Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6BfgUv6NoKgK_xCEteWXYG0U4iA.cer
File:                     6BfgUv6NoKgK_xCEteWXYG0U4iA.cer (raw, json)
Hash identifier:          Fk+tSyZjaRLHlUY6NynbjTfDv9/VrurDvlhiwvonjfg=
Subject key identifier:   E8:17:E0:52:FE:8D:A0:A8:0A:FF:10:84:B5:E5:97:60:6D:14:E2:20
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856C3F109BED67766BCC3EA3AD3317FB45
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/91/83e4d0-1071-4fd2-9d22-da6fa1106ffb/1/6BfgUv6NoKgK_xCEteWXYG0U4iA.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/91/83e4d0-1071-4fd2-9d22-da6fa1106ffb/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 07:32:30 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 213.232.206.0/24
                          IP: 2a11:1f00::/29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6c:3f:10:9b:ed:67:76:6b:cc:3e:a3:ad:33:17:fb:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 07:32:30 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=e817e052fe8da0a80aff1084b5e597606d14e220
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:36:8f:93:90:09:ee:05:98:b3:ac:7b:a9:2f:
                    9a:d6:af:54:1a:2c:6d:5f:c8:5b:90:9d:20:dc:d8:
                    73:e8:2c:6d:e1:e5:4a:a2:77:42:ed:92:c9:d5:85:
                    36:c3:57:b9:9d:7b:6c:2d:26:99:39:de:a1:cd:bf:
                    0b:f7:6c:b2:9d:4f:e1:18:9c:4e:ad:d2:ca:13:20:
                    f7:25:4d:cf:c6:22:76:d8:31:0b:8b:f9:f7:52:af:
                    8a:3c:63:42:9c:6a:26:35:26:38:b4:6f:fe:1b:38:
                    56:84:f1:af:0f:53:63:29:ca:02:97:9a:98:2a:b0:
                    46:35:67:35:82:9d:c8:6f:cf:bf:d2:86:2d:fc:c5:
                    29:a4:ad:d2:c5:83:f5:22:51:41:76:fc:64:77:30:
                    61:6b:52:09:29:ba:b2:5d:26:92:e2:cb:cf:05:96:
                    ce:a9:b2:7f:53:c9:2b:e4:70:ca:4d:93:4a:5a:94:
                    8c:8d:36:14:ed:39:d0:de:66:0c:f3:f6:cf:e3:a0:
                    bd:a2:0b:eb:7a:82:06:29:44:41:c5:c9:c4:0f:83:
                    ca:cc:b2:75:3b:84:4e:b6:1b:55:f8:17:a8:70:f4:
                    1a:6e:b7:92:5b:81:a9:3e:45:80:a7:25:dc:52:2d:
                    e6:9c:56:bd:9c:a0:04:19:89:ff:13:c6:03:6d:a2:
                    01:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:17:E0:52:FE:8D:A0:A8:0A:FF:10:84:B5:E5:97:60:6D:14:E2:20
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/83e4d0-1071-4fd2-9d22-da6fa1106ffb/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/83e4d0-1071-4fd2-9d22-da6fa1106ffb/1/6BfgUv6NoKgK_xCEteWXYG0U4iA.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  213.232.206.0/24
                IPv6:
                  2a11:1f00::/29

    Signature Algorithm: sha256WithRSAEncryption
         42:8f:85:b3:95:0a:46:36:5b:70:98:e3:84:33:a5:b3:1d:27:
         a2:5e:48:a8:fc:eb:1e:3d:a4:26:7a:94:8a:11:f1:33:ea:51:
         bc:0e:97:51:be:bd:80:4d:f5:6d:63:75:e2:59:c8:46:ff:cc:
         82:97:6c:af:43:60:8d:c7:46:2b:a3:81:ce:7b:f8:b7:86:fe:
         19:49:9f:8c:f1:92:aa:35:7e:37:ca:45:52:5e:9b:87:29:a3:
         a7:a6:99:85:d4:60:a6:6b:e7:e0:ef:22:96:f7:5d:35:da:db:
         89:94:3a:ec:1d:1e:9c:4f:d0:85:6f:c5:75:83:82:11:0b:ad:
         9b:45:1c:21:fe:d6:60:d8:c4:39:9e:f1:01:6a:eb:4a:80:34:
         7a:89:93:ec:e1:c2:86:b9:3c:cf:31:f8:8c:83:13:13:f5:dc:
         25:ce:a4:33:71:40:8e:7e:8f:ff:4c:e6:29:d7:f7:7a:f1:54:
         14:8d:4c:a8:3b:52:51:e3:e4:e4:f6:71:8a:ba:9c:f2:0e:0c:
         43:82:95:fe:1a:17:4d:fe:75:f1:d1:27:62:4e:73:39:39:de:
         2e:b9:79:aa:90:51:1d:7f:22:be:2b:87:a8:30:44:21:3e:73:
         61:87:87:57:28:23:f0:ab:ab:fa:09:fd:e2:88:58:bf:07:2a:
         2b:34:02:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----