Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5Kuk2hXx2a8YHopQRI_4vRYlySo.cer
File:                     5Kuk2hXx2a8YHopQRI_4vRYlySo.cer (raw, json)
Hash identifier:          TOz96TlddMnZRUzIGb5Loo3xxN739JbdR5zRrpFabgg=
Subject key identifier:   E4:AB:A4:DA:15:F1:D9:AF:18:1E:8A:50:44:8F:F8:BD:16:25:C9:2A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856D8987A3FA19A587E405414ADBE3D08E
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/cc/b4c096-73db-4b6a-ac7f-f1189d25e943/1/5Kuk2hXx2a8YHopQRI_4vRYlySo.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/cc/b4c096-73db-4b6a-ac7f-f1189d25e943/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 13:33:27 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 213.109.152.0/24
                          IP: 2a11:74c0::/29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6d:89:87:a3:fa:19:a5:87:e4:05:41:4a:db:e3:d0:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 13:33:27 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=e4aba4da15f1d9af181e8a50448ff8bd1625c92a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:5c:10:e4:4b:86:1f:e0:88:2f:c4:ac:a3:d1:
                    9e:04:3a:4b:67:1b:9e:d0:2c:8b:4d:9d:82:2c:c6:
                    00:51:09:b8:42:a0:65:52:7c:08:3c:ce:5c:9d:6f:
                    e5:71:cd:ce:54:43:39:73:e1:dd:a0:ef:3a:03:fc:
                    53:7e:e8:00:2a:56:1f:5a:d7:ae:be:af:9a:24:a8:
                    52:a3:a7:f8:3f:2d:cb:77:47:4b:1d:1e:1a:fb:c5:
                    28:2d:0f:d1:c6:2f:a5:88:ce:40:97:2a:22:78:b2:
                    08:01:f0:fb:14:f9:37:9d:b4:a9:bf:46:0f:30:a1:
                    30:00:90:9f:6e:74:46:36:5c:70:76:ec:c2:0e:a6:
                    62:3c:5a:6c:de:e6:d2:91:10:ef:f5:f2:79:69:1e:
                    a4:e3:1a:04:1a:fc:24:0c:82:a8:a4:ce:ee:eb:2c:
                    c6:b5:ed:e5:e5:89:2e:bf:a4:21:77:0f:f1:9e:f4:
                    6d:54:46:9c:92:56:c0:33:ff:03:bf:23:00:f2:5a:
                    f4:8d:08:fe:e0:31:67:ed:00:b7:69:6f:67:39:b1:
                    fd:c2:fc:b7:e1:02:73:58:94:a3:a0:59:de:ac:b1:
                    6f:39:59:b2:17:73:f0:e5:8b:0a:32:61:ba:4f:d7:
                    5d:45:24:eb:76:80:3f:c1:7a:37:61:25:8c:d0:9f:
                    3c:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:AB:A4:DA:15:F1:D9:AF:18:1E:8A:50:44:8F:F8:BD:16:25:C9:2A
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/b4c096-73db-4b6a-ac7f-f1189d25e943/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/b4c096-73db-4b6a-ac7f-f1189d25e943/1/5Kuk2hXx2a8YHopQRI_4vRYlySo.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  213.109.152.0/24
                IPv6:
                  2a11:74c0::/29

    Signature Algorithm: sha256WithRSAEncryption
         07:f7:3f:cc:1a:5e:f6:bc:ad:cb:4b:51:ab:38:08:ba:3d:c7:
         76:84:f2:a4:51:71:01:1e:f2:ce:3e:aa:28:5b:3c:58:ce:23:
         38:e4:4e:6a:e1:e2:4f:85:9b:18:1f:d5:a4:96:be:c1:55:70:
         2a:6e:63:cd:89:62:e6:93:14:22:55:9e:b8:92:8d:f4:46:b0:
         ba:a9:db:12:7e:c5:11:f9:f9:c2:30:92:ad:5f:27:b0:f3:27:
         c1:74:cc:c9:68:ca:2f:5f:ac:e2:fa:09:46:40:ed:5e:c6:e0:
         7d:c7:48:9e:a2:13:b2:74:5a:94:8d:93:4d:ef:20:2f:f9:0e:
         d5:91:9c:bd:3a:2e:a1:52:cb:a9:20:ff:06:79:80:88:15:c5:
         33:81:e1:2b:80:7c:9c:3d:79:3c:d9:e9:d2:c0:de:21:86:87:
         8e:8e:82:d1:ba:e6:24:8e:db:55:10:fd:35:39:24:6f:c9:b5:
         91:86:cb:c4:86:8d:cb:60:e1:25:43:b9:ef:60:89:52:32:00:
         45:a8:d3:7d:e2:21:e4:44:31:3e:ac:b8:20:02:29:70:96:31:
         7b:db:e9:c1:6e:55:d8:e6:45:0b:bd:4a:7e:b4:ac:cb:8d:4c:
         b4:0e:89:50:a9:aa:03:b4:ac:c6:d4:93:4e:15:51:02:0a:59:
         21:10:00:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----