Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2nmy2SwZztqi20I1f4VNpliOGZM.cer
File:                     2nmy2SwZztqi20I1f4VNpliOGZM.cer (raw, json)
Hash identifier:          4Bzci/iFyo+9JRzD77jHyXKOxcG1I7W0V2Mp/DYIdiU=
Subject key identifier:   DA:79:B2:D9:2C:19:CE:DA:A2:DB:42:35:7F:85:4D:A6:58:8E:19:93
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018571691805220D1CDAE812D7B1823D7B07
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/a3/172cf6-3c86-434f-baa5-7f7201c9c05f/1/2nmy2SwZztqi20I1f4VNpliOGZM.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/a3/172cf6-3c86-434f-baa5-7f7201c9c05f/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 02 Jan 2023 07:36:30 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 91.247.173.0/24
                          IP: 2a11:c640::/29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:71:69:18:05:22:0d:1c:da:e8:12:d7:b1:82:3d:7b:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 07:36:30 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=da79b2d92c19cedaa2db42357f854da6588e1993
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:d4:46:d4:81:8e:04:1e:3b:00:c2:59:4c:bf:
                    63:a2:7f:b6:67:57:bb:fb:44:70:e2:6b:33:38:ee:
                    62:27:f3:2c:13:e2:b2:c7:df:24:1a:c7:95:26:91:
                    ae:ab:66:56:fc:53:19:0b:39:a2:3b:9b:f5:9b:2b:
                    8f:61:a1:76:5f:16:03:f6:7e:ed:d9:22:d9:ea:99:
                    6a:a3:b9:e2:cc:bb:69:1d:08:1d:c0:5e:9d:11:e0:
                    f1:a8:b9:c4:a0:57:83:58:5e:5f:97:f5:5d:aa:36:
                    92:75:96:1f:93:e3:9e:f4:77:ab:ba:0d:22:bf:8d:
                    5b:56:09:31:18:e6:3d:34:ee:3b:76:88:6d:f1:9c:
                    84:26:2f:95:ad:ac:aa:5d:b3:fd:b0:c2:41:f6:c0:
                    25:c0:40:31:fd:32:b3:94:f0:00:db:30:7f:da:e4:
                    9c:50:10:cf:f5:fc:d2:7d:25:8a:e8:64:0f:71:a2:
                    d9:a8:3b:1f:22:4b:27:bc:3c:9a:43:1d:4b:93:4c:
                    c5:9c:b2:06:5b:49:94:fb:9a:0e:43:47:f8:b0:cd:
                    b8:e1:71:21:c9:c8:ad:19:45:d5:0b:92:25:ff:1e:
                    ae:a1:ab:3b:e3:ee:59:cc:b4:68:0b:9a:a8:7a:68:
                    81:8e:ba:5a:f8:67:d0:1c:92:5c:44:88:66:f8:37:
                    c2:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:79:B2:D9:2C:19:CE:DA:A2:DB:42:35:7F:85:4D:A6:58:8E:19:93
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/172cf6-3c86-434f-baa5-7f7201c9c05f/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/172cf6-3c86-434f-baa5-7f7201c9c05f/1/2nmy2SwZztqi20I1f4VNpliOGZM.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.247.173.0/24
                IPv6:
                  2a11:c640::/29

    Signature Algorithm: sha256WithRSAEncryption
         1e:70:22:cc:a7:05:57:5b:41:6a:15:77:76:fc:e2:5b:ac:48:
         53:fc:86:3e:b2:1a:d7:77:b4:46:a2:57:d4:1d:cd:56:32:4c:
         cd:13:1e:4c:19:95:7f:8a:7b:7b:d0:83:bb:2e:46:99:85:ee:
         33:61:a7:aa:73:a0:44:54:c5:93:6d:13:6b:d6:d7:5a:e0:f5:
         68:3d:9d:23:59:a5:8a:4b:af:50:0c:a2:f7:e7:71:ff:5c:e7:
         83:d3:73:fd:4c:ae:b3:19:84:5e:bc:e4:37:d5:bf:a4:e8:b6:
         0c:4e:0c:a5:86:45:11:4e:8e:09:fc:02:80:e9:14:f6:a8:37:
         91:1c:76:98:4f:9f:45:75:e6:b8:21:2f:b4:f8:ab:bf:34:08:
         d6:84:09:03:32:4d:cb:3d:42:ea:4e:a9:36:05:3b:be:47:03:
         89:67:6a:49:5a:8b:dc:5b:b0:a3:b0:12:da:c7:a6:dd:30:a6:
         fb:3d:29:70:27:ab:de:35:b3:ca:0d:7f:e0:78:4a:90:e3:b1:
         8f:db:cb:24:14:7f:1d:26:7c:7f:fc:e4:8f:bc:13:8e:98:c4:
         a3:f1:60:df:7a:cd:65:98:a9:1c:b6:bb:7a:ec:9e:0b:2a:f2:
         95:b6:26:3f:6e:c3:a7:8a:b2:02:99:41:08:64:38:61:ac:bd:
         e3:f3:97:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----