Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5E9i-DblapRzfH4DDv8247PgUro.cer
File:                     5E9i-DblapRzfH4DDv8247PgUro.cer (raw, json)
Hash identifier:          8fCVJXmXyW+ojOdvw9cz7/dJnXJh6c615Ef2zkHhaSg=
Subject key identifier:   E4:4F:62:F8:36:E5:6A:94:73:7C:7E:03:0E:FF:36:E3:B3:E0:52:BA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0185708BDD3D00775358DF534645F1F77C8D
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/9e/71eeb3-4482-43c2-a99d-09349383f222/1/5E9i-DblapRzfH4DDv8247PgUro.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/9e/71eeb3-4482-43c2-a99d-09349383f222/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 02 Jan 2023 03:34:52 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 185.226.240.0/22
                          IP: 2a0c:7680::/32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:8b:dd:3d:00:77:53:58:df:53:46:45:f1:f7:7c:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 03:34:52 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=e44f62f836e56a94737c7e030eff36e3b3e052ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:ac:29:a5:ea:2f:d9:6c:48:97:cd:4d:17:0c:
                    22:ec:c8:a3:8e:67:83:59:00:3d:ab:8e:76:3f:cc:
                    f1:b4:6f:12:f3:67:a2:d1:59:13:64:36:86:50:55:
                    ff:d0:2e:78:6f:1d:08:60:a6:8d:cf:46:34:a3:19:
                    51:76:3e:55:a6:a6:7f:e0:37:ff:0a:9e:c0:b3:7c:
                    dc:70:32:a2:1c:43:27:78:c9:0a:a2:5c:37:5f:2c:
                    d8:a7:f1:f4:a1:ef:9b:ab:45:e1:bb:69:f4:b9:c4:
                    e4:60:d5:b5:48:8f:83:f4:9d:c7:3c:c6:cc:50:b4:
                    8d:e0:0b:f4:bb:b9:55:30:fc:e1:09:3b:08:37:a1:
                    9e:ef:85:b5:73:97:20:54:5e:7f:87:84:cf:a6:49:
                    c0:5f:3f:39:6c:4d:d7:c8:49:91:4f:88:82:2b:84:
                    9b:44:45:54:85:20:8e:22:c3:89:de:78:47:bb:34:
                    5f:a6:cd:17:44:fc:56:0f:f6:fb:54:e6:43:02:77:
                    38:1d:67:2b:38:8f:27:9c:44:17:c5:83:d3:bc:75:
                    b8:5d:b3:22:d3:ea:06:49:75:33:4b:72:9a:bd:fd:
                    74:d9:ea:af:22:bb:29:71:80:b7:bf:31:0d:e0:bf:
                    b0:9b:55:70:94:e3:d9:25:3a:b9:fb:b4:49:7c:1c:
                    20:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:4F:62:F8:36:E5:6A:94:73:7C:7E:03:0E:FF:36:E3:B3:E0:52:BA
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/71eeb3-4482-43c2-a99d-09349383f222/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/71eeb3-4482-43c2-a99d-09349383f222/1/5E9i-DblapRzfH4DDv8247PgUro.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.226.240.0/22
                IPv6:
                  2a0c:7680::/32

    Signature Algorithm: sha256WithRSAEncryption
         28:f0:bc:e5:c4:c7:8e:bb:6f:dc:90:16:ce:85:7d:54:10:b6:
         01:08:51:b6:c4:d4:e9:2b:35:63:3c:ee:e0:f2:3b:dd:50:45:
         da:59:17:6d:4a:2b:ea:42:a5:97:50:b8:b2:1b:ad:e1:79:43:
         a3:10:d4:7c:c3:69:46:3c:e8:e6:3a:3b:46:dc:37:c6:a5:8a:
         f4:48:32:2c:47:78:32:56:55:25:dc:e6:9e:80:b0:45:e4:32:
         10:f4:67:63:66:8d:76:fc:44:6d:44:46:3c:5b:8d:c9:37:a6:
         55:39:36:a6:71:b0:56:57:07:11:f8:a3:36:56:61:75:e5:74:
         fc:fd:84:da:04:a7:fe:f4:ce:d4:04:e4:ce:4a:a7:8b:5c:84:
         a4:55:84:f9:a2:7c:b1:3f:ae:10:9b:c2:be:de:01:11:e1:34:
         1b:37:1d:5e:da:d6:43:6e:32:7a:1e:aa:e2:cc:89:09:0e:0b:
         5a:62:86:39:98:77:b5:f8:84:e2:36:af:bc:24:93:75:b0:f0:
         5d:e4:70:02:41:64:61:d4:e9:c6:6e:ab:fe:b7:28:b8:63:76:
         24:7c:5f:c1:b4:d9:72:cb:db:3c:f4:ce:84:8e:76:91:95:5f:
         92:3a:45:b6:79:55:df:f3:9b:3e:b6:a2:e3:d1:aa:fc:e8:91:
         33:81:5e:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----