Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4JMvqepn25EAvy6pNij6RVfUx5Q.cer
File:                     4JMvqepn25EAvy6pNij6RVfUx5Q.cer (raw, json)
Hash identifier:          FbC1QBjLz6BMR2hD0EnSfuuFpymkG2MSEE6GojXVkTg=
Subject key identifier:   E0:93:2F:A9:EA:67:DB:91:00:BF:2E:A9:36:28:FA:45:57:D4:C7:94
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856F41C8F252EEAF0FE64FD9FA929BF730
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/8a/61e440-62d4-43be-96d3-c529b6a3e71a/1/4JMvqepn25EAvy6pNij6RVfUx5Q.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/8a/61e440-62d4-43be-96d3-c529b6a3e71a/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 21:34:20 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    AS: 34412
                          IP: 31.25.90.0/23
                          IP: 185.49.231.0/24
                          IP: 185.226.140.0/22
                          IP: 2a10:5740::/29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:41:c8:f2:52:ee:af:0f:e6:4f:d9:fa:92:9b:f7:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 21:34:20 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=e0932fa9ea67db9100bf2ea93628fa4557d4c794
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:0f:b6:4d:d9:fd:44:e3:52:40:c6:b1:fd:54:
                    bb:1f:ad:7f:87:e7:38:ea:05:37:77:5d:4b:d0:03:
                    c2:42:69:7e:9b:f9:1f:bc:09:d6:bd:22:22:fc:c3:
                    58:b9:91:c2:14:8c:06:e4:ca:37:77:29:45:e2:a1:
                    93:a4:40:ec:80:0c:6a:e0:ca:82:67:04:77:c6:b6:
                    44:13:4c:34:6d:7e:6c:77:1d:58:f4:18:80:f7:3b:
                    46:83:1f:b1:4c:54:d0:48:ff:31:32:1a:fd:34:9e:
                    7a:f2:75:7a:94:6b:ce:72:e6:e0:f3:b4:79:c7:b7:
                    19:71:4c:07:79:9a:fc:4a:e9:61:e6:44:d0:eb:0a:
                    4d:83:8d:fc:c8:fc:a9:6e:68:57:cf:e7:2e:74:7c:
                    b1:4e:4c:eb:43:ac:c7:74:ae:d0:5c:fb:e2:47:bc:
                    42:96:d8:2a:93:9e:4a:fc:68:a0:a2:04:f8:8f:80:
                    96:79:6f:2e:41:29:7e:b9:4d:44:41:f6:a3:ef:d3:
                    25:04:ff:8e:f7:09:c1:ff:23:1e:34:fd:f6:b5:ce:
                    81:dd:39:71:40:61:19:c2:64:67:1e:1e:7e:33:ff:
                    8b:a0:e5:52:85:89:56:27:76:d3:e5:95:5a:f1:3b:
                    14:73:94:3b:94:1f:08:4e:17:86:bf:fb:7b:8b:f7:
                    cb:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:93:2F:A9:EA:67:DB:91:00:BF:2E:A9:36:28:FA:45:57:D4:C7:94
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/61e440-62d4-43be-96d3-c529b6a3e71a/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/61e440-62d4-43be-96d3-c529b6a3e71a/1/4JMvqepn25EAvy6pNij6RVfUx5Q.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.25.90.0/23
                  185.49.231.0/24
                  185.226.140.0/22
                IPv6:
                  2a10:5740::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  34412

    Signature Algorithm: sha256WithRSAEncryption
         74:92:bd:11:f1:3f:15:34:09:dd:9d:33:54:a0:0d:61:2b:76:
         06:82:a6:b3:5b:33:b3:53:fb:ad:b3:8f:f2:13:67:7a:67:53:
         29:b6:08:7e:a7:c3:d8:a3:43:2c:da:2a:54:76:55:e0:01:31:
         98:62:e8:82:20:87:4d:e4:4d:c2:e3:d9:27:74:76:80:0b:d6:
         c7:7a:71:69:1f:cb:43:56:fd:ca:55:07:bb:11:6a:e3:7a:5e:
         07:13:45:91:0c:b4:16:b2:c0:93:60:df:e8:21:00:72:81:34:
         81:62:cd:a8:d7:f3:fd:0a:53:1e:76:35:c5:6b:81:68:8f:38:
         9d:8b:5e:84:69:05:f1:b2:fe:e4:72:14:96:90:82:11:9f:2c:
         12:12:af:e5:7e:f0:91:a3:71:3a:8e:c0:c0:3c:c0:94:38:7d:
         f4:ac:72:c4:8f:2b:0b:8d:cf:ee:35:7d:77:d1:8b:37:43:8d:
         61:19:7b:4d:d7:6f:42:d2:17:19:41:d0:fa:3f:05:52:5f:53:
         cc:e4:07:3e:3b:91:8f:c9:8c:80:c5:c0:3d:ff:e2:3f:fe:7c:
         18:9e:87:e9:54:fb:bc:72:01:e5:be:9e:b8:53:64:14:75:38:
         a5:a7:cb:94:fc:96:8d:a0:a8:04:5f:6f:2c:f4:e7:73:d4:34:
         ec:b4:32:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----