Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7OAnxNgSuisOFf9t-Ai7o-yXKtE.cer
File:                     7OAnxNgSuisOFf9t-Ai7o-yXKtE.cer (raw, json)
Hash identifier:          ipG6mXmxYnlN5xOcfq1sP+AVK4SwJS+1j57fXM3Mkqg=
Subject key identifier:   EC:E0:27:C4:D8:12:BA:2B:0E:15:FF:6D:F8:08:BB:A3:EC:97:2A:D1
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01887DF777EC2BFEE6207DAD1C435CBD7DB1
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rsync.paas.rpki.ripe.net/repository/571287f5-6189-496c-8668-2cd287462e36/0/ECE027C4D812BA2B0E15FF6DF808BBA3EC972AD1.mft
caRepository:             rsync://rsync.paas.rpki.ripe.net/repository/571287f5-6189-496c-8668-2cd287462e36/0/
Notify URL:               https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before:   Fri 02 Jun 2023 21:15:50 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 212.24.127.0/24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:7d:f7:77:ec:2b:fe:e6:20:7d:ad:1c:43:5c:bd:7d:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jun  2 21:15:50 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=ece027c4d812ba2b0e15ff6df808bba3ec972ad1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:67:7b:a5:ba:e8:eb:52:f1:10:75:5d:af:5d:
                    9b:a7:0d:85:22:16:2b:23:6c:9f:57:9d:36:f4:dc:
                    54:f2:a4:c7:cc:64:b0:c5:79:bb:ae:28:cb:52:f9:
                    63:2f:f4:1d:3e:85:c0:a1:18:0a:9e:14:40:85:8d:
                    c8:93:f6:45:e5:b5:71:43:14:b1:9b:91:c6:fd:db:
                    c5:3f:02:c3:fd:41:1e:84:99:c2:a8:ad:c7:9e:39:
                    46:78:17:6f:f2:a7:e0:5b:b2:50:7a:57:7f:ae:5a:
                    99:1d:fb:99:a9:11:fa:c1:13:6b:96:94:12:23:43:
                    87:44:f6:e9:98:34:0d:3a:25:28:2b:b3:02:e3:be:
                    96:aa:90:b6:f4:38:51:8b:4d:1d:02:43:bb:22:72:
                    fe:64:21:6d:c0:d6:5c:14:0d:b6:5d:b1:f8:1c:10:
                    af:24:98:1c:3b:fa:42:ec:36:cf:b6:d2:95:d0:bf:
                    5e:fe:5f:46:6d:ce:34:b7:54:36:09:33:ec:14:ed:
                    d5:a3:89:c8:ff:a5:08:ea:c8:85:63:1b:62:8c:18:
                    e3:6e:cf:f2:d7:d3:32:98:8f:a7:f9:ab:4b:9a:cc:
                    f8:56:d0:a9:f6:14:a2:a4:3c:ac:88:3d:05:68:86:
                    c0:5b:7f:9f:d0:c0:f1:22:0c:dc:47:f4:25:a8:c5:
                    de:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:E0:27:C4:D8:12:BA:2B:0E:15:FF:6D:F8:08:BB:A3:EC:97:2A:D1
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/571287f5-6189-496c-8668-2cd287462e36/0/
                RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/571287f5-6189-496c-8668-2cd287462e36/0/ECE027C4D812BA2B0E15FF6DF808BBA3EC972AD1.mft
                RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.24.127.0/24

    Signature Algorithm: sha256WithRSAEncryption
         37:06:47:78:59:2f:10:5a:94:6d:a8:2b:b8:9c:04:91:05:5d:
         9e:d7:b3:bd:cb:b7:66:58:b1:7a:d3:15:03:da:de:f2:52:ee:
         47:4e:a4:22:e2:94:b4:9c:26:5a:da:b6:7b:8d:b6:9d:14:77:
         24:69:cd:75:a7:3c:39:f3:85:33:e4:3c:d0:85:30:07:46:3f:
         3a:dc:cc:ad:8a:52:1a:6c:a6:0b:5b:69:b3:d6:fd:56:a7:79:
         6c:32:91:a8:f8:df:0c:68:00:fd:66:d1:82:d7:57:43:0e:c5:
         46:64:2b:64:ec:f7:6b:00:b3:57:64:13:c3:05:70:ff:19:b7:
         cc:ec:22:f6:e1:96:2e:fc:02:ff:70:f1:86:f6:e1:1e:f2:ea:
         2e:0b:26:23:d1:68:4e:c3:b5:f1:e6:18:80:4d:24:01:de:d8:
         58:02:f5:5d:9e:c6:0e:fe:b0:59:ab:02:b1:63:47:8d:c4:96:
         db:9a:eb:a5:8d:65:07:87:fe:1a:63:b2:9e:ec:b1:a4:73:a5:
         cc:b4:6d:4b:f9:05:aa:9d:67:b1:8d:7c:bf:e3:80:72:95:26:
         93:92:ae:f0:fe:fc:d5:a1:91:a0:d0:93:90:fc:8f:3c:28:47:
         df:c2:bb:02:d5:23:ef:69:5b:72:64:97:d3:34:6b:59:73:cb:
         0b:76:8f:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----