Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2zCLeS6u22LAaFDa-5GNgfMTBuE.cer
File:                     2zCLeS6u22LAaFDa-5GNgfMTBuE.cer (raw, json)
Hash identifier:          VGdxqbdxRLV9e+v6CB44NKgMgESDbM0zsPHN8PqLxkI=
Subject key identifier:   DB:30:8B:79:2E:AE:DB:62:C0:68:50:DA:FB:91:8D:81:F3:13:06:E1
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856AF4F7B087B58944B7C5C65C5AAD031B
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/21/94c1cf-23fa-46d7-80c5-2692246f8b26/1/2zCLeS6u22LAaFDa-5GNgfMTBuE.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/21/94c1cf-23fa-46d7-80c5-2692246f8b26/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 01:31:57 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    AS: 47471
                          IP: 195.242.170.0/24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6a:f4:f7:b0:87:b5:89:44:b7:c5:c6:5c:5a:ad:03:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 01:31:57 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=db308b792eaedb62c06850dafb918d81f31306e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:6f:09:be:c1:47:1d:8a:52:42:10:8b:09:8b:
                    d5:78:6d:6b:9e:88:2c:45:e5:bf:6a:e0:83:78:c0:
                    71:d3:f8:d6:cf:b7:82:47:09:56:dc:80:f3:8e:c8:
                    7a:e8:4d:d3:2f:73:10:91:c8:43:b8:e8:41:0e:5b:
                    3a:a6:6a:22:53:6b:4f:e6:95:f3:c0:3e:3d:ed:9a:
                    7f:cc:22:25:3b:93:e1:b9:94:e1:0b:42:43:bd:41:
                    47:4d:0f:42:e2:52:93:a7:42:22:c0:56:99:e7:7b:
                    af:c0:d8:11:6c:cb:40:b5:5d:b5:f8:1a:37:21:f2:
                    e2:7e:e5:9f:29:7a:47:42:00:50:7d:8f:e4:52:46:
                    c0:e8:28:16:42:08:61:bf:cc:c9:3f:58:40:9c:39:
                    78:4b:0b:ae:a0:dd:97:e9:04:1f:66:0b:64:0e:ba:
                    ae:f8:d8:52:b1:e0:fe:56:c7:cc:41:a4:b9:24:b8:
                    0d:5b:f7:ae:e8:f7:3f:23:89:68:7e:ac:dc:2a:ba:
                    c7:ea:59:83:8c:ea:3d:24:ea:2f:5c:0e:ee:48:86:
                    14:50:d5:71:4e:8a:30:f6:dd:19:c7:70:b4:6e:13:
                    e3:18:8a:16:95:89:73:eb:77:a2:65:7b:1a:cf:c6:
                    0d:29:18:3e:d3:24:b4:f0:5c:25:0f:72:e5:8b:57:
                    87:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:30:8B:79:2E:AE:DB:62:C0:68:50:DA:FB:91:8D:81:F3:13:06:E1
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/94c1cf-23fa-46d7-80c5-2692246f8b26/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/94c1cf-23fa-46d7-80c5-2692246f8b26/1/2zCLeS6u22LAaFDa-5GNgfMTBuE.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.242.170.0/24

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  47471

    Signature Algorithm: sha256WithRSAEncryption
         51:9e:0c:98:c7:bd:9d:88:e7:6b:5d:9c:4d:df:0c:b7:ec:8e:
         98:b1:01:ea:38:69:6a:a0:06:9f:aa:2c:5e:a9:5f:13:b8:67:
         a0:16:5a:f7:89:33:f6:da:d3:ca:89:59:03:0d:41:d6:6d:34:
         52:8a:44:44:8c:a7:ca:03:68:33:19:ad:7a:20:9e:5b:e4:e4:
         a5:b2:4b:6c:77:30:ad:9d:a6:58:77:7a:fd:a4:7c:aa:cc:20:
         f0:9f:df:3c:f2:65:17:1b:87:1f:57:57:90:1b:f7:43:2a:98:
         e4:dd:95:09:50:77:6d:2c:29:d3:5b:9e:1f:3c:0d:fb:67:d7:
         d2:f3:ce:10:82:83:09:13:07:c1:db:91:59:58:1b:cc:e4:03:
         fa:4c:87:75:b5:72:bb:da:19:72:f4:b0:fe:53:ff:80:e1:7e:
         e5:f7:da:84:71:1c:c2:99:7c:82:4e:a0:7b:b9:f1:14:2b:e4:
         4f:8e:f9:e7:29:ec:19:e8:12:b5:ff:91:ae:05:64:81:91:78:
         94:c7:9b:3a:01:d4:42:aa:6a:ea:ca:03:03:c1:e3:ef:a7:10:
         bc:37:ae:35:9a:12:0f:9c:46:85:6c:91:c0:0a:f3:46:b6:a7:
         b7:f9:37:51:72:72:c1:aa:e1:57:64:01:2b:91:07:af:fc:46:
         3b:73:e6:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----