Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f0VWwjuGg3zykGFdeo6-QGoKFM.cer
File:                     6f0VWwjuGg3zykGFdeo6-QGoKFM.cer (raw, json)
Hash identifier:          rpLefb0zesedJEIcIdKSg7s9T13RSL3w//oY8/7INUI=
Subject key identifier:   E9:FD:15:5B:08:EE:1A:0D:F3:CA:41:85:75:EA:3A:F9:01:A8:28:53
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856DF7E84BAB4B0535488D89EA29F7E4C5
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/f1/ff4d36-6885-44ff-a052-2fb03f67bc44/1/6f0VWwjuGg3zykGFdeo6-QGoKFM.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/f1/ff4d36-6885-44ff-a052-2fb03f67bc44/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 15:34:01 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 195.191.144.0/23

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6d:f7:e8:4b:ab:4b:05:35:48:8d:89:ea:29:f7:e4:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 15:34:01 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=e9fd155b08ee1a0df3ca418575ea3af901a82853
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:6d:1d:93:e3:6f:08:a5:aa:36:09:cb:60:e0:
                    68:42:dc:d7:13:1f:ef:bc:0e:59:7c:2f:32:a8:42:
                    e4:66:66:f4:57:63:e5:9c:1f:7f:7a:3e:aa:96:ac:
                    36:60:e5:c3:9a:57:be:fd:72:b9:e6:f9:9a:56:bd:
                    07:ac:46:6b:5e:b0:36:ff:da:e5:52:85:75:43:9a:
                    54:9f:5d:ef:8c:6a:4e:8e:03:88:b0:4f:cf:cc:05:
                    1a:8e:0d:28:10:3a:49:bc:c0:f0:55:ab:d9:f8:16:
                    82:4c:64:15:5d:e4:b9:2b:1b:39:8c:8a:ad:2f:a9:
                    d6:da:d6:5c:bf:fd:0c:8a:3e:75:17:66:26:19:d4:
                    82:e6:70:4e:cd:fb:49:7c:2a:01:96:7e:1c:fc:b7:
                    8c:c0:69:5f:57:05:62:bd:55:ea:66:8b:88:2d:a0:
                    7e:c3:f6:67:30:d9:8c:40:92:9a:bb:67:bd:c1:87:
                    19:ef:9a:f6:d7:2a:a4:ba:ad:30:17:17:60:17:c3:
                    38:cc:8c:17:08:c6:c0:a3:04:0e:2d:94:0f:ef:8e:
                    a6:c4:02:ca:e1:09:97:12:76:91:5d:40:0e:3b:85:
                    3f:e4:62:2f:93:94:87:9a:d5:5b:d8:d7:68:13:29:
                    0b:d9:7b:0e:3d:d5:3d:da:6f:52:7d:76:f5:f0:6f:
                    a2:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:FD:15:5B:08:EE:1A:0D:F3:CA:41:85:75:EA:3A:F9:01:A8:28:53
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/ff4d36-6885-44ff-a052-2fb03f67bc44/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/ff4d36-6885-44ff-a052-2fb03f67bc44/1/6f0VWwjuGg3zykGFdeo6-QGoKFM.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.191.144.0/23

    Signature Algorithm: sha256WithRSAEncryption
         07:98:03:f5:44:c0:f5:48:eb:08:35:ca:60:e3:6a:4b:ad:9e:
         f4:7a:31:2e:46:63:b4:dd:bc:4e:da:db:d3:6c:73:53:34:6b:
         95:80:21:56:95:a8:f9:b0:9f:9e:3f:de:71:a5:fd:d3:b6:61:
         e4:3b:45:b3:2e:4e:8b:cb:f9:90:e4:6c:bf:2a:8c:7f:45:1e:
         6d:7a:86:e4:17:0d:e4:1c:60:53:ce:49:3d:f3:84:9e:17:d4:
         67:0d:46:af:85:b5:74:69:2d:90:ef:7e:e8:65:09:54:af:02:
         83:63:b5:65:7e:f8:7d:97:68:ef:1e:3e:8c:d8:ac:03:93:a5:
         a0:1e:70:45:68:4a:df:6a:55:e4:a3:c8:d4:7b:a9:75:43:5a:
         be:62:82:b6:ec:23:f4:d7:0a:7a:01:ee:af:6a:9e:82:44:c0:
         18:44:17:02:d2:61:54:3b:d1:f2:ed:7c:44:8e:bd:3d:81:3e:
         90:5f:13:06:c3:58:5f:28:27:b3:c7:13:1d:61:12:39:70:a0:
         ad:fb:b5:48:fa:5d:09:84:d2:35:69:bf:ac:ca:e8:3f:d3:3f:
         ff:14:b4:e0:73:96:c0:09:c7:57:5e:5f:09:68:11:e5:76:b1:
         07:78:b0:a4:b2:52:b0:78:b5:b5:11:56:08:97:e1:74:b4:1b:
         9e:09:ab:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----