Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1LJyGTKQP5gxPNwab9S38u2qQ1U.cer
File:                     1LJyGTKQP5gxPNwab9S38u2qQ1U.cer (raw, json)
Hash identifier:          vTudZL9O3pxHf6+QVdX7KwwkZcwEWE9vVpHJW/l/15c=
Subject key identifier:   D4:B2:72:19:32:90:3F:98:31:3C:DC:1A:6F:D4:B7:F2:ED:AA:43:55
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018571677ACFB970D904EA55567A7CEAB98F
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/1c/3ff48f-f300-4d6d-84b1-215a34a00778/1/1LJyGTKQP5gxPNwab9S38u2qQ1U.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/1c/3ff48f-f300-4d6d-84b1-215a34a00778/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 02 Jan 2023 07:34:45 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    AS: 49413
                          AS: 202038
                          AS: 205402
                          IP: 94.199.232.0/21
                          IP: 185.108.92.0/22
                          IP: 2a02:8d0::/29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:71:67:7a:cf:b9:70:d9:04:ea:55:56:7a:7c:ea:b9:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 07:34:45 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=d4b2721932903f98313cdc1a6fd4b7f2edaa4355
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:07:67:bc:87:5c:75:58:94:68:99:a5:15:70:
                    c4:a6:60:90:8b:9a:2d:fb:fa:23:95:cf:c6:ca:da:
                    a0:2c:97:12:e7:0d:c4:5f:cd:52:09:f1:ae:33:cc:
                    04:20:39:69:01:67:db:66:27:c9:16:a2:a6:90:43:
                    6d:a7:14:3d:c4:33:52:4f:33:e6:ef:8c:74:e5:19:
                    0b:b2:a8:d8:4e:f7:a7:97:93:00:21:06:95:61:0b:
                    99:ed:ea:c8:7c:a4:69:8e:c4:a3:9c:e3:7e:da:f7:
                    cc:c9:ce:da:d2:03:3c:9d:11:7f:ec:16:85:e9:84:
                    08:5b:ee:0e:9c:8d:53:f3:90:9b:fa:89:b3:86:b8:
                    73:cb:55:56:00:e4:8a:f0:cd:e2:c0:b0:d8:c4:d2:
                    71:b0:2b:f4:51:09:08:03:58:f6:eb:36:a9:d1:d3:
                    8b:94:41:6b:1f:93:4e:6d:5d:f4:a4:c1:33:a9:14:
                    98:9d:7a:16:e8:fc:51:8a:0d:87:50:e8:1d:c7:a8:
                    ab:78:af:39:bc:2f:fa:ac:d9:24:f1:e9:a5:d5:4e:
                    02:4f:44:43:4d:e2:19:d3:ab:24:81:5d:7e:69:15:
                    29:b6:e2:b5:14:e9:00:b7:29:f0:83:10:d2:19:0d:
                    ef:5e:84:93:a1:d1:fb:21:3f:e6:79:18:a1:66:ec:
                    38:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:B2:72:19:32:90:3F:98:31:3C:DC:1A:6F:D4:B7:F2:ED:AA:43:55
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3ff48f-f300-4d6d-84b1-215a34a00778/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3ff48f-f300-4d6d-84b1-215a34a00778/1/1LJyGTKQP5gxPNwab9S38u2qQ1U.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  94.199.232.0/21
                  185.108.92.0/22
                IPv6:
                  2a02:8d0::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  49413
                  202038
                  205402

    Signature Algorithm: sha256WithRSAEncryption
         9b:52:10:b4:a6:8a:06:80:cb:d1:20:37:56:60:5f:95:74:9f:
         d3:bc:84:8d:82:92:71:3a:b5:24:a0:dd:80:e8:f5:75:94:5b:
         72:82:60:76:cc:84:e5:8a:b0:72:e0:22:4b:20:75:2f:f9:24:
         eb:e9:b3:48:84:bb:a2:81:74:a1:ad:c3:8d:77:4d:eb:77:ac:
         4d:f0:77:21:04:67:fd:a0:f4:5b:b3:0b:0d:d5:1e:ad:71:97:
         6d:02:63:b0:31:92:5a:06:2b:13:ce:fd:21:71:25:89:a2:f9:
         09:cd:7b:1c:70:c4:49:58:ee:a0:d4:3e:0a:5b:e8:ed:26:4a:
         1b:a2:71:85:4e:33:76:cd:bc:fd:e9:bf:50:c1:04:f9:f2:15:
         0c:75:1d:52:5b:b1:f5:5e:b6:72:d4:2d:83:24:4b:b7:15:e9:
         1e:f5:b8:3a:bd:25:1e:0e:95:ff:52:d5:cc:1a:93:00:0c:0d:
         b0:49:ed:de:37:50:90:6a:dd:f2:fa:4a:4e:dd:e5:4f:86:5b:
         31:0c:25:ee:df:bc:5e:dc:df:d6:3b:d7:59:b8:85:f9:d0:f9:
         14:ce:68:46:1c:e8:3a:4d:c3:57:8e:b4:2a:70:6b:bf:f4:8a:
         0c:dd:db:c8:74:0e:8f:a3:9a:e8:b3:73:68:c5:30:8c:dd:7e:
         7e:a1:24:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----