Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-qqSWzs_p3bEQRmTIKLGox3uN_c.cer
File:                     1-qqSWzs_p3bEQRmTIKLGox3uN_c.cer (raw, json)
Hash identifier:          bAz/y4npoRs8Pzd1tt+RPCqGgR4nxLbtfv9h0MHNnYI=
Subject key identifier:   FA:AA:92:5B:3B:3F:A7:76:C4:41:19:93:20:A2:C6:A3:1D:EE:37:F7
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018570FADEA9CB6F676FC0E9030BE128113F
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/e3/0b86b3-3903-46de-9a9d-ca105c28bbfe/1/1-qqSWzs_p3bEQRmTIKLGox3uN_c.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/e3/0b86b3-3903-46de-9a9d-ca105c28bbfe/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 02 Jan 2023 05:36:07 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 37.77.146.0/24
                          IP: 2a11:6700::/29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:fa:de:a9:cb:6f:67:6f:c0:e9:03:0b:e1:28:11:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 05:36:07 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=faaa925b3b3fa776c441199320a2c6a31dee37f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:8e:e6:a9:28:48:a5:b8:8d:04:83:21:71:a9:
                    0d:a4:35:cd:d4:63:2d:52:8e:0b:fc:e9:47:fc:b7:
                    fc:cc:a9:a1:d4:85:0f:d6:07:f3:63:ba:0d:87:43:
                    36:b8:ae:e2:a0:fc:f0:3e:66:21:4f:7d:0f:4c:c9:
                    a9:65:d7:f1:91:bf:87:4a:c9:87:9b:f4:5b:cb:01:
                    e0:b4:72:96:18:9e:1c:37:40:9c:25:96:63:cc:27:
                    d6:79:2d:4b:c0:fc:29:a0:c9:46:aa:3f:8c:2c:48:
                    3c:f6:78:81:38:23:be:31:44:1c:62:f1:16:96:df:
                    d3:01:a1:e4:c5:1c:80:25:ed:1d:35:34:4b:dd:52:
                    1d:37:5a:e7:48:ca:d8:6d:87:6e:c1:e4:9d:a5:61:
                    9e:71:e5:35:a1:aa:93:49:b0:02:bc:33:0c:44:68:
                    96:28:52:c4:b3:7f:85:99:b5:36:82:63:e3:9d:2b:
                    0d:bc:f8:e0:31:6e:38:49:ba:2a:bb:87:7f:7b:f3:
                    f3:ac:ce:38:ca:14:31:38:fa:b3:cc:74:59:43:67:
                    83:19:91:f5:c8:73:62:15:bd:35:d1:db:49:cd:dd:
                    73:76:7e:13:01:5f:1e:ed:94:12:f0:63:0e:57:80:
                    42:09:26:17:57:96:a7:57:7b:95:dd:6e:1b:47:8d:
                    02:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:AA:92:5B:3B:3F:A7:76:C4:41:19:93:20:A2:C6:A3:1D:EE:37:F7
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/0b86b3-3903-46de-9a9d-ca105c28bbfe/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/0b86b3-3903-46de-9a9d-ca105c28bbfe/1/1-qqSWzs_p3bEQRmTIKLGox3uN_c.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  37.77.146.0/24
                IPv6:
                  2a11:6700::/29

    Signature Algorithm: sha256WithRSAEncryption
         3d:3a:8f:90:19:a2:58:09:4c:0b:69:6d:96:7e:7a:db:35:16:
         dc:39:60:e4:ac:43:a7:f0:e7:5e:8f:e5:62:72:0c:51:d6:a6:
         05:9e:4f:75:f1:f9:ba:60:d2:c7:25:3c:03:62:b6:c2:0d:64:
         1a:5f:41:89:3b:1d:a2:0a:ed:e9:51:e7:29:ff:ae:bd:6b:54:
         08:a9:9d:e3:e4:51:17:26:d5:34:1a:8d:cf:45:20:44:1e:5b:
         7f:d5:88:6d:3b:28:ac:72:c7:1e:17:4f:da:b8:ea:9b:83:df:
         e0:6f:df:90:ac:56:9e:93:04:e1:34:72:eb:e9:1f:73:66:03:
         b5:75:ea:30:d5:e9:6a:9e:69:6e:72:05:a0:a8:bd:f2:fe:82:
         4c:ab:1e:89:ec:6f:be:c4:f4:f7:10:22:02:90:ab:3d:8c:ca:
         c0:4d:05:e8:64:61:c9:8d:fe:b1:77:6b:2a:81:f2:c3:5b:eb:
         89:b3:22:8c:c1:dc:c5:92:87:18:34:9f:2f:bd:fe:4e:52:ca:
         b9:3e:25:8b:da:9f:93:14:ee:6d:4b:c4:b8:f1:a9:e7:22:c2:
         f5:06:ac:34:11:bc:13:96:7a:c9:3f:31:2d:07:7c:7d:79:0e:
         f2:2e:4f:f2:84:ef:5b:3a:f9:54:25:ce:74:3a:2e:59:e4:35:
         0f:5a:51:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----