Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0gkLbnaR9-Gddx5jWBoYHXpuDaE.cer
File:                     0gkLbnaR9-Gddx5jWBoYHXpuDaE.cer (raw, json)
Hash identifier:          FaJH405SnzOI5yAm+azeC8SyVMZawNTTBOVg8trlLsI=
Subject key identifier:   D2:09:0B:6E:76:91:F7:E1:9D:77:1E:63:58:1A:18:1D:7A:6E:0D:A1
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856D1AB7C2E363664CAC92F69F5361FF42
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/e7/fa09f3-d0ea-48d0-acb1-436e34484bfc/1/0gkLbnaR9-Gddx5jWBoYHXpuDaE.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/e7/fa09f3-d0ea-48d0-acb1-436e34484bfc/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 11:32:25 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 195.96.135.0/24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6d:1a:b7:c2:e3:63:66:4c:ac:92:f6:9f:53:61:ff:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 11:32:25 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=d2090b6e7691f7e19d771e63581a181d7a6e0da1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:29:fd:e2:cb:c2:d9:f6:eb:b1:26:c0:d5:d4:
                    0e:cc:64:c1:28:2a:69:44:5c:48:75:02:f9:72:9b:
                    37:7c:de:6b:e5:d8:77:74:e9:72:0c:8b:a7:fa:65:
                    ff:f4:52:4e:62:49:7d:89:ed:fd:da:12:21:d6:83:
                    57:fa:a3:3d:8a:32:e3:3c:2a:0d:41:63:c9:74:9b:
                    8f:3e:27:2b:96:8f:7e:19:03:4e:50:67:38:8a:cf:
                    73:3a:94:aa:50:af:e2:92:f3:42:e3:e3:62:4a:7b:
                    d4:1a:a1:9f:5e:69:4a:24:ac:b6:68:a5:22:80:e7:
                    76:5a:72:e6:ad:cb:24:33:cf:58:fa:33:78:f4:24:
                    ff:32:30:63:4c:3c:dd:40:93:08:1d:25:b0:bd:a8:
                    7b:aa:16:82:d2:5f:96:3e:3b:39:52:83:42:78:a8:
                    1a:9c:aa:ce:de:fa:09:30:de:00:d2:f6:ee:34:25:
                    d4:1e:0b:da:69:e5:30:f1:f9:c0:27:f2:b5:52:55:
                    f8:68:32:1c:8a:d6:18:cc:0f:4e:4d:23:52:a9:d5:
                    55:9e:c4:eb:9a:e8:cf:d0:09:c1:3a:81:71:85:63:
                    36:01:b1:c0:49:f1:f2:94:75:f2:a6:1d:85:69:15:
                    ec:ca:d4:d1:31:c1:56:27:8a:8c:a4:78:8d:6c:cc:
                    47:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:09:0B:6E:76:91:F7:E1:9D:77:1E:63:58:1A:18:1D:7A:6E:0D:A1
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/fa09f3-d0ea-48d0-acb1-436e34484bfc/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/fa09f3-d0ea-48d0-acb1-436e34484bfc/1/0gkLbnaR9-Gddx5jWBoYHXpuDaE.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.96.135.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:43:af:04:19:68:77:65:e2:13:d8:e0:e2:f0:de:4c:3d:95:
         c6:32:34:2d:94:7a:76:af:8f:94:42:7c:1d:6a:13:32:90:17:
         f6:ee:09:9b:df:46:23:5c:9a:c7:f7:cc:76:98:3b:e6:d9:e4:
         29:19:f7:b4:27:1e:f0:48:21:5e:f6:6d:aa:d1:c2:21:ea:22:
         cf:18:d9:39:9b:c9:21:40:4c:1c:5c:1c:d7:20:0e:21:68:43:
         3d:76:89:e7:dc:a1:7e:ea:1e:00:ae:7d:33:fe:b0:77:5e:52:
         4f:f3:dd:e8:04:b7:d4:17:68:57:8d:e7:2b:bf:fa:88:56:a1:
         eb:cf:ea:d4:21:17:e2:16:81:03:a7:4a:50:5a:bb:f4:82:8a:
         cb:d2:d4:ec:63:de:dc:fe:79:6f:34:9b:e5:00:78:45:7b:aa:
         a3:6f:a8:05:45:69:c1:54:b9:c1:c6:6d:b8:18:9c:d8:c6:81:
         da:50:77:7f:38:7a:79:4a:45:93:38:39:af:0a:81:0c:75:23:
         fc:2f:5d:47:c3:45:6f:0d:c6:04:5c:0f:c1:0b:a2:4d:77:7c:
         c2:ae:0f:c8:d2:50:b9:f4:c4:55:f9:67:47:b8:44:13:46:d5:
         97:d2:ad:2f:ab:9c:f6:24:c2:04:6e:48:e3:28:c1:73:64:e1:
         2d:e8:72:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----