Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48fBn42bUOpgzOdJivD9jDkIEZ4.cer
File:                     48fBn42bUOpgzOdJivD9jDkIEZ4.cer (raw, json)
Hash identifier:          5d5NUeRjjYBhl8Ut6BL99LewVirvp7OHSrQIbb2/j58=
Subject key identifier:   E3:C7:C1:9F:8D:9B:50:EA:60:CC:E7:49:8A:F0:FD:8C:39:08:11:9E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01888B9DB1D75FC5703A334EE81DE105C8DB
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/f9/23929a-b247-4f3b-9cd1-8b1f5becdda2/1/48fBn42bUOpgzOdJivD9jDkIEZ4.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/f9/23929a-b247-4f3b-9cd1-8b1f5becdda2/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 05 Jun 2023 12:52:27 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    AS: 205227
                          IP: 185.234.219.0/24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:8b:9d:b1:d7:5f:c5:70:3a:33:4e:e8:1d:e1:05:c8:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jun  5 12:52:27 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=e3c7c19f8d9b50ea60cce7498af0fd8c3908119e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:ed:96:14:ea:b9:4b:87:f4:9e:76:bd:ca:8c:
                    19:26:72:94:d0:c4:e6:9c:d5:a5:50:1a:d1:6f:43:
                    8c:69:da:3b:cb:d5:5b:06:8e:a7:45:f3:0d:95:7c:
                    55:00:e9:7e:2e:f1:73:7d:ae:dd:be:09:71:f1:52:
                    b9:ab:29:cc:b4:0f:94:84:38:3b:d1:3b:3f:5b:0c:
                    27:5b:e9:63:2d:14:52:a4:26:e8:01:9c:4b:ba:09:
                    4d:85:87:9c:8f:b4:9b:94:d0:ec:31:bb:30:0d:8f:
                    7e:1f:0a:ec:86:7f:32:f8:ec:1f:58:29:bb:c1:1f:
                    7b:13:18:bd:30:a2:b2:cd:2c:37:71:58:94:57:3f:
                    9e:af:0f:01:7c:4e:7d:98:19:a2:a1:36:bf:a3:75:
                    99:45:51:90:2a:5e:ae:91:84:ba:81:79:31:85:77:
                    ed:82:0e:c6:f3:68:7b:2b:53:27:1b:f9:2d:a1:a5:
                    ed:03:c6:a8:82:47:68:b4:12:01:7c:8c:79:1b:19:
                    92:4b:f5:0a:dd:f8:de:91:28:e9:6a:7c:9e:c0:98:
                    03:f7:25:1c:97:33:a3:7d:82:ad:ec:74:ef:0c:90:
                    e5:b4:97:5e:72:be:ba:c9:12:a1:3c:71:61:0f:8d:
                    4e:91:22:52:95:80:03:fb:21:aa:64:a8:9e:1c:14:
                    69:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:C7:C1:9F:8D:9B:50:EA:60:CC:E7:49:8A:F0:FD:8C:39:08:11:9E
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/23929a-b247-4f3b-9cd1-8b1f5becdda2/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/23929a-b247-4f3b-9cd1-8b1f5becdda2/1/48fBn42bUOpgzOdJivD9jDkIEZ4.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.234.219.0/24

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  205227

    Signature Algorithm: sha256WithRSAEncryption
         8e:79:44:69:af:72:48:0d:b1:5c:97:b2:49:71:2e:c6:21:d9:
         1f:d6:0e:21:6a:6a:80:f8:b2:05:cf:8e:9e:85:db:db:81:92:
         c9:99:49:ec:11:40:e1:e3:ec:cf:99:b9:6d:ce:4f:c8:10:91:
         30:cc:b3:06:32:91:b5:82:63:07:6c:39:87:0e:e6:93:0f:23:
         f5:cb:1b:cf:b4:83:26:5e:64:43:66:80:18:2c:3c:e2:6b:e2:
         71:6c:77:3e:31:fd:4f:7a:63:0d:8f:8a:85:fa:7a:33:0c:1c:
         46:da:a1:e5:93:81:25:bb:47:ca:88:c8:fc:03:c3:b5:7e:59:
         35:fa:20:27:e9:5d:07:b0:ad:68:ba:39:1f:3b:f0:c2:26:2c:
         dc:65:09:6f:63:1e:4f:cc:8c:1f:f7:fd:a9:b8:d9:24:c7:3e:
         44:92:dd:36:41:c5:26:82:f8:f1:de:3d:7d:97:6d:b2:67:45:
         19:75:2f:e5:d7:db:5c:d2:4a:a0:71:2c:3f:1c:e4:a6:eb:89:
         81:f5:c3:11:9d:b9:85:40:ae:17:1f:b8:38:6c:a6:00:e4:be:
         8d:db:88:c4:ee:b4:f1:d1:02:0d:b2:be:4a:16:0e:d1:05:46:
         c2:5d:7a:3a:de:ad:ee:ea:25:48:19:46:ca:4a:62:e8:5e:72:
         c0:3c:60:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----