Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2hOJ3oSDvRQtP8ez98o-dV0YwJw.cer
File:                     2hOJ3oSDvRQtP8ez98o-dV0YwJw.cer (raw, json)
Hash identifier:          t3dvFgA2gOXaw1dVoQGZAwrAfAG2bd9tU9TGPvNW1Yg=
Subject key identifier:   DA:13:89:DE:84:83:BD:14:2D:3F:C7:B3:F7:CA:3E:75:5D:18:C0:9C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856B62E5B9930D822EE82D656028A1316B
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/86/358688-d937-432d-b6be-328189791759/1/2hOJ3oSDvRQtP8ez98o-dV0YwJw.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/86/358688-d937-432d-b6be-328189791759/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 03:32:01 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 2a09:2340::/29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6b:62:e5:b9:93:0d:82:2e:e8:2d:65:60:28:a1:31:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 03:32:01 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=da1389de8483bd142d3fc7b3f7ca3e755d18c09c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:d9:5a:bb:4d:d7:c0:93:e5:59:01:c7:68:ad:
                    2b:87:14:da:78:91:d8:ad:a1:6b:e7:ff:3d:f7:89:
                    1e:2f:08:cb:bf:de:09:c9:a6:62:3c:2e:a4:7d:2d:
                    90:0f:05:c7:6c:e0:d3:d7:38:f0:fd:e6:49:3d:36:
                    56:76:56:31:55:ee:32:77:cc:e2:18:74:09:17:1e:
                    42:80:15:b3:43:ee:5c:52:08:7d:97:6a:7a:5c:51:
                    e7:78:3e:5d:8e:8d:af:58:23:71:ea:f8:98:00:85:
                    a2:fd:cd:e2:97:ea:6e:8f:5c:53:ed:46:2f:3e:d1:
                    62:c8:7c:fa:f3:6a:10:22:01:7b:8f:3a:5b:1a:15:
                    e9:64:1e:2c:d9:3b:96:bc:e2:51:cc:cd:8d:fe:3b:
                    26:39:ae:85:bf:4d:30:d0:78:4a:2d:09:f3:34:2f:
                    05:b2:0d:25:35:67:c8:d1:8a:45:50:2d:e8:ab:cc:
                    c8:db:33:d2:93:66:1c:c2:9e:92:54:fa:73:b3:b0:
                    8a:d1:7b:e3:13:f4:09:db:76:b3:72:22:77:3c:e4:
                    02:a6:61:ef:b0:51:35:40:16:9c:93:8f:a6:89:cd:
                    7d:9c:5c:17:c4:4b:38:a2:56:e1:2b:2c:d4:38:de:
                    37:9e:90:27:9c:28:9d:54:5a:9c:dd:b0:82:87:a7:
                    d8:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:13:89:DE:84:83:BD:14:2D:3F:C7:B3:F7:CA:3E:75:5D:18:C0:9C
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/358688-d937-432d-b6be-328189791759/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/358688-d937-432d-b6be-328189791759/1/2hOJ3oSDvRQtP8ez98o-dV0YwJw.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a09:2340::/29

    Signature Algorithm: sha256WithRSAEncryption
         1d:16:29:d5:d8:ac:a5:6e:3a:1d:32:16:f1:8c:19:b5:06:a5:
         37:99:e1:2e:a0:d9:17:d8:b6:1c:84:4a:f3:11:37:d9:02:12:
         94:63:d7:19:f0:d4:76:d2:45:22:7f:a6:b0:5c:a8:b8:01:ce:
         0c:7b:b6:7f:d7:85:9e:f1:f7:28:5e:b5:df:dc:95:18:66:4c:
         be:c9:19:8a:c3:04:1f:1f:ec:59:23:56:93:46:d1:6f:ba:68:
         b5:bf:d1:41:dd:d7:d7:dd:c2:f2:38:38:7e:75:ff:f3:4a:99:
         89:c0:6e:20:fd:d2:43:66:03:d5:fc:95:54:1d:ee:e2:3b:ac:
         db:dc:d5:70:6d:ba:0e:36:c2:4a:b6:1f:fc:d0:06:9f:d0:db:
         6f:da:7a:3e:95:0b:b4:75:9e:4b:49:8c:68:da:f3:de:43:57:
         96:cc:f9:99:cb:8a:94:78:78:13:7d:91:ae:f3:12:61:ac:bd:
         3e:b9:71:85:99:2c:54:33:7c:18:23:b0:1d:08:ed:73:29:25:
         5b:b0:07:8d:0b:4b:04:43:bf:09:8f:6b:b0:20:e5:54:01:17:
         a9:c4:86:bf:ea:19:42:6b:2c:21:41:d1:e2:22:28:e7:d1:70:
         08:47:08:09:6d:95:ed:9d:c5:3f:44:10:ae:4c:a4:8c:34:6d:
         49:be:8e:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----