Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6E-R1jyfOcjz6kASqZR03iWUELE.cer
File:                     6E-R1jyfOcjz6kASqZR03iWUELE.cer (raw, json)
Hash identifier:          tZE6qA2WlvSxD9RPG6Ed4MQqMCf9mKLqieiAIMZ9ISE=
Subject key identifier:   E8:4F:91:D6:3C:9F:39:C8:F3:EA:40:12:A9:94:74:DE:25:94:10:B1
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856ED40B43719983CA007406EB7677CEDE
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/ae/6e57a0-4817-4c97-8150-490866876627/1/6E-R1jyfOcjz6kASqZR03iWUELE.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/ae/6e57a0-4817-4c97-8150-490866876627/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 19:34:28 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 37.77.150.0/24
                          IP: 2a11:6d00::/29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6e:d4:0b:43:71:99:83:ca:00:74:06:eb:76:77:ce:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 19:34:28 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=e84f91d63c9f39c8f3ea4012a99474de259410b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:89:41:7e:db:92:fd:6e:e8:46:5d:64:29:83:
                    1b:61:0b:ed:ac:a6:9c:81:00:13:ae:f6:5c:67:f6:
                    64:c5:1b:c0:d2:ff:42:bf:f1:b5:3e:33:7b:52:c1:
                    82:27:df:0b:a8:2a:03:4f:0b:d8:45:77:c6:b5:08:
                    d1:da:0e:63:f0:71:00:98:65:26:83:9e:82:4e:be:
                    80:1d:14:35:65:e9:8e:89:61:7e:0c:26:e8:40:57:
                    3d:9c:e3:86:9f:6e:71:7b:cf:9e:ef:3e:a1:ec:a4:
                    94:4e:8b:db:09:bb:4d:79:34:fc:c8:4f:03:7e:f7:
                    05:6d:19:1b:77:75:0f:28:98:ed:f1:39:a6:b6:db:
                    20:9a:b8:2e:bf:eb:91:3c:70:b2:b4:c0:d5:74:ee:
                    61:01:3e:6f:1d:8b:97:7e:a0:62:b8:48:db:7f:51:
                    02:71:8c:8a:a8:be:ff:6f:97:73:8f:96:86:40:46:
                    88:c4:80:cc:cf:a1:2a:71:ad:ea:51:cf:79:86:d0:
                    0f:68:32:d4:71:6c:65:b4:13:fb:49:db:72:6c:69:
                    be:c3:d2:b7:68:b8:70:a7:f2:68:9c:57:6f:3a:02:
                    b4:af:ad:cd:20:86:ee:fd:16:34:88:00:ee:74:ab:
                    5f:b4:3d:08:c6:10:43:3a:41:61:59:db:58:1d:5e:
                    d7:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:4F:91:D6:3C:9F:39:C8:F3:EA:40:12:A9:94:74:DE:25:94:10:B1
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/6e57a0-4817-4c97-8150-490866876627/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/6e57a0-4817-4c97-8150-490866876627/1/6E-R1jyfOcjz6kASqZR03iWUELE.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  37.77.150.0/24
                IPv6:
                  2a11:6d00::/29

    Signature Algorithm: sha256WithRSAEncryption
         a9:70:1a:37:b9:5f:e1:15:1c:a6:f7:cb:b6:45:2c:af:c4:db:
         65:c2:8f:d1:5e:b1:cf:7c:2e:26:5a:39:e1:7a:e0:7b:48:9f:
         8e:3a:35:86:23:53:84:94:32:3c:dd:7c:e4:b9:13:c3:54:05:
         9b:ba:b5:f7:35:93:aa:3a:5f:d7:7c:3b:ca:de:17:f2:73:75:
         a0:6c:96:10:8c:59:ad:86:38:d8:b2:fd:c7:26:17:fa:a9:16:
         a3:38:cc:eb:33:cf:ca:ba:74:c8:b1:bc:2e:bb:d3:a3:73:f1:
         dd:2d:e7:b3:fb:12:d3:b0:a6:3b:80:ed:9c:47:2a:73:d4:af:
         e7:f4:63:bb:ef:72:6c:f0:88:c0:7d:47:2b:2d:e8:4b:23:28:
         7f:c5:7b:e5:c3:f9:8e:9a:2c:7a:92:cc:6c:76:75:15:fa:74:
         ef:ac:87:37:4d:68:29:ee:cb:7f:2d:10:73:28:05:a4:e3:76:
         75:f7:8d:4d:f2:87:c0:25:89:16:b4:2f:72:f9:a6:06:4a:f9:
         0e:d9:b2:63:09:b2:ab:44:3f:d6:37:6c:58:82:b2:89:17:34:
         86:6d:d1:61:78:1e:9f:28:35:37:41:4e:68:75:d1:3b:4d:ac:
         8b:35:52:fb:46:74:4a:4d:90:d1:6e:af:9b:95:78:00:47:85:
         4a:a1:ac:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----