Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0hyStyZ4xvh_2b-Puivhn6wGS1g.cer
File:                     0hyStyZ4xvh_2b-Puivhn6wGS1g.cer (raw, json)
Hash identifier:          AzkAK7VJUoctI6ClzKDXjLmYWvA9iqXyEIt60J7DF8I=
Subject key identifier:   D2:1C:92:B7:26:78:C6:F8:7F:D9:BF:8F:BA:2B:E1:9F:AC:06:4B:58
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856DF71ED4ADA3C923F71E781785115DF2
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/29/0a7b25-a8fe-4af4-9283-081cc5b8af6d/1/0hyStyZ4xvh_2b-Puivhn6wGS1g.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/29/0a7b25-a8fe-4af4-9283-081cc5b8af6d/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 15:33:09 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 176.100.42.0/24
                          IP: 2a11:c580::/29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6d:f7:1e:d4:ad:a3:c9:23:f7:1e:78:17:85:11:5d:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 15:33:09 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=d21c92b72678c6f87fd9bf8fba2be19fac064b58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:9c:06:6b:a4:c8:cc:22:e6:d0:08:81:e7:c3:
                    33:44:fb:6f:0d:6a:e4:c4:e0:38:0f:8d:1d:9c:25:
                    0a:14:75:3e:c4:53:c3:3b:05:5f:4d:13:3b:2f:75:
                    5a:fc:85:6e:b1:e7:aa:e0:3c:6e:e5:51:b3:32:43:
                    17:58:bc:da:8f:f5:cd:1d:5d:ce:8f:8b:38:2f:33:
                    ed:c7:e5:2f:4d:93:6a:ca:8d:1b:4f:72:33:eb:a3:
                    85:24:b6:ec:7f:d9:f0:81:4f:45:5b:01:a0:91:c9:
                    b9:cc:e7:89:73:b7:1e:40:55:5e:65:96:56:94:57:
                    c1:9d:3a:bd:e6:5c:d1:a9:7f:ca:7c:95:ef:f3:98:
                    be:96:be:f6:14:85:30:2c:c7:0f:61:59:b9:8c:39:
                    98:d3:69:89:10:ee:0f:5a:c0:d9:0c:c5:f5:5c:51:
                    0c:b2:b7:f3:cf:7e:58:0d:18:49:62:98:95:da:cc:
                    f2:63:d9:2f:e5:f8:d5:5c:e8:1a:a8:ae:b9:fa:80:
                    54:87:ac:14:d4:66:e4:27:9d:f0:4e:6d:96:f4:61:
                    61:55:34:da:5a:79:6d:cf:3a:47:1d:58:24:2f:fb:
                    69:b8:ed:7e:e8:8d:f4:e5:0c:a0:48:a3:d2:56:2e:
                    81:9f:d6:6e:d5:a7:b3:28:9e:b3:93:9a:12:c6:d9:
                    e5:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:1C:92:B7:26:78:C6:F8:7F:D9:BF:8F:BA:2B:E1:9F:AC:06:4B:58
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/0a7b25-a8fe-4af4-9283-081cc5b8af6d/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/0a7b25-a8fe-4af4-9283-081cc5b8af6d/1/0hyStyZ4xvh_2b-Puivhn6wGS1g.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  176.100.42.0/24
                IPv6:
                  2a11:c580::/29

    Signature Algorithm: sha256WithRSAEncryption
         96:20:fc:a8:7a:8c:ee:64:2b:0f:75:f6:d5:3f:1b:04:41:37:
         7d:16:c8:6e:a7:08:0e:1e:a2:b2:54:25:62:24:15:ea:54:08:
         24:66:e5:f9:b9:07:1e:23:e3:a6:5e:ec:16:82:2e:d7:ca:93:
         c4:5a:62:1e:c5:0b:bd:ca:5d:d5:53:c6:54:38:a3:c0:56:b2:
         fc:ff:3c:88:7b:45:fa:93:9b:bc:22:6e:88:18:27:0c:67:f2:
         4e:4d:b0:b2:e9:34:32:a8:69:ff:0e:99:7c:35:5c:c0:5e:80:
         d9:8f:97:e4:f3:81:2b:bc:11:26:66:13:cf:b6:4b:50:7b:58:
         39:35:23:b7:95:f2:55:f7:47:9e:1f:1d:96:b5:9f:02:6b:f7:
         00:02:bc:3e:d4:2f:d1:52:a0:0a:69:2b:cb:d7:19:ba:ca:7a:
         88:ab:58:ea:56:df:42:0d:bd:8d:f9:b3:ba:0c:59:b8:fb:43:
         a1:1a:2c:1c:71:84:97:33:71:62:4e:1e:1b:e1:27:11:c0:e1:
         26:b5:6e:22:f5:01:02:be:b4:e4:88:cc:e5:5f:72:b9:2d:d6:
         43:fc:26:9c:5e:5c:11:82:d8:7e:87:25:85:cb:98:ca:ef:ab:
         7c:53:4b:83:20:ae:2a:1d:24:44:01:ed:12:f2:d4:ef:e6:4f:
         a9:5a:26:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----