Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6zi33lYZ1UIbFdLevVbUze2UJHw.cer
File:                     6zi33lYZ1UIbFdLevVbUze2UJHw.cer (raw, json)
Hash identifier:          j+A7MseurY/WqyZ6s43oFKVm3x7Vqiekm2B7zDAsl2c=
Subject key identifier:   EB:38:B7:DE:56:19:D5:42:1B:15:D2:DE:BD:56:D4:CD:ED:94:24:7C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018570FAC313732B81A6C18760A53DC5FDB4
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/34/379f49-e51c-47a3-87be-8778cebcae6e/1/6zi33lYZ1UIbFdLevVbUze2UJHw.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/34/379f49-e51c-47a3-87be-8778cebcae6e/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 02 Jan 2023 05:36:00 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 213.109.196.0/24
                          IP: 2a11:6f40::/29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:fa:c3:13:73:2b:81:a6:c1:87:60:a5:3d:c5:fd:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 05:36:00 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=eb38b7de5619d5421b15d2debd56d4cded94247c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:7a:17:38:63:69:bd:0c:87:65:09:00:73:8e:
                    0e:99:09:f8:00:b9:d6:59:8c:a6:17:ce:d1:69:7f:
                    07:8e:2b:7b:bd:f3:91:f2:36:22:26:4e:10:18:2e:
                    04:1d:2d:ae:7f:dd:d3:c7:d1:db:35:83:57:b9:ef:
                    97:7c:fe:28:0c:8b:7f:64:e4:2e:f5:ca:df:33:49:
                    f1:09:07:bb:6b:be:41:fd:f3:52:54:0b:55:ec:a1:
                    2a:a0:3b:93:36:e5:2d:19:2f:87:9c:cb:8c:78:d6:
                    a3:ee:16:82:de:60:83:51:43:bd:91:df:2c:e9:41:
                    09:9d:2f:a7:fc:7d:e7:05:a5:21:19:c0:91:b7:64:
                    ba:1c:06:bc:5d:58:39:80:61:f8:c7:10:05:81:34:
                    eb:78:d4:2a:5d:d9:87:e4:37:4c:9d:9d:69:97:7d:
                    52:f8:1d:05:ef:d5:66:52:b3:e0:f4:87:85:06:5e:
                    4a:90:d8:c0:b2:29:c8:7a:16:8a:f4:bf:82:27:d4:
                    d6:ba:99:7e:d2:80:4e:f2:23:9d:37:18:7b:20:1d:
                    69:d1:68:28:c2:7a:93:ef:1b:05:5b:31:55:ea:3c:
                    aa:16:88:55:ed:85:55:e3:c2:bc:4c:f1:ba:37:b7:
                    b2:ba:7f:12:b5:3e:a1:3e:a3:3b:4b:c0:93:d3:5f:
                    57:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:38:B7:DE:56:19:D5:42:1B:15:D2:DE:BD:56:D4:CD:ED:94:24:7C
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/379f49-e51c-47a3-87be-8778cebcae6e/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/379f49-e51c-47a3-87be-8778cebcae6e/1/6zi33lYZ1UIbFdLevVbUze2UJHw.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  213.109.196.0/24
                IPv6:
                  2a11:6f40::/29

    Signature Algorithm: sha256WithRSAEncryption
         1f:cd:21:a3:ff:d6:b9:b3:3c:e7:27:59:d6:fa:1f:fa:7a:e6:
         ba:78:e8:55:9b:8d:39:b7:5e:f3:23:4d:31:a8:e4:99:a3:16:
         b9:10:69:c4:b3:2d:8e:86:b6:c8:ec:c5:10:b7:6b:b9:d1:61:
         a7:87:e4:62:fb:fb:8b:ca:21:21:11:f6:6c:3b:2b:9c:be:df:
         b6:40:51:f9:b3:2d:9d:36:57:34:65:6d:9a:fe:d2:d6:4a:62:
         3a:30:45:ed:20:a5:5c:0f:50:4f:1d:2d:3f:ec:76:d6:7c:a2:
         2b:68:1e:5a:c2:60:91:dd:21:e2:e5:b4:fa:01:4f:98:6e:ab:
         41:69:28:6c:41:33:db:77:18:33:c7:4c:a6:b8:e4:e3:f7:89:
         2d:4f:97:42:46:93:95:64:af:a3:be:4a:cc:1f:c9:69:cb:43:
         8b:b0:64:7a:29:6d:d0:c2:a1:85:b9:da:04:8e:19:f9:00:c6:
         4d:c9:c1:4d:3c:4e:f2:39:8e:b1:fc:f9:e6:f9:ab:ce:2d:5c:
         61:fe:aa:5c:32:f5:48:03:46:6b:d9:7a:73:38:6c:79:41:91:
         55:c5:f1:6d:f3:0d:89:43:12:7f:dd:c6:04:b2:7c:fd:0e:6c:
         02:e7:c2:26:6c:b1:c6:2c:56:fe:e8:2e:37:00:c5:1c:1b:8d:
         bb:66:a2:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----