Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4Cq-JhLWekPWgo1bNEGPXzS2qCQ.cer
File:                     4Cq-JhLWekPWgo1bNEGPXzS2qCQ.cer (raw, json)
Hash identifier:          CvbBoe5PUuIaM1dPJwICls/p9HN0gRyd2uB3qNFGd1I=
Subject key identifier:   E0:2A:BE:26:12:D6:7A:43:D6:82:8D:5B:34:41:8F:5F:34:B6:A8:24
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856E6513559307F5472FC71171E7CEA7D1
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/ff/5d6885-39fd-465f-93b4-3170fd5c3e17/1/4Cq-JhLWekPWgo1bNEGPXzS2qCQ.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/ff/5d6885-39fd-465f-93b4-3170fd5c3e17/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 17:33:15 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    AS: 207192
                          IP: 185.161.48.0/22
                          IP: 2a0f:5240::/32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6e:65:13:55:93:07:f5:47:2f:c7:11:71:e7:ce:a7:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 17:33:15 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=e02abe2612d67a43d6828d5b34418f5f34b6a824
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:28:cd:7a:9b:ea:96:29:55:15:a4:85:72:a8:
                    af:ab:68:27:7d:dc:c6:17:15:d9:5a:5b:b0:7c:35:
                    c2:78:15:c4:99:74:ff:c4:04:7f:27:c5:01:de:23:
                    f5:a0:20:7d:16:b0:37:02:dd:3a:f5:67:eb:67:f3:
                    5e:e7:3c:9b:b7:f3:02:53:08:3e:ab:62:2e:de:15:
                    6c:ff:aa:c2:ed:be:d2:b7:33:5a:21:30:65:54:94:
                    46:db:81:f7:61:6f:6d:3f:89:92:d8:28:38:c8:57:
                    da:5e:08:36:b7:3a:be:aa:39:24:2a:b8:3a:ef:29:
                    ad:e8:f0:e3:14:07:64:d4:65:73:59:a8:a6:c9:3f:
                    9b:1e:ac:10:88:55:b0:72:f1:e4:b8:f6:f1:0c:ec:
                    bf:55:b6:22:11:4f:88:77:08:07:e9:aa:3a:27:8c:
                    40:d1:51:85:8a:dd:98:c7:de:48:b3:29:d8:6e:0b:
                    e5:23:c2:b1:5c:d4:48:16:3e:0d:70:ed:a4:e8:21:
                    58:1e:b3:fd:46:92:fa:3c:f8:35:03:06:75:12:2e:
                    d2:e6:64:ea:94:b3:3f:df:23:7c:8d:4e:63:08:29:
                    21:07:41:2a:21:1d:16:cf:99:a6:ad:75:a1:15:2c:
                    41:02:9d:69:67:8e:09:bc:1c:91:7f:c8:61:b9:9e:
                    fc:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:2A:BE:26:12:D6:7A:43:D6:82:8D:5B:34:41:8F:5F:34:B6:A8:24
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/5d6885-39fd-465f-93b4-3170fd5c3e17/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/5d6885-39fd-465f-93b4-3170fd5c3e17/1/4Cq-JhLWekPWgo1bNEGPXzS2qCQ.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.161.48.0/22
                IPv6:
                  2a0f:5240::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  207192

    Signature Algorithm: sha256WithRSAEncryption
         2c:21:81:9a:54:6b:38:24:50:dd:8f:6e:bf:31:0b:1f:a1:c9:
         de:39:35:d7:c9:cd:4d:07:d9:2b:1d:9e:b6:2e:47:0f:5b:8f:
         d6:e0:9c:98:4a:d2:dc:91:a7:cb:54:27:21:79:79:a5:e8:da:
         3f:cb:da:5a:7e:af:29:fc:c6:45:9d:62:4f:86:10:fa:66:16:
         e0:c4:eb:09:38:26:44:bf:63:08:b0:63:85:f0:16:b5:57:6d:
         79:54:88:26:77:67:7c:09:9d:3e:b1:8f:e2:8f:65:69:1f:ea:
         7f:57:1d:6a:fb:d7:0d:33:df:05:6b:05:4e:b2:e3:52:dd:02:
         5b:b6:3e:72:7b:d7:c5:2f:14:db:70:ba:a9:3e:ea:ce:7b:27:
         91:4e:07:9e:7a:d3:d5:58:0f:79:7a:1d:ea:9e:de:1b:49:97:
         df:59:72:6a:28:37:15:55:4f:c4:17:f2:53:1e:a5:15:24:84:
         13:11:4e:53:f2:f6:00:37:b6:55:27:f1:e6:8e:37:a2:bb:fc:
         b3:ff:36:4e:cc:a9:22:f1:58:3e:a7:b5:9e:93:39:ad:3f:c9:
         64:52:03:55:05:bc:53:63:5e:a3:18:9e:03:0e:1d:37:18:6f:
         42:36:55:a0:bf:7e:57:8d:6c:2e:fb:15:71:dd:90:6a:b9:ca:
         25:51:f3:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----