Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6X8OdyObe_hpZQdVKbI9yX4zIGY.cer
File:                     6X8OdyObe_hpZQdVKbI9yX4zIGY.cer (raw, json)
Hash identifier:          a1eRY5gAn+oM0Ip6MhptKk2brGW+0PL6JiF7LndbycE=
Subject key identifier:   E9:7F:0E:77:23:9B:7B:F8:69:65:07:55:29:B2:3D:C9:7E:33:20:66
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0185701D90A51F6396EE54F251EDC9A610FE
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/59/88105c-b79f-47fa-9364-03d7494d3552/1/6X8OdyObe_hpZQdVKbI9yX4zIGY.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/59/88105c-b79f-47fa-9364-03d7494d3552/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 02 Jan 2023 01:34:23 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 176.56.37.0/24
                          IP: 2a11:c180::/29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:1d:90:a5:1f:63:96:ee:54:f2:51:ed:c9:a6:10:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 01:34:23 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=e97f0e77239b7bf86965075529b23dc97e332066
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:80:6c:52:27:2d:4b:b2:12:63:e2:55:7e:34:
                    17:46:69:50:6c:85:a6:52:b2:88:7d:22:06:d1:84:
                    0b:02:c1:e0:6f:41:ef:4c:86:a1:a6:d3:4c:42:7f:
                    df:85:7f:13:c2:d2:e0:f9:08:62:cb:89:09:39:0e:
                    64:b0:8d:e8:bc:3e:66:3f:78:66:d5:63:18:6e:f8:
                    5e:7d:d3:be:b1:0c:78:1e:f1:0f:92:13:d3:b5:9c:
                    1a:1c:4a:16:6d:d6:99:1b:2a:9c:42:cc:76:5b:9b:
                    2f:06:73:2e:6a:f4:05:aa:ae:53:cc:4b:54:a0:98:
                    38:31:44:64:7f:0a:7c:3f:2c:ac:f0:84:19:62:81:
                    bd:f9:f2:63:c3:2b:8e:7d:a7:06:56:90:5e:ef:99:
                    c3:d7:3f:66:ba:3c:1f:1b:77:23:35:5f:72:9a:f1:
                    66:70:55:08:1a:6f:94:79:2b:4e:92:6f:67:7a:4f:
                    5d:1d:77:67:97:fa:aa:92:4b:35:df:9d:15:2b:1e:
                    a5:dd:2d:52:bd:43:46:62:7c:d0:6b:2b:7f:55:8c:
                    28:59:bb:f6:47:b3:35:58:b0:f6:85:4d:ba:b2:14:
                    79:ee:7f:8b:03:3d:44:ac:7a:52:55:71:d0:2c:fb:
                    ca:05:bc:11:04:95:ab:81:94:26:ad:c3:12:46:9c:
                    bd:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:7F:0E:77:23:9B:7B:F8:69:65:07:55:29:B2:3D:C9:7E:33:20:66
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/88105c-b79f-47fa-9364-03d7494d3552/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/88105c-b79f-47fa-9364-03d7494d3552/1/6X8OdyObe_hpZQdVKbI9yX4zIGY.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  176.56.37.0/24
                IPv6:
                  2a11:c180::/29

    Signature Algorithm: sha256WithRSAEncryption
         57:74:47:f0:af:2b:31:e1:a1:d2:41:18:7c:3d:d7:82:0d:fa:
         67:6e:b2:74:51:35:58:fe:e4:44:73:dd:ba:55:cf:1b:76:26:
         a6:cd:da:c9:fa:50:56:bd:c7:6f:e4:9a:08:84:e5:25:65:e6:
         a9:62:95:ab:7c:d2:77:fe:f4:59:2b:02:ff:8b:fb:dd:a4:46:
         25:e4:49:4d:e9:1c:97:4c:d5:5e:7d:eb:fb:76:3d:ea:8e:3f:
         f7:c6:80:61:42:1d:f0:05:75:cd:e4:e8:a3:7a:39:b5:cc:39:
         42:52:4e:f2:7f:94:f2:18:0e:9c:a0:e6:38:cc:ea:c5:87:df:
         2f:da:32:78:36:8f:52:cc:65:32:0c:fc:a0:28:16:e6:85:75:
         3f:d0:4d:93:87:4d:06:6a:07:f8:68:f8:3b:5c:b8:b8:28:fb:
         d0:4c:94:5e:41:24:c7:1f:49:16:b0:8d:90:32:5a:52:9b:bb:
         95:91:27:58:a1:18:98:5c:11:a0:87:80:da:03:f3:6e:d4:c0:
         4e:32:28:db:6d:e3:17:88:72:9d:9d:2f:dc:6e:84:f4:32:1e:
         7e:28:d9:d2:d2:af:0f:4a:be:f0:7e:b9:a8:c9:95:80:18:09:
         74:9c:94:5e:58:37:58:30:2a:f5:51:e2:54:33:e6:0e:f6:1c:
         b2:63:5b:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----