Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7VNWwcgYd6AfVxI7P1jzq2hhR6k.cer
File:                     7VNWwcgYd6AfVxI7P1jzq2hhR6k.cer (raw, json)
Hash identifier:          zyqsSdIgMvMDoUDpSxRFkVTdn++XRhyA4GXrRWhPs1w=
Subject key identifier:   ED:53:56:C1:C8:18:77:A0:1F:57:12:3B:3F:58:F3:AB:68:61:47:A9
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856ED414AAF9DC188153E890A2CB9E8AA5
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/f4/10f316-0b65-4323-ad93-e51800f909e6/1/7VNWwcgYd6AfVxI7P1jzq2hhR6k.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/f4/10f316-0b65-4323-ad93-e51800f909e6/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 19:34:30 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 193.3.170.0/24
                          IP: 2a11:f4c0::/29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6e:d4:14:aa:f9:dc:18:81:53:e8:90:a2:cb:9e:8a:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 19:34:30 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=ed5356c1c81877a01f57123b3f58f3ab686147a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:81:44:33:44:4c:c3:96:0e:d4:e4:5c:fe:6c:
                    7c:68:97:11:20:32:e2:4a:e7:57:2e:81:37:18:a5:
                    85:7f:e4:e1:82:b6:a2:09:f8:8d:50:62:8e:c5:07:
                    a1:4e:e7:d3:cb:16:01:f4:e2:04:3f:40:de:f3:2e:
                    f9:17:24:8d:fc:f4:c3:33:a9:18:b9:d5:c8:f9:c0:
                    f0:12:7d:9e:34:9d:bc:c5:2f:c7:ce:5f:70:42:be:
                    57:a8:69:a8:da:ba:0c:80:25:b3:8e:4a:55:96:92:
                    8e:0b:03:85:65:75:68:32:2f:f2:d6:52:5e:de:ab:
                    f5:03:b5:4d:41:03:bd:83:20:fe:c0:3a:e6:62:2d:
                    30:07:d4:46:51:dd:39:2a:85:20:f5:de:e5:73:a2:
                    8c:5d:b6:b7:58:f5:04:33:0b:bc:3b:88:af:3b:1f:
                    ef:a7:f7:5f:da:e6:b4:12:27:7a:20:c1:70:27:76:
                    c5:2c:98:90:6c:a4:fe:6f:e9:01:d5:22:3a:61:e2:
                    99:4a:f0:6b:eb:35:75:6a:73:0c:d5:ae:9a:ce:3a:
                    3f:f0:a3:01:7e:6e:fa:ce:79:59:1b:5b:ee:13:6f:
                    ec:6b:7b:cf:17:34:d4:e6:35:3d:a1:42:2b:f9:2a:
                    1e:21:31:3f:a4:f1:38:9a:b7:2c:82:bd:93:b3:5f:
                    93:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:53:56:C1:C8:18:77:A0:1F:57:12:3B:3F:58:F3:AB:68:61:47:A9
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/10f316-0b65-4323-ad93-e51800f909e6/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/10f316-0b65-4323-ad93-e51800f909e6/1/7VNWwcgYd6AfVxI7P1jzq2hhR6k.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.3.170.0/24
                IPv6:
                  2a11:f4c0::/29

    Signature Algorithm: sha256WithRSAEncryption
         7b:08:5a:e5:df:3f:b8:a0:ab:0a:50:d4:44:62:0d:af:a7:f8:
         25:a1:59:88:41:22:e1:85:da:b5:86:7a:b0:26:74:39:79:6f:
         f7:c1:3c:60:7c:a8:64:75:24:b1:62:89:df:ab:63:be:63:e0:
         c2:40:60:47:82:ea:05:cf:ee:46:9d:89:fb:be:30:e5:c6:85:
         a6:86:fa:77:9b:6a:a4:42:dd:94:df:7b:3a:2f:97:f4:f3:0f:
         dc:dd:db:42:34:37:1c:f4:0f:e3:7f:f1:a2:aa:4e:92:4c:0d:
         78:5f:72:a6:2b:78:5d:30:58:e7:9b:be:77:58:56:f8:59:64:
         e5:9e:00:d0:12:5b:80:c2:cf:95:57:3a:c5:18:56:88:29:3e:
         dd:1c:20:7d:41:d8:01:c4:53:b2:44:50:0a:b8:8e:ee:5a:4b:
         d3:b0:ed:87:17:89:f9:fa:ee:eb:05:cc:f4:c8:48:2d:e3:39:
         34:b5:84:79:57:3f:39:09:71:b6:d6:a5:8b:67:2b:eb:ca:da:
         72:54:5b:0d:eb:08:af:ec:f3:cf:1d:7a:53:ea:8a:6f:c0:9a:
         59:d6:f1:58:d2:1c:6a:1c:f0:46:39:a5:ac:6a:db:ae:5c:1d:
         d5:24:4c:6f:23:08:83:cd:6a:ec:30:ee:0a:6b:3e:0b:38:54:
         92:79:e9:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----