Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2qJ5lSKPT4F2Y3qsw6FkcaiNhCM.cer
File:                     2qJ5lSKPT4F2Y3qsw6FkcaiNhCM.cer (raw, json)
Hash identifier:          /LXcVt4k4WISg8FPWx3Lm4Y0abgD+BWOSUA7w2piRzQ=
Subject key identifier:   DA:A2:79:95:22:8F:4F:81:76:63:7A:AC:C3:A1:64:71:A8:8D:84:23
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856BD09D764449907A35C775C290F2E171
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/8c/69be21-8f43-4bb7-94bf-2314148c15dc/1/2qJ5lSKPT4F2Y3qsw6FkcaiNhCM.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/8c/69be21-8f43-4bb7-94bf-2314148c15dc/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 05:31:52 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    AS: 34761
                          IP: 217.194.80.0/20

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6b:d0:9d:76:44:49:90:7a:35:c7:75:c2:90:f2:e1:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 05:31:52 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=daa27995228f4f8176637aacc3a16471a88d8423
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:d3:bc:6a:34:d8:2e:cd:b8:4a:02:93:14:0c:
                    ca:a0:69:a9:a4:9b:50:75:1d:0e:fc:45:a3:27:e1:
                    aa:30:e5:b5:8b:ba:87:cf:d9:4a:b7:62:f6:0c:44:
                    65:3e:5e:35:61:52:99:80:95:c3:8d:5e:57:dc:43:
                    a6:7a:0b:03:18:6c:15:7a:83:78:19:b4:72:33:1a:
                    b5:3b:94:2a:86:0c:ab:f2:8f:43:9d:2b:9a:6d:12:
                    77:c8:28:d5:ba:9d:a1:56:01:2c:c8:59:0c:70:57:
                    c4:03:e4:8b:0c:a3:43:d5:5d:86:22:a6:b8:8d:4c:
                    eb:e1:67:37:f2:4d:a6:e5:36:83:b2:ad:f1:d0:b0:
                    ce:90:ad:19:ba:30:85:ad:8f:e5:9f:87:37:fa:93:
                    20:d3:b4:55:77:24:28:0d:89:e3:ac:d7:cc:43:71:
                    87:2b:f9:f5:e3:b7:d4:9b:fa:d0:f2:c0:ae:73:8e:
                    aa:96:c1:9b:ef:ff:e6:3f:4d:8d:2a:b8:e5:d0:9c:
                    f8:7c:29:f7:43:10:3f:ff:d1:9d:1a:cc:27:8e:e3:
                    4a:ba:0a:76:66:be:af:f9:05:0c:f7:3d:20:29:57:
                    ff:f5:b6:9e:e5:98:e9:03:7b:5d:91:3f:c7:c9:a3:
                    01:d9:00:56:9c:97:dd:3e:22:2a:a7:1e:67:01:34:
                    47:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:A2:79:95:22:8F:4F:81:76:63:7A:AC:C3:A1:64:71:A8:8D:84:23
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/69be21-8f43-4bb7-94bf-2314148c15dc/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/69be21-8f43-4bb7-94bf-2314148c15dc/1/2qJ5lSKPT4F2Y3qsw6FkcaiNhCM.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  217.194.80.0/20

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  34761

    Signature Algorithm: sha256WithRSAEncryption
         00:d9:ab:f9:e4:5a:1f:a4:48:37:86:97:27:21:d0:cd:70:a3:
         aa:07:e1:6e:a4:00:fc:e5:28:2a:9b:50:cd:64:50:63:19:64:
         89:7a:14:e4:dc:45:c5:c0:97:09:2d:b6:cb:b6:7a:5b:aa:9a:
         bc:21:dc:16:c6:2f:15:82:11:55:b0:c2:49:c1:7a:d7:da:05:
         60:19:f2:7c:7c:46:07:23:f1:7e:a9:75:b0:7c:81:29:d4:b2:
         80:03:2d:a0:f0:23:3c:55:c1:d1:d7:f8:fe:9f:4c:35:ed:e9:
         95:68:be:b8:37:6c:fe:84:b6:a1:33:81:fc:da:08:39:41:61:
         45:dd:20:28:f7:1d:3f:d3:97:7b:74:10:58:1e:a2:41:f7:cd:
         82:f0:92:a8:6f:86:5d:ef:93:44:ff:f6:14:5b:c4:40:bd:a1:
         0b:ea:f6:ef:6b:a2:d7:06:81:45:6b:7b:32:37:c7:5f:7e:9d:
         ca:c4:dc:28:4e:bc:9e:7f:6e:ea:0d:40:86:57:8a:b1:37:60:
         8e:44:59:80:2d:dd:aa:14:70:af:26:88:ad:e4:c6:bc:19:db:
         aa:3d:55:4f:a2:8b:0f:31:62:2a:1d:28:cf:72:34:93:9f:ba:
         38:bf:75:f8:8e:20:07:5d:1f:36:a9:fd:a3:d5:66:da:af:d9:
         0d:5d:0b:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----