Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6Jp8qHBdhp38GDLeFoKC1Lcl1lE.cer
File:                     6Jp8qHBdhp38GDLeFoKC1Lcl1lE.cer (raw, json)
Hash identifier:          IR5WNL4hh25WzefHTJgAOjwn7U6Xrr3HFmrRb3nSWXY=
Subject key identifier:   E8:9A:7C:A8:70:5D:86:9D:FC:18:32:DE:16:82:82:D4:B7:25:D6:51
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856CAD5181D8CDE009F4F3BFEFE5565DE8
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/52/dde46d-d883-43f0-8796-236a30d527fb/1/6Jp8qHBdhp38GDLeFoKC1Lcl1lE.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/52/dde46d-d883-43f0-8796-236a30d527fb/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 09:32:56 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    AS: 48066
                          IP: 147.78.84.0/22
                          IP: 2a09:1ec0::/29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6c:ad:51:81:d8:cd:e0:09:f4:f3:bf:ef:e5:56:5d:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 09:32:56 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=e89a7ca8705d869dfc1832de168282d4b725d651
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:bf:2a:db:96:7d:ef:b1:42:20:0b:4c:11:c3:
                    17:46:45:68:24:77:17:0a:60:f8:b4:31:37:4e:19:
                    9b:c8:50:4a:db:d2:d9:ea:e6:69:bf:4e:db:4d:4b:
                    40:77:34:f1:7a:55:fa:ad:8e:19:cd:b0:76:8f:2c:
                    f6:e2:97:4b:ec:d9:9f:79:a5:21:2a:1e:e5:b8:d2:
                    17:7c:7b:22:7d:92:e7:e8:84:9b:9f:e1:61:ca:0b:
                    35:61:ed:64:80:ec:d8:8f:b1:07:6c:da:03:b2:9f:
                    66:a7:b4:58:27:a2:f2:69:01:87:39:d9:0c:4f:7e:
                    39:a9:3c:59:1f:e7:0d:c1:06:fb:98:56:19:29:a1:
                    ba:3a:e1:9c:d3:ab:37:6d:8f:c4:ed:1e:fa:7c:47:
                    a6:39:4c:91:31:7e:28:a6:18:c1:97:42:cf:90:03:
                    1a:35:82:f4:3a:81:56:4d:94:bb:ad:ca:9f:aa:8b:
                    1b:c4:7f:95:00:35:7e:2c:d7:28:2b:0b:09:4c:a3:
                    fe:3c:de:ec:ee:a6:3e:87:12:30:b3:56:82:90:ff:
                    38:31:72:18:65:2a:6d:06:9c:e1:e7:fb:df:83:c3:
                    c8:48:d2:69:6c:fb:8a:83:0c:f3:52:c4:8c:8f:e6:
                    82:ef:7b:47:f3:c2:89:9f:ba:1e:1a:19:99:73:2c:
                    bb:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:9A:7C:A8:70:5D:86:9D:FC:18:32:DE:16:82:82:D4:B7:25:D6:51
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/dde46d-d883-43f0-8796-236a30d527fb/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/dde46d-d883-43f0-8796-236a30d527fb/1/6Jp8qHBdhp38GDLeFoKC1Lcl1lE.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.78.84.0/22
                IPv6:
                  2a09:1ec0::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  48066

    Signature Algorithm: sha256WithRSAEncryption
         5d:99:19:b1:42:09:2d:26:5a:52:c5:26:10:bf:90:2c:f1:1e:
         87:96:fe:c4:59:a9:f6:0e:aa:f8:10:20:17:d0:99:ad:b1:62:
         cc:46:e9:09:e3:b0:c2:56:1b:87:97:4d:c0:d8:7e:95:e4:45:
         8e:e3:cf:ef:c9:34:86:1c:a2:49:b4:81:1c:9d:13:59:85:8c:
         cb:d7:a3:55:3e:3a:30:2f:41:ff:d8:0c:e7:43:53:94:99:83:
         23:67:85:94:25:ae:2b:c1:02:62:10:ae:d0:47:63:61:59:2f:
         39:8f:75:c7:9d:80:02:17:0d:01:54:93:77:17:54:ea:55:30:
         a8:e2:48:d3:15:ea:a8:a5:4f:1b:9e:6f:21:71:16:ee:f3:26:
         41:d9:e6:d4:ad:62:5f:27:cb:11:7c:3b:6a:b8:f0:c5:22:4b:
         ae:36:37:7f:39:dd:86:e2:c2:8b:45:48:9f:80:ec:3d:6c:c6:
         10:dd:67:c9:5e:f3:3b:a9:33:ef:a9:68:32:2d:66:c4:13:44:
         fc:14:79:06:e1:42:65:5d:2f:e4:03:19:7b:1d:e4:c0:6e:ac:
         3c:d5:35:2b:37:05:22:7d:18:ee:c9:7b:11:7c:bc:cc:0f:a5:
         4a:47:12:8b:ca:67:fa:34:55:50:21:32:cd:57:d8:82:0a:82:
         5d:ae:dd:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----