Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7cfLALPUFK-pfEguq1_cdqFjSz0.cer
File:                     7cfLALPUFK-pfEguq1_cdqFjSz0.cer (raw, json)
Hash identifier:          fMe+mU5N0fIyk5QZSvyNF1l/XzBYtKlxjYe8Jhq3J8o=
Subject key identifier:   ED:C7:CB:00:B3:D4:14:AF:A9:7C:48:2E:AB:5F:DC:76:A1:63:4B:3D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0187E567FD08546BCA5D5F98A7D83D7918FE
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/dc/4e20f1-5689-411c-9379-c159165de0c7/1/7cfLALPUFK-pfEguq1_cdqFjSz0.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/dc/4e20f1-5689-411c-9379-c159165de0c7/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 04 May 2023 06:16:50 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 212.23.206.0/24
                          IP: 2a0b:ad00::/29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:e5:67:fd:08:54:6b:ca:5d:5f:98:a7:d8:3d:79:18:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: May  4 06:16:50 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=edc7cb00b3d414afa97c482eab5fdc76a1634b3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:d3:65:69:e6:5a:0b:6a:df:e2:0a:c3:c6:97:
                    4a:4b:81:b8:c3:b5:bb:48:5f:21:b7:82:ea:fe:b5:
                    18:04:e5:6a:b5:30:72:23:a2:71:3c:d5:cb:1e:5e:
                    d4:e2:93:d6:7c:52:8e:75:13:4f:a1:50:15:5e:42:
                    1a:35:9a:d4:af:38:47:e7:54:14:7a:d2:f2:e2:c5:
                    42:1d:be:f0:84:bc:71:38:30:0c:02:ec:41:2f:2d:
                    dc:9d:77:55:92:1a:a2:d3:f5:ed:22:c2:22:15:46:
                    f5:53:76:11:df:cf:69:be:e6:63:d4:06:86:93:fd:
                    42:6a:9f:3a:97:44:c0:f5:de:25:8f:c4:3c:f6:89:
                    77:04:ee:12:06:09:40:5a:ec:a5:d0:ec:b0:ba:06:
                    88:96:d5:c7:dc:ab:f2:10:b0:d1:88:ab:d9:ac:bd:
                    5f:54:d8:2e:25:44:d2:92:72:cb:24:3c:5a:9e:1e:
                    e3:ae:ed:ac:78:38:56:3c:d0:76:52:c9:c4:dc:67:
                    19:23:cc:f9:d4:3a:15:a7:ff:27:79:6f:3f:e0:6d:
                    01:51:9e:2b:dc:a7:34:50:72:b7:54:93:4d:00:1e:
                    88:d3:b1:d9:16:51:2f:87:51:65:08:66:70:6a:c4:
                    00:bd:80:ae:fe:8b:a9:54:f4:55:a0:97:14:1f:a3:
                    e1:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:C7:CB:00:B3:D4:14:AF:A9:7C:48:2E:AB:5F:DC:76:A1:63:4B:3D
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/4e20f1-5689-411c-9379-c159165de0c7/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/4e20f1-5689-411c-9379-c159165de0c7/1/7cfLALPUFK-pfEguq1_cdqFjSz0.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.23.206.0/24
                IPv6:
                  2a0b:ad00::/29

    Signature Algorithm: sha256WithRSAEncryption
         a4:ff:9e:59:e0:a0:e7:4c:f2:35:62:1b:82:34:b6:6d:c7:db:
         1e:f3:8a:20:b6:74:89:c5:51:b0:6b:9a:9a:ae:21:07:7c:20:
         9a:49:a2:44:01:bb:65:74:51:76:70:2d:d0:27:37:04:ec:5b:
         ab:aa:92:bc:86:46:38:48:73:f7:47:c7:f5:e0:0a:a0:c0:c8:
         f5:b7:9a:c9:94:43:b2:bf:5f:51:a4:74:37:16:a5:4d:84:7d:
         87:38:93:4d:5a:4d:54:5d:77:2c:cd:7a:ef:d4:31:bf:ef:95:
         6f:63:c7:b6:a0:d1:1c:fb:da:08:f8:00:d8:6e:5c:8a:ac:28:
         a5:ab:6a:c4:b1:1a:af:2d:63:14:fa:a5:b0:66:07:79:85:fc:
         ba:0f:03:a1:ae:1e:c2:fa:5d:20:4b:7d:94:9c:3e:f2:09:18:
         6b:8d:2e:7a:57:76:9b:6d:ad:6c:db:de:87:c7:93:90:f4:9f:
         11:1f:52:b6:3e:8c:7e:a7:02:4f:d8:0e:6c:8e:67:c1:05:99:
         de:93:48:98:87:e4:b4:b7:4a:f9:72:d6:d8:8c:23:53:e6:4b:
         b4:e8:18:7c:b6:06:f6:2a:c5:8a:73:a7:f8:b5:8c:a1:a8:5a:
         ae:2f:48:a3:16:a1:5a:bf:8c:9b:4d:a9:96:59:20:22:ab:41:
         ee:8e:c8:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----