Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3YSQY2Fq7oua6QhK3nKEKgB9NnY.cer
File:                     3YSQY2Fq7oua6QhK3nKEKgB9NnY.cer (raw, json)
Hash identifier:          kQ0dbEgOL+LSOWJcOvP7Qvid/YGvqTcHk8lBrb9gWHs=
Subject key identifier:   DD:84:90:63:61:6A:EE:8B:9A:E9:08:4A:DE:72:84:2A:00:7D:36:76
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856C3EA076A2F0B005692F2BD5AA314CE4
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/91/093058-de40-45d9-8f2f-c8f1e1478838/1/3YSQY2Fq7oua6QhK3nKEKgB9NnY.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/91/093058-de40-45d9-8f2f-c8f1e1478838/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 07:32:01 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 146.19.38.0/24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6c:3e:a0:76:a2:f0:b0:05:69:2f:2b:d5:aa:31:4c:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 07:32:01 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=dd849063616aee8b9ae9084ade72842a007d3676
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:fd:09:8e:c0:67:0d:6c:f2:6c:8e:51:19:e3:
                    0d:49:03:c5:52:c2:a2:28:e0:f9:ed:64:d3:5d:be:
                    d1:01:7e:68:8a:b3:99:4b:6c:93:2c:00:f7:ef:b4:
                    f7:ea:64:06:d6:1f:6d:52:6e:5a:f6:ab:64:7c:dc:
                    3e:0a:01:04:a3:b4:62:cf:0f:1d:fd:52:fe:c6:e3:
                    42:b1:1c:e3:95:a6:99:c5:b2:7c:d5:af:54:8e:84:
                    37:33:6b:eb:e7:04:fc:2d:34:1d:41:4b:04:85:f3:
                    96:7f:a4:c4:b0:4f:d6:6d:f8:39:34:f5:2d:5a:41:
                    c7:81:77:bd:c4:5d:f8:c8:b2:08:39:62:5c:b1:03:
                    22:db:25:e3:eb:a5:58:04:ac:9f:18:5b:8b:94:c1:
                    b8:dc:73:de:91:d5:5e:17:41:1e:a0:a0:f7:cb:4f:
                    3c:2b:8f:17:bb:ce:07:d3:36:2f:55:56:7d:7e:1c:
                    5f:f0:c9:34:b3:cf:bf:fa:72:ec:01:28:23:ca:70:
                    42:72:bb:40:a4:3d:58:6c:85:09:ea:12:f5:f3:77:
                    04:02:54:3f:7e:14:34:bb:ad:1a:01:39:56:d2:95:
                    ce:d1:cb:04:96:5f:39:6f:df:72:56:28:a5:4a:e7:
                    17:62:a4:80:38:41:9d:66:f5:21:f3:a7:a2:1c:66:
                    34:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:84:90:63:61:6A:EE:8B:9A:E9:08:4A:DE:72:84:2A:00:7D:36:76
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/093058-de40-45d9-8f2f-c8f1e1478838/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/093058-de40-45d9-8f2f-c8f1e1478838/1/3YSQY2Fq7oua6QhK3nKEKgB9NnY.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.19.38.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ad:21:03:46:02:25:65:1d:a8:7a:84:d4:da:6e:32:b7:e7:75:
         e3:cd:a3:a7:72:96:c8:64:1c:4e:f3:23:5e:4e:35:3b:de:1d:
         67:c5:e7:0a:75:4d:ec:8b:a4:91:7d:93:82:09:3a:f5:71:9c:
         e1:8e:e5:c9:d9:a5:17:26:1c:28:31:fa:41:d8:6b:a8:9b:e3:
         2c:42:df:92:9a:b6:77:39:4f:e1:75:0c:e9:7d:93:78:88:b0:
         54:b4:e1:24:c0:8f:23:2f:63:e6:7c:9f:cb:86:6f:fe:ba:2e:
         d3:c9:dc:e5:8f:9b:6b:01:5f:fc:bc:41:6d:da:2f:9e:39:74:
         d6:31:66:7f:78:94:14:61:df:ef:f6:8d:00:19:03:1d:11:f8:
         16:23:3f:98:1f:c7:38:26:91:24:71:23:e2:24:30:9e:49:3f:
         88:14:7e:70:01:da:08:40:a0:01:87:70:80:33:b6:e8:66:86:
         48:d0:80:34:7e:79:32:e7:91:a4:dd:7e:00:c9:7d:ed:59:fb:
         6b:84:e6:bb:27:bf:89:66:e9:9a:94:da:5a:40:d5:a9:3b:64:
         af:b1:03:3f:82:28:f3:50:47:8e:8f:20:c8:ca:c7:93:7a:46:
         fe:ea:96:9a:c2:a9:80:c9:bb:f6:75:0b:24:d2:a2:95:17:db:
         87:bd:31:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----