Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2hX3YwTQpdu-Yh4R4wIbYI0zp18.cer
File:                     2hX3YwTQpdu-Yh4R4wIbYI0zp18.cer (raw, json)
Hash identifier:          66Zn5CG/3JhCcNin+AQ4tiz/yA1LLLOzP1v5Iyk+z2E=
Subject key identifier:   DA:15:F7:63:04:D0:A5:DB:BE:62:1E:11:E3:02:1B:60:8D:33:A7:5F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856E65B17190323C62E2CDB77E9C00A7D0
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/b7/26cf18-afb5-4269-a1c9-83def21d6ab2/1/2hX3YwTQpdu-Yh4R4wIbYI0zp18.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/b7/26cf18-afb5-4269-a1c9-83def21d6ab2/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 17:33:56 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 83.138.49.0/24
                          IP: 2a11:1880::/29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6e:65:b1:71:90:32:3c:62:e2:cd:b7:7e:9c:00:a7:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 17:33:56 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=da15f76304d0a5dbbe621e11e3021b608d33a75f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:94:78:ff:45:0c:15:87:b5:cd:e0:ce:f6:1e:
                    51:26:f8:ca:6d:4d:c6:69:ec:a1:b6:6f:08:d3:65:
                    4e:9d:f5:a1:6d:b1:e6:a9:80:30:d7:96:75:ca:77:
                    d2:4e:51:4b:1a:06:79:55:a4:5d:de:f9:7f:70:6c:
                    38:8c:ce:88:5c:ff:21:03:72:47:ff:ba:4f:71:97:
                    ab:56:11:4b:3c:fe:b5:79:85:6a:19:8c:11:ac:61:
                    f8:e9:7c:4e:c8:f4:f9:22:43:4b:dd:35:f1:e6:c1:
                    dc:b8:fc:6d:ae:e3:f5:10:0d:e0:b9:65:65:45:08:
                    9f:25:d7:62:6a:c0:14:44:5e:d3:e3:23:71:64:0f:
                    b2:4d:49:95:c0:61:c9:70:c5:92:cf:a6:c6:89:24:
                    96:e6:e6:c7:9e:45:8b:9a:c0:e9:43:5c:13:e9:96:
                    c4:60:98:cf:f1:fc:6c:86:f4:df:a2:fe:33:b2:3c:
                    de:25:af:c5:b4:33:1b:96:b7:4c:80:0a:80:09:ce:
                    30:38:58:67:52:3a:db:f6:de:92:2b:01:15:b6:1d:
                    e2:c6:70:4f:ac:55:a0:b9:f7:1f:62:16:e9:b4:42:
                    2f:a6:f3:cb:8a:87:97:6e:35:9e:51:fd:7a:97:81:
                    b8:38:30:28:4d:2c:8b:de:e9:8a:2c:c0:a1:e9:8f:
                    22:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:15:F7:63:04:D0:A5:DB:BE:62:1E:11:E3:02:1B:60:8D:33:A7:5F
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/26cf18-afb5-4269-a1c9-83def21d6ab2/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/26cf18-afb5-4269-a1c9-83def21d6ab2/1/2hX3YwTQpdu-Yh4R4wIbYI0zp18.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  83.138.49.0/24
                IPv6:
                  2a11:1880::/29

    Signature Algorithm: sha256WithRSAEncryption
         45:63:42:65:ee:88:40:91:a0:80:aa:11:3f:00:0b:9b:e0:5b:
         20:ae:85:48:d7:01:31:1b:ab:d9:6e:1b:f5:6a:f4:df:eb:b7:
         fa:4d:03:88:68:09:52:ef:fe:28:7f:3d:a8:0a:bf:86:71:7d:
         f7:aa:41:86:8d:02:c7:3b:a4:5c:57:97:70:61:bf:15:d0:80:
         5a:29:6f:23:ce:ca:1a:d6:23:39:f6:40:9a:f8:a3:12:6d:91:
         a8:d2:e9:99:40:ad:ac:fb:bd:a8:ee:f0:97:e6:0d:4e:d0:a6:
         f4:a6:0d:f3:80:a3:56:81:71:58:8d:cd:31:42:ae:24:f8:7f:
         87:6f:dc:2f:d7:cf:5c:59:31:bf:1b:a9:06:61:3d:e8:81:fe:
         ad:48:9f:eb:92:5b:62:47:c5:9d:02:b1:09:2a:31:f7:3b:63:
         b9:7d:9f:20:56:1e:68:d0:1e:64:75:16:7b:a5:52:02:de:22:
         81:16:2a:f3:4c:8c:91:f4:d6:1a:7a:de:f3:1b:dc:d8:22:a1:
         40:ff:2c:6e:65:2c:82:52:5d:81:fe:da:15:c4:82:f2:42:3a:
         39:d6:8f:9a:69:1d:f6:a7:53:9b:70:5d:aa:d3:e8:52:3f:09:
         11:da:81:44:d3:49:ca:8e:70:fd:b4:1b:78:a9:dd:6b:f7:10:
         eb:9c:d6:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----