Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5-smKRuemrWvyI7XbTr4GpB-X58.cer
File:                     5-smKRuemrWvyI7XbTr4GpB-X58.cer (raw, json)
Hash identifier:          ei49QzyNms9HHtS6fMm6YXETFVwklXimuGPIok6tJU8=
Subject key identifier:   E7:EB:26:29:1B:9E:9A:B5:AF:C8:8E:D7:6D:3A:F8:1A:90:7E:5F:9F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018571D5E9A7F46AA51B146E2793F4CC1A5B
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/ad/b5ea59-b5a9-4c48-ae02-1df65a07630f/1/5-smKRuemrWvyI7XbTr4GpB-X58.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/ad/b5ea59-b5a9-4c48-ae02-1df65a07630f/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 02 Jan 2023 09:35:22 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    AS: 204701
                          IP: 62.233.34.0/24
                          IP: 2a11:9c40::/29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:71:d5:e9:a7:f4:6a:a5:1b:14:6e:27:93:f4:cc:1a:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 09:35:22 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=e7eb26291b9e9ab5afc88ed76d3af81a907e5f9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:94:67:f4:4f:8d:9a:a2:fc:6e:ad:bd:c7:64:
                    98:43:c3:74:7f:ca:19:66:a3:b2:1a:f9:10:a7:23:
                    c9:81:19:8c:31:16:86:56:7d:50:d6:e4:f8:2f:1a:
                    cc:08:28:7b:f4:a6:27:e5:82:0d:bb:82:0a:23:20:
                    a6:eb:2a:7b:68:78:1b:d7:cd:ed:5e:b5:44:4d:72:
                    1c:d2:99:f2:5c:ee:7a:59:56:e8:ba:19:ad:a6:cb:
                    c7:84:77:a6:07:37:81:e0:aa:c5:3e:75:0a:da:ee:
                    ab:d4:96:c7:91:00:7e:03:82:01:bd:fe:75:11:0f:
                    d9:7d:dc:0f:d8:4b:6b:c1:41:6b:4a:e7:d6:88:d6:
                    13:47:36:15:db:b7:fd:89:ba:16:65:fe:1f:88:79:
                    ae:7b:35:7d:49:20:65:3c:da:25:e6:60:f0:db:5d:
                    92:e9:ef:32:c0:8a:91:4b:de:37:18:17:3e:0d:b4:
                    1f:49:02:3e:88:a2:59:c3:3f:06:78:4c:dd:a2:a5:
                    0d:c6:3a:fb:ba:f2:1b:d2:c8:08:54:bd:4e:0d:9a:
                    f1:67:f9:f5:26:86:82:ea:26:c2:3e:db:71:9c:ea:
                    7c:e3:1b:1f:a3:a2:3b:88:76:ac:eb:34:17:ff:e8:
                    85:91:87:a7:c6:4c:d7:6c:eb:f5:ca:b6:91:78:8f:
                    b8:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:EB:26:29:1B:9E:9A:B5:AF:C8:8E:D7:6D:3A:F8:1A:90:7E:5F:9F
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/b5ea59-b5a9-4c48-ae02-1df65a07630f/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/b5ea59-b5a9-4c48-ae02-1df65a07630f/1/5-smKRuemrWvyI7XbTr4GpB-X58.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.233.34.0/24
                IPv6:
                  2a11:9c40::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  204701

    Signature Algorithm: sha256WithRSAEncryption
         1c:29:e0:60:50:90:6e:7e:8b:d6:c8:a3:73:e3:b6:59:1f:03:
         93:e0:5e:7b:b3:08:eb:69:94:7d:85:94:a3:da:0f:9b:9c:f8:
         e5:7f:57:0b:a0:56:be:93:05:d8:56:9e:03:23:6b:c5:a6:dd:
         b4:8f:35:2a:ab:7f:24:65:97:b6:b7:14:c0:0f:99:58:94:40:
         21:fd:89:0f:ee:6a:e7:4a:84:f4:12:67:75:1f:25:a4:61:6a:
         8c:1d:cc:7b:20:8e:4e:a0:6a:f0:e6:91:83:47:3f:bf:be:54:
         b8:a6:d7:39:d7:91:8a:5f:8d:4f:3e:e2:7a:63:01:80:08:2e:
         a0:da:fd:85:1e:d3:c6:ec:07:a3:bb:a3:bc:5a:9c:43:42:6c:
         cb:4b:8e:09:cf:96:a4:98:af:4d:36:8a:be:ff:c5:5f:ab:e9:
         1e:46:a7:26:95:1b:21:7a:a5:0d:ad:21:9d:21:bd:5c:b2:c8:
         85:eb:4b:b7:e5:21:47:16:33:63:38:65:44:30:91:6b:d7:c5:
         59:6a:26:c0:6e:eb:b6:75:7d:02:96:42:03:55:6d:da:2a:68:
         e4:05:40:c2:04:06:20:3a:9a:db:4d:24:ad:e4:fc:d9:c7:36:
         b1:bb:27:0a:69:e1:5f:9d:d9:3e:9c:83:4f:fe:a5:f2:db:f5:
         bb:62:71:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----