Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7iKh_TZFj-LEwK0h_EPwM201YjU.cer
File:                     7iKh_TZFj-LEwK0h_EPwM201YjU.cer (raw, json)
Hash identifier:          fwGWI2iw+RwPzubjYBckGBg2XNCrk9241g/VaRIu+ts=
Subject key identifier:   EE:22:A1:FD:36:45:8F:E2:C4:C0:AD:21:FC:43:F0:33:6D:35:62:35
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856DF780E9F770264EF172D91706FE59FB
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/75/528cca-e59c-49dd-b27d-6dcb6af4243b/1/7iKh_TZFj-LEwK0h_EPwM201YjU.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/75/528cca-e59c-49dd-b27d-6dcb6af4243b/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 15:33:35 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    AS: 207099
                          IP: 185.196.64.0/22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6d:f7:80:e9:f7:70:26:4e:f1:72:d9:17:06:fe:59:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 15:33:35 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=ee22a1fd36458fe2c4c0ad21fc43f0336d356235
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:a0:e3:e2:aa:5d:e1:2d:2c:ff:b3:c6:a8:14:
                    5d:00:c7:a2:77:d3:72:7b:a1:a4:4e:da:79:a8:81:
                    d7:ea:c7:d6:54:9c:c1:4d:db:c2:e2:e8:f3:0d:33:
                    b0:4c:d1:6d:ae:db:8e:03:09:19:57:4a:45:57:7f:
                    c5:3a:cd:ca:ef:75:87:4b:7b:87:4f:50:de:f5:9d:
                    5a:ad:9d:06:d9:04:20:d0:cd:99:ac:2c:62:05:10:
                    e4:e7:b6:95:0b:b0:96:94:54:96:89:45:d1:24:68:
                    7e:b9:74:76:68:2e:e5:17:9a:71:c1:fe:5a:14:fb:
                    cb:c7:e7:5f:2d:7b:11:f2:40:75:fe:81:4f:55:21:
                    07:99:86:fc:a3:26:ad:9e:9c:d0:a4:fb:3f:c6:8d:
                    d3:6e:2e:4f:0e:4f:11:bb:9b:54:83:2f:af:82:b8:
                    2e:09:2a:12:85:56:26:2f:a4:2b:8a:64:3e:d7:7a:
                    24:d6:24:a6:8c:aa:73:97:2b:f8:ad:c6:c8:84:22:
                    2a:65:12:c2:63:ec:a4:87:53:82:fe:b0:d2:9a:69:
                    e4:a9:67:c5:50:26:5c:22:c7:a2:e6:e5:5a:84:98:
                    8a:0d:cc:ed:63:49:b6:06:0e:ba:b0:47:4f:06:7e:
                    3c:fa:5d:12:56:39:d0:1d:34:22:57:e4:24:23:46:
                    c8:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:22:A1:FD:36:45:8F:E2:C4:C0:AD:21:FC:43:F0:33:6D:35:62:35
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/528cca-e59c-49dd-b27d-6dcb6af4243b/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/528cca-e59c-49dd-b27d-6dcb6af4243b/1/7iKh_TZFj-LEwK0h_EPwM201YjU.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.196.64.0/22

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  207099

    Signature Algorithm: sha256WithRSAEncryption
         7a:30:95:4b:0d:27:ed:e7:c1:ee:80:1f:5b:84:b7:d7:b4:eb:
         52:6a:d7:38:48:7d:e3:1a:2e:a3:4a:7f:4b:b3:aa:8d:f4:60:
         80:85:14:fe:62:0a:e1:9b:c7:1c:70:4f:7a:26:ae:f0:25:e1:
         31:f9:17:91:5d:77:e3:e9:18:1c:99:34:77:07:2f:93:b9:30:
         fe:89:d1:b2:32:b0:18:3d:1c:ec:68:0d:fc:a0:88:e9:18:7d:
         bf:c3:ea:a5:2a:53:c8:04:47:3a:60:8e:86:74:48:e9:2f:21:
         ae:c3:81:1e:be:4a:52:01:9d:e7:47:8e:ad:46:56:8f:2a:bb:
         66:cc:d7:65:2f:f6:28:9a:21:50:92:29:f4:3d:6b:eb:b9:5a:
         8f:31:56:c4:24:ab:c4:54:04:75:27:78:58:ef:e2:3a:a0:38:
         ba:58:e7:cf:d3:6b:3e:07:55:07:a0:36:d5:80:04:2f:c8:15:
         12:bd:b7:a3:98:41:51:32:47:51:05:be:0f:ea:31:29:8c:1f:
         5a:b9:51:2a:bf:7e:02:d2:86:95:7b:24:1f:fb:6e:79:9a:37:
         a6:ff:42:2b:82:f1:fd:17:88:11:68:88:92:4c:42:47:4d:22:
         92:d2:c4:b7:18:b5:71:6a:14:14:b7:dc:e5:86:4a:80:9a:8f:
         c1:2a:51:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----