Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0gSOSYl-YA8dG9fE3N_6mf0vE0w.cer
File:                     0gSOSYl-YA8dG9fE3N_6mf0vE0w.cer (raw, json)
Hash identifier:          Ol7sxdwh58qOwkm/TorPMtaCm+Ddi/QrioIDHXyt8w8=
Subject key identifier:   D2:04:8E:49:89:7E:60:0F:1D:1B:D7:C4:DC:DF:FA:99:FD:2F:13:4C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0186089EC395280AC8A808A406A593EDB538
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/c6/bbad9e-46d7-4d4f-901d-1935dd953700/1/0gSOSYl-YA8dG9fE3N_6mf0vE0w.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/c6/bbad9e-46d7-4d4f-901d-1935dd953700/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Tue 31 Jan 2023 16:17:47 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 146.19.97.0/24
                          IP: 2a13:800::/29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:08:9e:c3:95:28:0a:c8:a8:08:a4:06:a5:93:ed:b5:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan 31 16:17:47 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=d2048e49897e600f1d1bd7c4dcdffa99fd2f134c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:57:46:e6:5e:f1:ff:70:b4:8e:98:1b:ef:0f:
                    3e:7d:64:a7:a5:a1:1f:aa:ec:3f:eb:06:84:af:b9:
                    24:69:b4:34:52:01:6f:90:d7:35:9d:38:26:8c:ac:
                    88:24:13:6e:be:9f:b2:91:9a:cd:c0:b7:a9:b0:1b:
                    78:5f:4e:e6:04:d3:17:b0:d8:df:1f:f6:d7:ce:d6:
                    6b:09:c6:40:6c:12:04:95:5c:5b:76:89:fe:49:43:
                    a7:57:3a:f3:a2:07:fc:35:1d:b7:2d:4e:cd:6e:ae:
                    d1:97:f0:aa:23:3f:17:db:c3:58:15:fe:73:0b:62:
                    9f:f8:3a:dd:e6:dd:ff:88:ea:06:f4:2b:1b:1e:7b:
                    37:4f:7d:55:be:7f:38:73:ed:db:ae:33:e0:11:58:
                    f1:ec:7d:2c:ed:ff:c0:9b:fd:ca:7a:1a:f8:f8:3b:
                    1c:7d:db:bd:4a:00:1d:eb:ac:d4:22:d6:b1:49:9c:
                    8b:2b:d5:71:90:a9:7e:56:78:4f:d3:70:24:d1:94:
                    51:ea:da:c6:81:2f:0b:ca:57:ac:72:01:96:00:9d:
                    0b:bf:5d:df:4c:e3:f7:50:a9:8b:91:14:93:0f:15:
                    b3:e2:12:6f:6b:2b:63:98:0a:5b:c0:75:e8:f1:16:
                    1d:27:45:7b:25:d0:d0:4c:c0:d2:3c:72:1a:02:05:
                    f9:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:04:8E:49:89:7E:60:0F:1D:1B:D7:C4:DC:DF:FA:99:FD:2F:13:4C
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/bbad9e-46d7-4d4f-901d-1935dd953700/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/bbad9e-46d7-4d4f-901d-1935dd953700/1/0gSOSYl-YA8dG9fE3N_6mf0vE0w.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.19.97.0/24
                IPv6:
                  2a13:800::/29

    Signature Algorithm: sha256WithRSAEncryption
         07:d3:54:80:ce:35:61:fb:70:dd:cd:12:a3:f5:53:ec:9d:f7:
         9c:44:40:ae:c0:01:21:ce:e5:2c:08:0b:18:65:59:45:3e:ed:
         5c:be:69:79:22:df:6b:17:02:23:a6:03:8e:6f:ae:a5:b1:cf:
         31:a1:bc:fc:b1:c5:46:f9:a3:e9:5c:19:3f:3d:9b:c5:f8:ba:
         98:c3:39:ec:5d:08:39:c5:50:9b:6e:95:3e:f2:92:8a:d6:ea:
         c5:82:54:e7:31:b7:49:2b:c8:2d:03:f8:d2:99:b0:69:b1:f2:
         01:e2:52:40:e3:3e:e5:2c:7d:fe:28:77:1c:13:5f:1d:3d:5d:
         21:f4:6d:9a:62:f9:09:44:57:d0:60:92:5d:e8:75:c6:1f:42:
         e1:6a:49:18:0e:f0:3d:5b:91:0a:6d:96:be:a5:4b:86:57:56:
         d5:f7:f3:03:15:17:de:98:84:7a:40:c3:cf:fe:4a:19:b4:68:
         11:b9:b7:ee:8e:ad:9a:88:12:63:6b:9a:d3:cf:6d:bb:83:21:
         3a:1b:b2:2e:a1:8b:70:0d:08:55:e5:05:60:94:81:79:18:24:
         04:fb:94:be:13:c8:23:8f:ab:c1:4e:d3:27:87:25:5e:c1:08:
         42:da:2c:b2:b2:43:d3:9e:b5:e7:28:d5:25:cf:a5:4e:80:8d:
         cf:6e:b4:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----