Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-fjknTXEckGr79hOlMQX0heVseE.cer
File:                     1-fjknTXEckGr79hOlMQX0heVseE.cer (raw, json)
Hash identifier:          rLSs17e3wzK8Qn7VD4q90oNm4Kwn+A4kupcGzNrpoVI=
Subject key identifier:   F9:F8:E4:9D:35:C4:72:41:AB:EF:D8:4E:94:C4:17:D2:17:95:B1:E1
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01857245CB71059ED8FC0C561070856E6BD4
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/79/1ba005-21ae-4ed1-9059-f2e6e45f4452/1/1-fjknTXEckGr79hOlMQX0heVseE.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/79/1ba005-21ae-4ed1-9059-f2e6e45f4452/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 02 Jan 2023 11:37:34 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    AS: 212036
                          IP: 185.226.97.0/24
                          IP: 2a10:a780::/29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:72:45:cb:71:05:9e:d8:fc:0c:56:10:70:85:6e:6b:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 11:37:34 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=f9f8e49d35c47241abefd84e94c417d21795b1e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:bc:62:29:58:6d:1f:07:05:e9:6b:e1:f5:24:
                    99:cb:92:3a:96:a8:94:04:4e:37:bf:1f:88:96:f1:
                    64:b6:b3:fd:e3:69:73:b5:77:46:6b:17:f0:35:9a:
                    f3:10:00:d8:b2:21:c9:64:c9:d0:bc:08:6d:8f:f6:
                    f3:84:9e:cb:88:d1:21:4a:df:05:73:2b:91:1f:c7:
                    42:31:d3:07:18:63:35:cc:13:cf:91:29:27:24:b9:
                    f3:5a:34:9c:35:40:10:d3:a4:6c:62:29:d3:70:d8:
                    08:9b:36:9e:9f:c6:b3:cd:e3:63:9a:e3:3a:c8:5f:
                    59:27:4c:ac:19:e5:7b:9e:e0:d9:d0:23:58:40:b4:
                    13:a3:f9:da:35:7a:38:9e:b7:7a:b7:2a:bd:4c:cd:
                    fd:6d:8e:95:d1:07:0c:d5:67:f3:85:28:76:cc:eb:
                    67:b0:e9:77:3a:52:7e:a7:cf:4b:fc:3d:90:3e:2c:
                    06:7d:50:28:49:d7:1e:6d:35:95:dc:3c:57:83:01:
                    16:ca:0d:91:d7:5a:4d:3b:d6:ae:e4:e3:f1:29:a0:
                    12:89:f5:bb:34:9e:24:48:21:59:7d:2f:92:34:29:
                    e1:3f:c6:d1:d4:6b:24:9e:71:cf:d7:5f:c5:94:25:
                    93:0f:56:96:45:d1:c0:19:b0:ca:56:0f:a9:d7:aa:
                    49:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:F8:E4:9D:35:C4:72:41:AB:EF:D8:4E:94:C4:17:D2:17:95:B1:E1
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/1ba005-21ae-4ed1-9059-f2e6e45f4452/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/1ba005-21ae-4ed1-9059-f2e6e45f4452/1/1-fjknTXEckGr79hOlMQX0heVseE.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.226.97.0/24
                IPv6:
                  2a10:a780::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  212036

    Signature Algorithm: sha256WithRSAEncryption
         35:17:1f:42:f6:57:b3:aa:dd:e1:f7:5c:17:86:b8:6a:d6:bd:
         19:f4:57:f2:85:03:2a:c9:cc:62:d8:0a:eb:5d:b5:9a:76:7e:
         fc:77:74:c8:20:e2:66:6a:93:8a:0c:80:35:3b:e6:f0:77:16:
         ad:f7:80:67:2a:a4:9f:c4:0d:db:fa:29:7e:d3:96:0e:bf:11:
         33:0f:e8:9c:ec:1f:31:f2:0a:89:68:b1:43:83:54:a8:d1:62:
         6d:54:c9:3a:1b:82:d2:1d:54:8e:46:96:c9:b7:72:f6:1c:4b:
         58:03:34:86:fd:25:66:b3:92:02:6c:d0:dc:2c:43:08:f8:d8:
         fc:2b:01:3a:95:1a:7d:53:fd:c5:35:fc:bf:51:1e:2a:6f:57:
         b9:73:53:07:2f:2b:6d:19:a3:26:ee:b7:6b:6a:1c:47:86:e9:
         69:57:03:0e:8d:98:90:6f:02:94:3c:03:24:61:7c:e4:78:cd:
         ee:50:c3:92:e4:58:89:40:4b:a1:d3:14:c3:fd:88:6d:4c:fd:
         54:dd:d3:94:79:37:f3:c3:3f:68:a0:3c:d7:70:c7:14:b3:f8:
         07:38:56:53:ee:c6:be:6b:bc:d9:47:23:32:bb:7d:89:d2:bd:
         9f:24:01:41:cb:04:7d:5f:4e:61:ee:63:68:64:ac:09:b1:2d:
         c4:45:52:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----