Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7cocNiZSipm18MAG-_8zt85ssa4.cer
File:                     7cocNiZSipm18MAG-_8zt85ssa4.cer (raw, json)
Hash identifier:          A6Arhhm+anX2gguMkwZ6xjM/AmgEvXwO1mmpaFR17us=
Subject key identifier:   ED:CA:1C:36:26:52:8A:99:B5:F0:C0:06:FB:FF:33:B7:CE:6C:B1:AE
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018570FA9BDA2C2362A390E326FFD06CBB47
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/b4/50e597-496c-47df-ba46-5ca8d41fe388/1/7cocNiZSipm18MAG-_8zt85ssa4.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/b4/50e597-496c-47df-ba46-5ca8d41fe388/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 02 Jan 2023 05:35:50 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    AS: 44205
                          IP: 45.8.120.0/22
                          IP: 2a0e:8900::/29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:fa:9b:da:2c:23:62:a3:90:e3:26:ff:d0:6c:bb:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 05:35:50 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=edca1c3626528a99b5f0c006fbff33b7ce6cb1ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:c0:7a:d9:ca:ef:bf:cf:a7:4b:40:82:84:51:
                    01:e8:b9:af:86:3b:01:4e:e7:33:c5:1f:e4:73:b1:
                    b7:ff:b9:85:88:ec:23:6c:16:a7:a8:75:09:24:42:
                    95:e1:4e:b5:7b:2a:66:ef:3f:e4:15:c1:d3:79:70:
                    7f:ab:b8:52:b6:b5:59:ea:a4:c2:66:23:3d:51:7e:
                    72:0d:93:d0:af:48:c7:b9:6b:b8:b0:79:d9:84:1c:
                    20:9e:9a:8c:3f:39:0e:78:5c:36:a0:64:71:23:af:
                    38:2d:59:6d:c3:fa:e4:d6:de:1f:74:cf:ab:69:71:
                    df:2e:2b:73:06:61:4a:d4:34:aa:39:a7:33:ea:28:
                    9c:34:96:58:d8:b1:3f:ff:73:26:40:f1:0c:35:da:
                    c5:7d:2e:57:86:a2:f8:d1:21:0f:2f:1c:61:3f:e7:
                    37:80:38:38:1a:6f:f2:f2:c8:8f:dd:ec:4f:ab:9a:
                    a7:ca:8a:c6:73:c4:81:84:de:64:ff:2e:5d:de:b4:
                    27:38:a4:47:73:0c:99:27:21:49:3c:d5:46:8e:9f:
                    06:19:4d:43:20:32:29:01:31:f2:06:06:2d:25:02:
                    6a:ef:83:80:15:35:9d:74:b2:9a:d7:0b:5d:62:07:
                    34:ab:bd:5a:98:3e:6f:0b:70:1f:ec:d1:97:ff:bb:
                    71:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:CA:1C:36:26:52:8A:99:B5:F0:C0:06:FB:FF:33:B7:CE:6C:B1:AE
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/50e597-496c-47df-ba46-5ca8d41fe388/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/50e597-496c-47df-ba46-5ca8d41fe388/1/7cocNiZSipm18MAG-_8zt85ssa4.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.8.120.0/22
                IPv6:
                  2a0e:8900::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  44205

    Signature Algorithm: sha256WithRSAEncryption
         7e:37:d7:38:21:cd:ab:41:df:1b:07:5b:14:1e:66:93:7c:d7:
         d7:16:fc:47:ca:2f:71:7c:70:b0:e9:b7:fe:a5:2b:3a:d7:a7:
         4a:84:96:a7:d8:03:8a:a0:16:11:d6:5d:1b:ec:9c:86:e7:bc:
         b0:6e:06:ac:da:d1:3e:cd:2e:73:bf:7e:89:0e:d0:51:d9:92:
         d5:53:1e:3b:c4:80:0a:34:c0:be:23:14:c8:b5:b3:1d:68:bb:
         4f:a0:6d:09:73:44:39:2c:01:0a:49:25:c9:96:bf:db:b4:b4:
         d3:ef:fd:8a:cf:d6:81:d6:15:e9:75:f6:7a:23:8e:e2:f1:55:
         62:d7:9e:33:58:0d:d8:fd:ca:fa:33:52:74:d4:02:fd:b2:d9:
         c9:0f:d8:ac:d3:55:9c:37:18:57:64:ec:f5:2a:fd:6b:e3:ad:
         81:4d:66:56:e2:14:20:c9:90:f2:34:26:e4:fd:1d:ee:86:6a:
         14:ba:f4:20:b5:39:5d:88:cc:0b:c0:66:2e:5d:03:4b:bd:24:
         9f:68:41:93:77:e9:b1:e3:06:ba:7f:13:3c:3a:5b:d3:31:44:
         f8:5b:6c:8a:9a:5e:78:5b:b9:87:1d:a8:c1:fc:1c:8a:74:55:
         77:db:9e:34:bd:12:25:6d:ca:08:16:e6:86:ea:76:f8:94:ca:
         5b:f1:da:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----