Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-2pm68OE1id664aH78A9_zmas3A.cer
File:                     1-2pm68OE1id664aH78A9_zmas3A.cer (raw, json)
Hash identifier:          Mm+2fY/POusWjLMEO0RoYML0pGrLq+2agzO2GVNwlVI=
Subject key identifier:   FB:6A:66:EB:C3:84:D6:27:7A:EB:86:87:EF:C0:3D:FF:39:9A:B3:70
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0185701E06248B67D595D67E88819A3704C4
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/60/e14aad-600d-472c-8259-67503ff7bb4d/1/1-2pm68OE1id664aH78A9_zmas3A.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/60/e14aad-600d-472c-8259-67503ff7bb4d/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 02 Jan 2023 01:34:53 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 193.17.88.0/24
                          IP: 2a11:1840::/29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:1e:06:24:8b:67:d5:95:d6:7e:88:81:9a:37:04:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 01:34:53 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=fb6a66ebc384d6277aeb8687efc03dff399ab370
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:6f:0f:d6:40:3e:0f:56:d2:5b:42:fe:49:4c:
                    e3:84:f7:cf:04:13:3e:04:9d:b8:20:28:de:28:46:
                    5d:a4:94:67:cb:a5:5d:7c:8e:6c:cf:95:59:b2:83:
                    d2:bd:2c:62:aa:a2:72:4a:14:22:2a:14:6f:97:b3:
                    31:2c:b3:b2:f8:55:8a:5e:0e:d9:64:03:60:00:d3:
                    7d:da:9f:6a:69:e9:73:09:ad:cd:84:26:d4:0e:6d:
                    b5:87:e6:c3:9d:a0:4b:53:ca:ba:48:18:d7:cd:b7:
                    96:9b:bb:83:ac:16:f2:0d:ae:8a:22:99:e3:3b:42:
                    d9:72:65:8b:86:10:5c:31:8b:da:ab:a5:23:33:f4:
                    3e:42:5a:77:5a:b4:9f:bd:44:cc:6b:9d:a0:19:21:
                    3b:95:6a:43:01:fb:9c:43:c3:96:2b:08:f0:28:c1:
                    da:bb:bf:5e:01:ef:64:9e:f7:15:47:62:82:70:24:
                    1e:8c:8d:9f:8d:bb:fa:84:8e:d7:72:80:7b:46:16:
                    4e:26:ef:af:7a:9c:7f:6c:a2:32:7d:cb:56:c5:75:
                    c9:0d:5d:2a:c7:a6:00:b3:72:88:e3:9a:ec:99:e0:
                    6b:cc:30:ad:e9:dd:e3:2c:86:c5:fb:1c:f4:34:4d:
                    57:e5:c7:ac:21:da:f1:c6:3b:f8:9a:b3:41:e4:08:
                    0d:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:6A:66:EB:C3:84:D6:27:7A:EB:86:87:EF:C0:3D:FF:39:9A:B3:70
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/e14aad-600d-472c-8259-67503ff7bb4d/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/e14aad-600d-472c-8259-67503ff7bb4d/1/1-2pm68OE1id664aH78A9_zmas3A.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.17.88.0/24
                IPv6:
                  2a11:1840::/29

    Signature Algorithm: sha256WithRSAEncryption
         51:1d:d9:7d:29:f5:b6:d8:f5:28:fe:46:10:d5:ea:00:79:43:
         ed:fa:fe:1b:b2:ec:89:9a:d1:f1:a8:bd:ad:f5:39:0c:94:19:
         15:40:d9:be:5f:72:44:26:ec:a7:f5:7b:d0:a2:bc:a9:97:3f:
         0c:49:4e:88:5c:8a:e7:d9:85:ff:57:53:73:6b:9d:57:69:1a:
         d9:c5:81:8b:ed:2e:ad:f1:c9:30:1d:8a:3d:27:81:95:e0:80:
         9b:98:7a:b2:1b:77:77:82:2a:3a:f7:e1:82:71:0e:67:23:c1:
         24:e3:2c:9b:41:82:21:a7:9e:c5:18:5d:ce:b6:31:5e:90:a5:
         c1:90:86:7d:13:60:ab:3f:89:9d:39:a9:c0:c0:76:56:97:29:
         9f:2d:cc:e8:af:8e:49:14:93:00:b1:9a:9e:55:47:85:3b:af:
         9f:5d:d9:9b:54:87:d5:c8:82:77:34:46:ac:14:6b:c1:a9:43:
         ca:a0:32:91:87:60:60:37:14:bb:c3:a3:44:c8:bf:b2:2a:14:
         e9:7c:0a:2f:c6:a0:19:ae:44:96:62:69:70:4b:1f:44:47:1d:
         94:36:b4:ee:a2:5f:1e:c6:49:4d:76:cb:b7:77:4f:0a:d2:83:
         df:da:09:60:00:c6:82:62:57:f5:f2:2d:82:ea:d9:48:0e:4d:
         76:44:14:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----