Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4Uqaxyzosoq2NJ2tB19O7D3LhH0.cer
File:                     4Uqaxyzosoq2NJ2tB19O7D3LhH0.cer (raw, json)
Hash identifier:          HkKgt2poYLn/ETA/pvx7Pg5PlbTW05ZD9tpzUCGckyQ=
Subject key identifier:   E1:4A:9A:C7:2C:E8:B2:8A:B6:34:9D:AD:07:5F:4E:EC:3D:CB:84:7D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018570FAE99FFF1D303A7F0B42ADA5F7F3D4
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/c3/0bffbb-b21c-43d2-82a5-2b24b6723aff/1/4Uqaxyzosoq2NJ2tB19O7D3LhH0.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/c3/0bffbb-b21c-43d2-82a5-2b24b6723aff/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 02 Jan 2023 05:36:10 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    AS: 51067
                          IP: 91.216.121.0/24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:fa:e9:9f:ff:1d:30:3a:7f:0b:42:ad:a5:f7:f3:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 05:36:10 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=e14a9ac72ce8b28ab6349dad075f4eec3dcb847d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:27:34:11:cf:41:67:86:42:93:bf:13:50:24:
                    d3:d2:7c:bd:bc:42:87:8c:39:34:7a:cf:28:7e:83:
                    9b:57:2f:61:ee:79:b4:f1:41:24:90:3d:b8:b4:87:
                    26:a2:38:e8:76:ae:80:4b:0e:17:31:3e:15:3b:7a:
                    41:33:20:ec:9a:37:2e:06:f6:8a:d0:61:5a:eb:a5:
                    1f:1b:0c:8e:aa:8d:45:62:84:00:0e:fa:2d:d5:4c:
                    64:6a:63:5b:b1:3a:20:f8:30:c0:b7:4e:bc:0c:68:
                    ee:6e:c9:a8:44:8f:58:aa:45:62:13:d3:59:a4:14:
                    1f:09:d6:bb:ae:5f:f9:6e:e9:3a:8d:c3:75:72:68:
                    74:13:10:c5:e3:bf:4d:f7:88:ac:18:96:1f:7c:9d:
                    16:c1:92:10:e4:58:ce:eb:f0:97:63:91:20:52:bf:
                    ee:27:76:76:86:75:8d:8e:aa:40:72:cf:1b:1b:81:
                    26:0d:72:99:2f:ab:8d:fc:d7:73:03:7c:47:d4:ed:
                    72:39:e9:f4:b6:27:ea:88:f4:fc:b7:f4:fa:3b:54:
                    e4:80:80:6d:dd:d5:46:71:6d:7d:26:0f:4a:ee:bc:
                    c6:3c:6e:59:00:a1:41:c4:94:9c:57:b7:88:e4:fc:
                    5e:29:99:f0:55:0d:b4:5e:ec:b1:8c:ce:cf:61:af:
                    d0:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:4A:9A:C7:2C:E8:B2:8A:B6:34:9D:AD:07:5F:4E:EC:3D:CB:84:7D
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/0bffbb-b21c-43d2-82a5-2b24b6723aff/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/0bffbb-b21c-43d2-82a5-2b24b6723aff/1/4Uqaxyzosoq2NJ2tB19O7D3LhH0.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.216.121.0/24

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  51067

    Signature Algorithm: sha256WithRSAEncryption
         0e:81:dd:6f:8a:f7:f6:1f:da:d7:a0:c9:b4:e2:c8:b4:d9:da:
         12:7b:91:98:3a:b8:97:f3:21:7f:cb:47:f4:8e:e2:6e:5b:d0:
         49:2c:e6:ab:f8:18:4f:2e:b6:1a:f5:74:8f:70:af:ca:60:a5:
         9a:26:9a:1e:9a:db:b5:00:83:8d:fd:5a:68:0f:a6:01:6f:38:
         46:37:91:7d:c3:f3:77:90:fb:a2:d6:f5:ce:ff:ec:3c:4b:74:
         58:6c:3f:be:80:c3:1b:4b:c6:3b:a9:72:76:f1:f7:2a:b2:36:
         2b:0b:4a:61:d3:be:45:05:98:86:04:35:dd:7b:1f:19:23:c3:
         24:47:73:28:48:37:18:8f:2d:17:60:1f:2e:87:bd:20:5c:96:
         5c:44:04:f6:ab:34:9e:39:4b:48:e5:3e:47:b0:88:84:f0:75:
         c8:a8:f9:91:36:af:0d:b1:20:91:81:b4:8e:4d:ed:c9:31:6b:
         84:06:d1:c3:db:8d:4d:28:0c:15:ad:7c:9e:35:bc:a3:bc:e3:
         5e:8a:3c:9f:13:03:3f:aa:88:2f:d0:c3:0f:f3:b5:75:e9:7b:
         32:90:c5:d9:11:28:1a:54:00:87:8d:57:cb:e9:9a:e3:9f:e3:
         03:24:1b:58:0c:04:26:e4:c4:2d:d2:84:63:21:40:90:0e:13:
         bc:04:3b:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----