Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1Scab5nqwSq-CFYQChSi2WY857s.cer
File:                     1Scab5nqwSq-CFYQChSi2WY857s.cer (raw, json)
Hash identifier:          BJ2BCumJAS9j1rLBZA+JlA2qzqvjjPL+QZycW+ek4kU=
Subject key identifier:   D5:27:1A:6F:99:EA:C1:2A:BE:08:56:10:0A:14:A2:D9:66:3C:E7:BB
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0185708B514FA97A3513C2573B7F791E864A
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/59/180996-c97a-48bc-b5ab-100862b96c4d/1/1Scab5nqwSq-CFYQChSi2WY857s.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/59/180996-c97a-48bc-b5ab-100862b96c4d/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 02 Jan 2023 03:34:16 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 185.23.240.0/22
                          IP: 2a04:2980::/29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:8b:51:4f:a9:7a:35:13:c2:57:3b:7f:79:1e:86:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 03:34:16 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=d5271a6f99eac12abe0856100a14a2d9663ce7bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:5c:f2:7c:59:a5:88:c7:92:aa:1f:7e:30:63:
                    db:54:84:b6:80:ef:e2:2b:a1:eb:66:36:c1:05:53:
                    5c:c0:5b:91:91:dc:b2:a0:be:07:0a:f7:b8:23:3d:
                    70:8f:63:0b:bb:ba:b2:00:b9:35:64:44:b3:d2:81:
                    64:32:1e:f7:09:61:c4:7c:ef:a9:1a:d4:f9:65:7d:
                    8e:2b:2c:f5:8b:22:9f:bb:78:a3:1f:f5:04:01:f0:
                    06:03:55:5a:f9:5e:b3:ce:7c:e8:93:b0:2c:03:e3:
                    e5:8f:aa:9a:1d:b0:27:cb:33:a7:65:b4:77:45:3b:
                    19:9a:7a:e6:db:bb:4b:21:f3:7a:6b:ce:80:8f:fc:
                    72:7e:b2:4a:12:aa:96:dd:5e:ee:fa:0d:b5:3a:38:
                    68:39:5d:fa:c7:ef:75:f3:d1:a7:c8:8d:3f:1f:c5:
                    b6:21:80:3c:73:02:62:2a:62:58:27:0d:2c:5c:93:
                    9b:00:6b:f6:64:ad:71:8a:15:1c:08:04:83:55:08:
                    51:24:f4:e9:ac:75:30:49:b9:8f:60:0f:f5:ad:ca:
                    55:80:49:a2:5d:29:aa:45:7c:a8:0f:91:0f:57:03:
                    5d:b1:f1:07:3d:18:3d:a1:00:4e:68:8d:80:85:d6:
                    ee:a3:76:e7:6c:f9:18:eb:8e:a0:3e:4d:de:44:f5:
                    81:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:27:1A:6F:99:EA:C1:2A:BE:08:56:10:0A:14:A2:D9:66:3C:E7:BB
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/180996-c97a-48bc-b5ab-100862b96c4d/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/180996-c97a-48bc-b5ab-100862b96c4d/1/1Scab5nqwSq-CFYQChSi2WY857s.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.23.240.0/22
                IPv6:
                  2a04:2980::/29

    Signature Algorithm: sha256WithRSAEncryption
         3d:89:3c:e9:7f:a0:59:af:d6:11:9f:ac:08:fc:13:df:83:17:
         bc:76:ba:1f:a8:bb:2d:5e:71:7b:9b:cc:eb:97:da:e6:e1:b0:
         02:4b:ec:46:6a:cc:4f:c7:93:25:b3:24:7a:79:ed:b3:11:99:
         d1:c3:d2:d7:cb:cc:72:12:ab:29:4c:f0:c7:66:83:62:11:7a:
         ef:6d:c1:a9:89:25:d9:b1:7a:66:0f:9d:ac:5f:2f:f2:85:76:
         74:05:44:a3:7a:8a:d9:30:e6:78:f4:df:11:ad:a1:07:98:9b:
         24:81:4d:e7:43:8a:d9:d0:06:f7:6c:6f:02:1a:5d:7f:0e:95:
         87:31:dd:47:af:e0:e4:ab:1f:27:84:4d:44:36:44:ae:8a:de:
         8b:e8:26:b4:d9:23:73:d6:1f:82:6a:66:58:ef:55:89:4d:85:
         13:d5:95:45:6a:0e:a7:7e:28:4b:df:40:91:c0:be:a5:f4:0c:
         34:ec:85:f6:a8:bf:c1:0a:ae:52:66:ed:e5:02:8c:44:8b:ea:
         63:4b:e4:77:5a:12:aa:48:1d:86:24:f1:ac:9f:ab:ed:10:1d:
         38:6b:f7:e9:8b:48:ad:c0:63:50:c0:ef:41:ff:53:d6:15:ec:
         5f:8a:40:82:cc:71:70:e7:48:84:81:d2:34:8d:d0:d5:5b:a3:
         ec:ce:79:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----