f7:f8:d0:c4:cd:
         f3:7e:93:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----