Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7m4K75qFToiA4fDkbQe5S-X2ueo.cer
File:                     7m4K75qFToiA4fDkbQe5S-X2ueo.cer (raw, json)
Hash identifier:          bvm92dUo2EN/+XVydOQ6sMclyyltQJohjE8LQsDVneA=
Subject key identifier:   EE:6E:0A:EF:9A:85:4E:88:80:E1:F0:E4:6D:07:B9:4B:E5:F6:B9:EA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856AF533ADEF753BDA2B8170A6314EFE72
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/f9/7d1e01-a24b-4e1e-a981-c6d81cf4e000/1/7m4K75qFToiA4fDkbQe5S-X2ueo.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/f9/7d1e01-a24b-4e1e-a981-c6d81cf4e000/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 01:32:12 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 185.236.52.0/24
                          IP: 2a10:8f40::/29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6a:f5:33:ad:ef:75:3b:da:2b:81:70:a6:31:4e:fe:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 01:32:12 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=ee6e0aef9a854e8880e1f0e46d07b94be5f6b9ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:43:6d:19:31:d6:4f:98:62:22:6e:03:f9:77:
                    d8:20:71:91:d9:d2:8d:e8:b7:94:df:f1:9e:6e:80:
                    d6:8c:1b:47:a1:be:5f:e3:66:b6:e8:7f:01:bf:39:
                    3c:df:45:b1:55:c2:dd:3d:0b:f8:1a:bd:3e:a6:e8:
                    a0:9b:4d:09:be:3d:ee:f0:5f:71:58:c0:56:35:7d:
                    2b:c5:21:55:66:47:33:7b:6a:51:b3:77:8f:a4:19:
                    16:80:25:8d:29:d9:9b:75:e0:b0:67:cf:e4:19:51:
                    d8:48:9a:4e:e2:13:d5:ed:71:5a:68:89:c1:3e:14:
                    b3:72:b3:34:b3:c2:37:1a:86:b0:ef:0f:ba:7b:55:
                    a6:b2:67:27:60:7e:d0:55:5e:6d:ab:8e:fe:aa:60:
                    8d:d4:62:10:28:a0:27:c4:12:4f:f3:58:d0:ce:aa:
                    06:1b:b4:f8:23:c9:5e:55:fd:f3:ac:9f:86:e0:fc:
                    44:d3:18:98:46:23:6f:28:5d:7e:35:61:70:2d:78:
                    3a:30:87:01:42:e1:b4:46:8b:df:50:c3:94:45:ac:
                    0a:62:e7:69:53:c5:33:d9:ee:3e:bc:14:2b:88:d1:
                    36:12:91:70:52:54:6d:9d:3f:a3:14:1f:95:5d:d5:
                    e8:18:1c:db:4e:6f:fa:6a:eb:95:4e:f7:c0:a9:11:
                    87:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:6E:0A:EF:9A:85:4E:88:80:E1:F0:E4:6D:07:B9:4B:E5:F6:B9:EA
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/7d1e01-a24b-4e1e-a981-c6d81cf4e000/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/7d1e01-a24b-4e1e-a981-c6d81cf4e000/1/7m4K75qFToiA4fDkbQe5S-X2ueo.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.236.52.0/24
                IPv6:
                  2a10:8f40::/29

    Signature Algorithm: sha256WithRSAEncryption
         27:4d:56:c1:b6:50:8a:07:d3:b7:67:fd:52:2e:e9:3a:0c:6e:
         08:2a:e5:b4:ff:5d:07:08:91:df:38:d1:f9:16:cb:a2:44:96:
         08:df:0e:0b:ed:4f:df:71:c6:a3:7b:f4:0b:1b:42:f5:89:1a:
         45:14:5f:89:fa:1d:53:70:72:01:1d:3d:20:74:be:7f:b7:fc:
         5a:54:ae:e2:0e:e3:f0:20:7a:19:86:b3:c7:c4:11:03:a9:79:
         fb:01:a8:3c:39:2d:15:85:b3:3f:ac:a9:c2:b4:c9:17:c3:2c:
         a9:c4:9c:d5:d8:7d:51:b9:2a:56:b8:8d:9a:78:f9:46:c6:2f:
         d4:bc:85:aa:2e:ee:e0:96:c5:a2:61:f0:33:43:1b:47:01:b8:
         7e:3b:0b:08:d4:7d:f3:ae:41:5f:d3:bf:dc:7f:97:9e:6a:85:
         ba:ff:a3:36:be:99:95:b5:9f:c3:d3:77:90:64:4a:de:3e:c4:
         af:80:5b:b9:6a:9c:0a:42:39:69:1c:2e:28:8c:d4:c4:6c:17:
         a9:7c:ef:d0:97:1b:52:27:5e:80:ab:ce:51:4e:3f:cf:9f:ea:
         18:04:db:fb:ce:02:fb:13:7a:17:be:bf:2e:f9:d0:f6:10:9d:
         c9:db:c7:e6:e7:28:e0:15:f1:5b:30:48:22:9a:00:65:6d:42:
         53:88:c6:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----