Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-rZ0NK_FlhgEaCihNefn0MftjJo.cer
File:                     1-rZ0NK_FlhgEaCihNefn0MftjJo.cer (raw, json)
Hash identifier:          AA4QcBRp+Ek/oHjdrjM0hOn17FCWGV/yvBRQjLgRqPM=
Subject key identifier:   FA:B6:74:34:AF:C5:96:18:04:68:28:A1:35:E7:E7:D0:C7:ED:8C:9A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856BD11631344EBAB35BA5F7982EE368E5
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/13/004b27-9e70-4466-8a32-a330c7640682/1/1-rZ0NK_FlhgEaCihNefn0MftjJo.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/13/004b27-9e70-4466-8a32-a330c7640682/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 05:32:22 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    AS: 62267
                          IP: 185.41.228.0/22
                          IP: 2a01:56a0::/32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6b:d1:16:31:34:4e:ba:b3:5b:a5:f7:98:2e:e3:68:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 05:32:22 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=fab67434afc59618046828a135e7e7d0c7ed8c9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:a0:69:2f:7b:4f:00:5b:87:08:90:f7:5f:e9:
                    9d:bd:9c:39:3a:e0:89:87:c7:6f:a7:f7:30:e1:44:
                    0f:63:c9:7f:18:1f:ea:21:8b:c4:4f:d4:14:87:fd:
                    36:44:53:df:d6:03:b0:1f:44:e9:6c:49:0a:45:68:
                    60:de:84:0b:5a:ce:62:d4:50:ce:7e:ad:f5:bf:1e:
                    7b:26:5c:38:2b:c1:ce:1a:2e:d2:87:a2:3f:17:5c:
                    b4:71:f8:a6:33:61:ed:16:96:20:f6:e7:62:8c:5f:
                    ed:e0:4c:7c:4d:50:62:54:f8:fe:38:11:c7:74:df:
                    41:91:36:bf:3a:a6:e5:74:a2:ad:d4:19:06:47:c8:
                    40:ae:69:17:6d:31:38:68:15:6f:6e:a8:e6:73:87:
                    f1:01:69:78:6c:d1:7a:a5:e8:1d:bf:bd:26:10:a0:
                    a9:c4:51:a6:b3:4e:44:85:cf:95:93:b0:00:9e:28:
                    26:05:28:f0:c5:6b:4b:3d:4e:c1:f6:d5:1b:96:8e:
                    eb:a6:5f:37:79:95:c2:02:e7:06:f3:43:3a:c8:96:
                    d7:9a:d3:16:55:c7:a1:56:32:09:06:ee:3a:6d:ef:
                    c3:c7:16:61:51:44:ce:c5:da:62:56:ce:bb:ee:d3:
                    7a:07:d6:6a:45:51:e5:5e:75:ce:45:66:c6:58:7c:
                    e0:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:B6:74:34:AF:C5:96:18:04:68:28:A1:35:E7:E7:D0:C7:ED:8C:9A
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/004b27-9e70-4466-8a32-a330c7640682/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/004b27-9e70-4466-8a32-a330c7640682/1/1-rZ0NK_FlhgEaCihNefn0MftjJo.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.41.228.0/22
                IPv6:
                  2a01:56a0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  62267

    Signature Algorithm: sha256WithRSAEncryption
         86:78:08:e5:af:a9:d0:d5:34:07:01:07:1f:bc:75:06:fb:07:
         d7:d3:6e:e8:cd:57:e1:b3:81:7d:95:6a:9b:76:a7:a1:1b:e9:
         11:13:f8:a0:bf:ee:7d:5b:27:07:1a:2f:4e:32:8a:99:bb:a0:
         53:a4:2d:4e:a6:4b:7d:94:3f:16:b9:d9:0c:61:92:0d:99:7f:
         45:00:86:49:d3:14:09:f3:ce:f6:bb:ec:27:20:d5:e2:66:67:
         71:0a:da:26:37:d5:ba:70:90:df:69:7a:cb:2d:42:40:22:b7:
         98:cf:14:be:2c:d4:c3:4c:6e:1a:eb:d0:13:ad:34:87:30:0e:
         0f:88:d2:b4:cd:55:57:84:60:66:90:36:0f:cc:dc:b9:f6:16:
         5f:fb:c5:c9:80:8d:9d:7e:ce:6b:cc:29:e1:28:aa:ef:c2:ce:
         12:2e:ba:21:2f:d0:8f:5b:21:8b:ac:de:e5:01:f5:e9:73:07:
         eb:28:c3:76:d4:cf:8d:5c:73:dc:4d:4d:36:01:c1:aa:36:52:
         02:c6:f7:3a:bc:e3:28:2b:dd:c8:3e:60:60:b8:ad:20:f5:c3:
         b4:00:2f:bc:22:7c:ca:69:a3:73:2c:e4:1e:7d:4a:8b:5b:81:
         53:3a:50:80:98:27:3c:e3:1c:fb:3f:31:a7:37:7b:d4:25:14:
         5f:cc:a2:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----