Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2SlU732bhLgzgLy-UXhQ5Vp5x1s.cer
File:                     2SlU732bhLgzgLy-UXhQ5Vp5x1s.cer (raw, json)
Hash identifier:          Lg7hDkV/R+gP5M2JjmrOcpUSxrWUWiuAjH0MJx3mmkU=
Subject key identifier:   D9:29:54:EF:7D:9B:84:B8:33:80:BC:BE:51:78:50:E5:5A:79:C7:5B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856B636BBBB29FFC8417F72E2818B8A47A
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/3e/d97443-9a5f-4655-80cc-82159d94d3e9/1/2SlU732bhLgzgLy-UXhQ5Vp5x1s.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/3e/d97443-9a5f-4655-80cc-82159d94d3e9/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 03:32:35 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 31.222.247.0/24
                          IP: 2a11:86c0::/29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6b:63:6b:bb:b2:9f:fc:84:17:f7:2e:28:18:b8:a4:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 03:32:35 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=d92954ef7d9b84b83380bcbe517850e55a79c75b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:ec:0a:b2:ee:60:e9:8c:ae:fa:92:c5:7f:93:
                    e1:54:39:43:26:6c:63:47:3b:b9:75:df:12:9a:12:
                    e2:7f:09:62:41:68:a6:2a:be:77:a3:bc:ab:8a:1d:
                    a4:52:3c:76:df:3f:57:de:19:47:cf:e4:15:3d:e4:
                    21:ba:30:be:40:3d:3e:0a:5c:92:5c:bc:33:1c:cd:
                    a8:27:8a:2a:8a:3f:29:b9:bb:43:75:54:2a:62:83:
                    07:58:9c:3e:69:c8:68:29:8d:a3:23:55:38:00:3c:
                    93:5e:e0:a1:bb:39:35:94:eb:f9:70:1c:96:87:36:
                    2c:72:3a:92:29:6f:51:41:72:1c:fb:34:1b:2c:a8:
                    d8:fe:8b:92:ad:36:02:ff:8c:42:a9:7d:9f:51:18:
                    13:20:55:98:08:1f:96:58:89:5b:6f:6d:3d:33:21:
                    f0:f7:b9:2b:73:88:e0:1a:2d:fc:3b:f1:0f:08:3a:
                    73:80:81:f8:66:6b:59:87:30:10:64:f9:97:67:e8:
                    61:23:54:4d:0e:e4:1a:22:59:55:f3:c5:8f:7b:7c:
                    71:1b:83:d8:2e:40:13:ed:7b:a6:cb:31:9b:54:f3:
                    ba:c8:1a:b8:f1:17:ca:5c:b1:17:24:e7:48:1a:b6:
                    d9:11:71:bf:27:08:91:e2:a6:4e:86:07:b1:f3:03:
                    55:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:29:54:EF:7D:9B:84:B8:33:80:BC:BE:51:78:50:E5:5A:79:C7:5B
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/d97443-9a5f-4655-80cc-82159d94d3e9/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/d97443-9a5f-4655-80cc-82159d94d3e9/1/2SlU732bhLgzgLy-UXhQ5Vp5x1s.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.222.247.0/24
                IPv6:
                  2a11:86c0::/29

    Signature Algorithm: sha256WithRSAEncryption
         81:37:41:6d:25:38:21:d7:d3:23:24:8c:4b:d7:85:c7:17:4e:
         e2:f7:c3:42:19:70:3f:f5:3e:1b:1c:58:e6:4b:e7:f5:1c:b1:
         9f:75:5e:26:74:ad:ca:5b:15:fc:78:3c:17:21:ef:27:dc:9e:
         09:94:98:77:33:9d:62:38:cc:9e:0e:cc:b7:1a:7e:c7:c1:ef:
         ba:80:17:b7:99:e7:64:66:39:25:58:72:46:52:a5:60:82:6c:
         c5:d9:5a:8f:ff:67:4c:79:87:11:0b:d9:04:d4:57:a7:7e:8e:
         b3:9c:57:24:cd:8f:dd:ef:37:8a:24:ac:4d:2c:20:23:b0:e1:
         c8:91:25:4a:3c:3c:79:08:a8:99:dc:14:e8:1c:1b:10:34:03:
         76:e3:ec:26:97:23:04:f0:ad:6c:52:f5:d8:1c:2f:ca:05:5a:
         68:43:f7:82:fd:60:51:41:de:a8:18:9f:98:65:1d:b1:89:7c:
         d3:22:be:90:f6:85:be:46:9d:2d:a2:69:38:52:04:7f:a9:e8:
         3a:8e:19:c0:41:9a:01:29:ee:a8:3b:67:60:96:80:de:fb:4b:
         07:f4:20:ac:7e:a4:cc:0a:ef:68:8c:e3:d0:27:e2:f1:fd:4f:
         09:e9:75:b5:87:a6:8f:0e:5a:02:e5:7d:55:07:55:84:f0:39:
         f2:98:5d:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----