Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1ZX4qSRgo8N2VbY8B1PH6t7_6eM.cer
File:                     1ZX4qSRgo8N2VbY8B1PH6t7_6eM.cer (raw, json)
Hash identifier:          rI7HlFxXxNb7XyZLH+afsN8w4SOJVjYas5Iq45Rhg9E=
Subject key identifier:   D5:95:F8:A9:24:60:A3:C3:76:55:B6:3C:07:53:C7:EA:DE:FF:E9:E3
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856E65CBD46C20B0D93CAE0ECCA1C9D302
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/89/ed29fc-1839-4eb7-b27a-f2fc239ce0d0/1/1ZX4qSRgo8N2VbY8B1PH6t7_6eM.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/89/ed29fc-1839-4eb7-b27a-f2fc239ce0d0/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 17:34:03 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 193.104.183.0/24
                          IP: 2a11:e580::/29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6e:65:cb:d4:6c:20:b0:d9:3c:ae:0e:cc:a1:c9:d3:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 17:34:03 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=d595f8a92460a3c37655b63c0753c7eadeffe9e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:b0:b2:e3:e0:ba:90:fb:a4:4a:c0:08:45:75:
                    84:e0:d4:c6:39:a3:34:95:eb:d4:d7:5f:c8:a6:e4:
                    71:74:1c:a9:34:7a:3e:da:54:29:42:44:91:0c:6b:
                    4a:88:94:07:ed:64:0f:cc:dd:ac:52:47:2a:b4:3b:
                    95:0a:96:82:98:07:b9:f1:54:3f:b2:a8:10:a8:4a:
                    fe:d8:17:42:ed:ca:ef:b2:0f:68:b5:bb:be:d7:bd:
                    e3:60:20:90:c2:78:3c:53:73:02:fb:73:d9:86:72:
                    ae:63:70:bc:e1:32:5a:03:95:62:b4:58:05:e1:bd:
                    2d:f9:1f:43:5a:1e:4f:5c:d3:bf:4e:a8:02:94:a7:
                    65:6b:4b:f7:40:11:fd:58:98:c8:ce:a9:58:f0:73:
                    75:60:b1:18:96:78:e7:0e:22:0a:ca:c7:0c:e0:59:
                    96:3b:92:2f:58:5b:0a:62:6f:7d:97:3a:05:93:6e:
                    f4:4c:f9:d7:ac:50:d2:ba:d1:e6:48:bb:69:40:53:
                    68:9e:e7:a8:09:d7:5d:7c:8a:a6:7c:a4:9f:8f:c1:
                    6d:09:9e:a5:fc:d8:5d:32:2c:9a:de:9f:7f:36:dd:
                    d9:21:80:f2:4d:0e:b5:69:4a:89:3a:5c:07:78:3a:
                    88:45:f3:4a:7f:d9:87:30:8c:d4:1b:d5:98:16:0a:
                    39:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:95:F8:A9:24:60:A3:C3:76:55:B6:3C:07:53:C7:EA:DE:FF:E9:E3
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/ed29fc-1839-4eb7-b27a-f2fc239ce0d0/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/ed29fc-1839-4eb7-b27a-f2fc239ce0d0/1/1ZX4qSRgo8N2VbY8B1PH6t7_6eM.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.104.183.0/24
                IPv6:
                  2a11:e580::/29

    Signature Algorithm: sha256WithRSAEncryption
         00:d5:b7:de:c1:16:26:11:53:70:2c:68:1f:93:99:43:32:24:
         20:7b:22:39:61:5f:c0:f5:b3:39:db:e8:90:1c:c4:25:2f:15:
         5d:5c:6e:a7:c6:9e:4f:81:00:aa:69:5c:1e:57:5e:c1:22:c7:
         3e:ca:be:bc:23:8f:6d:f8:89:65:4e:95:f7:6f:1c:37:0a:da:
         2e:fa:b6:93:a0:ef:9e:50:fc:8e:40:83:b8:79:8c:40:3e:4b:
         4f:1d:b6:c8:13:8b:ef:f3:e0:0b:fd:7a:aa:77:14:85:f9:cd:
         ad:cf:15:84:71:e1:99:53:a9:d8:17:a1:96:cd:d3:17:d1:d4:
         b7:52:95:01:0c:64:29:ee:d3:49:f6:14:40:99:c1:f7:c2:2c:
         b6:d1:70:2e:b8:8d:2c:11:58:39:2a:36:5b:81:81:40:34:25:
         a0:76:68:f5:93:84:42:63:0b:be:01:92:0e:e8:00:f6:b5:48:
         21:32:c8:f9:c6:11:af:93:e6:a4:81:8c:86:c8:15:59:fb:ca:
         24:60:f6:6f:49:f7:2b:27:78:28:da:dc:53:fe:01:40:11:a2:
         4a:5f:95:94:41:ea:1b:11:ce:da:d0:33:98:ef:07:e7:6a:5b:
         47:c2:d6:39:6b:ea:a9:4e:e7:61:db:ca:93:87:29:20:f9:98:
         a2:80:78:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----