Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4Mp9Myha23QpUAh_LnZZIv8-384.cer
File:                     4Mp9Myha23QpUAh_LnZZIv8-384.cer (raw, json)
Hash identifier:          ilvdAHCaVSFTuqGm5gqy/esip2tmA2teZarkXV1Dcec=
Subject key identifier:   E0:CA:7D:33:28:5A:DB:74:29:50:08:7F:2E:76:59:22:FF:3E:DF:CE
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856D1B679FC1E8EECA486FE4EBB1E6EB1E
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/28/c57c65-696f-4f86-9af7-a222fad7e25f/1/4Mp9Myha23QpUAh_LnZZIv8-384.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/28/c57c65-696f-4f86-9af7-a222fad7e25f/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 11:33:10 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 185.231.36.0/22
                          IP: 2a0c:3f00::/29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6d:1b:67:9f:c1:e8:ee:ca:48:6f:e4:eb:b1:e6:eb:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 11:33:10 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=e0ca7d33285adb742950087f2e765922ff3edfce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:7b:3b:7d:f9:2f:a9:0b:a8:30:02:d5:8b:19:
                    7a:3c:2a:4c:7b:89:04:ff:f1:c7:aa:62:3c:54:58:
                    a9:1c:1d:aa:79:91:cd:a1:60:e8:4a:f7:4a:d5:29:
                    b4:71:1b:98:ac:f8:95:9d:de:b1:a7:8c:b2:e6:57:
                    c6:01:81:51:44:e7:98:5f:d5:e3:2e:7f:67:0e:39:
                    97:52:84:4f:ac:51:e8:54:c3:64:31:17:f1:a2:c6:
                    32:6f:b3:ba:f9:08:a1:1c:f6:91:2f:55:9f:3e:39:
                    9a:36:4a:59:cf:58:93:69:0b:26:3d:a1:ca:f1:5a:
                    2a:e3:2b:97:bd:33:76:53:62:93:9a:b2:1f:17:ea:
                    15:e1:06:58:4c:68:8f:89:68:b8:af:82:91:17:f6:
                    ca:79:43:64:10:7a:49:05:c3:ac:3e:eb:30:7d:a8:
                    e4:dc:45:17:be:f6:da:9b:3f:c2:ce:dc:13:97:3d:
                    17:ab:72:e1:5c:0a:59:fd:7a:bf:21:8f:17:f5:b4:
                    33:c0:05:8d:7d:b4:6c:ea:e7:22:b7:d3:6f:0f:b0:
                    93:d3:f3:45:e1:97:42:d1:74:76:2c:18:a7:d7:e7:
                    dd:ec:d4:86:58:fe:20:af:0d:60:5a:ea:a1:04:c3:
                    58:c4:21:ef:75:8e:a2:79:37:4a:a7:54:b3:0a:d1:
                    73:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:CA:7D:33:28:5A:DB:74:29:50:08:7F:2E:76:59:22:FF:3E:DF:CE
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/c57c65-696f-4f86-9af7-a222fad7e25f/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/c57c65-696f-4f86-9af7-a222fad7e25f/1/4Mp9Myha23QpUAh_LnZZIv8-384.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.231.36.0/22
                IPv6:
                  2a0c:3f00::/29

    Signature Algorithm: sha256WithRSAEncryption
         37:6b:73:ca:9d:6f:c1:b3:3f:d9:70:b1:cd:d9:52:db:fc:bb:
         eb:94:64:86:00:ba:cf:eb:db:be:7d:71:57:ce:e3:38:86:1f:
         04:35:0d:a9:8c:ce:51:a2:ca:7a:fc:3c:d0:fd:dc:65:68:88:
         1d:0b:45:fe:7c:bc:a5:16:67:5c:77:6f:04:12:3b:7d:6c:6b:
         3f:81:f8:8b:d3:a8:ed:11:51:64:8b:12:74:7f:03:6b:b8:92:
         21:14:40:87:34:53:6f:6b:0a:db:b2:c6:a8:49:76:6d:a4:e0:
         2a:19:07:c5:14:ad:c0:18:f6:30:5b:41:6e:55:79:13:e7:aa:
         1f:c1:04:31:c0:34:92:5a:fa:dc:e5:90:3d:37:5c:ee:19:c8:
         38:02:ef:1e:f7:93:e2:9f:59:57:2d:df:0b:e3:ed:72:0c:b8:
         42:f3:da:26:30:2e:2a:a6:94:f8:98:2e:0b:a2:40:fe:bb:1a:
         0f:38:17:06:6d:f2:ec:5c:7c:ee:b7:23:af:18:5b:8f:59:e2:
         a3:cf:27:d6:92:7f:ea:94:6a:6a:26:a3:5a:f5:d2:22:1f:c5:
         98:04:80:1e:24:c7:10:bc:56:be:53:29:53:d8:2c:c5:78:17:
         06:aa:78:4f:15:19:33:e5:09:62:67:a9:34:e5:b4:2d:b2:aa:
         4c:de:dc:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----