Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81bLzWBKQLbE734tQHHsJYlofcA.cer
File:                     81bLzWBKQLbE734tQHHsJYlofcA.cer (raw, json)
Hash identifier:          z+bgkdywz1eFlYa6+tOeggxhWquSUTWivSxC73MbM9g=
Subject key identifier:   F3:56:CB:CD:60:4A:40:B6:C4:EF:7E:2D:40:71:EC:25:89:68:7D:C0
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856BD0FF7A5BFAFDE48B5D784B57CD322F
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/b3/59df14-9ad0-4e18-9744-7863bd5ee223/1/81bLzWBKQLbE734tQHHsJYlofcA.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/b3/59df14-9ad0-4e18-9744-7863bd5ee223/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 05:32:17 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    AS: 204269
                          IP: 185.116.112.0/22
                          IP: 2a05:7a80::/29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6b:d0:ff:7a:5b:fa:fd:e4:8b:5d:78:4b:57:cd:32:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 05:32:17 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=f356cbcd604a40b6c4ef7e2d4071ec2589687dc0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:58:be:1e:b0:e6:64:3c:6f:19:89:e4:6a:fc:
                    4b:e6:ef:8b:23:32:d3:7a:ef:c6:94:bd:1e:c3:95:
                    86:ac:82:39:18:47:b1:4e:35:0b:77:ab:9b:97:e9:
                    4c:d5:23:c1:1c:a8:a1:7d:21:eb:55:52:1a:68:93:
                    64:f9:b5:56:65:d7:76:0d:00:39:92:24:48:47:ec:
                    9b:b7:1d:21:03:5a:28:35:d3:40:70:86:1e:d4:d7:
                    ad:16:52:c8:ce:f0:65:80:e2:59:3e:f0:c5:d6:81:
                    1b:a2:d4:92:ed:03:42:23:ee:87:34:8a:35:2c:50:
                    76:1b:9a:e1:2b:6d:a5:f5:94:4b:b7:0e:51:84:31:
                    5a:49:46:0c:22:cd:73:6e:a2:e4:ca:5e:39:6c:ca:
                    f7:c7:b5:35:35:37:25:7d:8f:95:60:02:d0:e2:64:
                    83:c3:24:d4:33:2a:06:05:cd:2f:e1:97:bf:9b:41:
                    e6:8a:f0:20:4f:6e:18:02:ed:e5:ce:28:32:eb:d3:
                    86:3f:8c:12:c8:7c:df:fb:d1:af:07:0c:52:5d:74:
                    d3:90:7a:bc:82:17:08:23:b8:15:97:ae:a1:b4:11:
                    bd:1b:4b:6e:2b:62:37:d3:8f:ce:b5:50:0e:0d:56:
                    b0:83:19:5d:95:03:2d:c0:2e:0b:13:ca:79:84:99:
                    4c:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:56:CB:CD:60:4A:40:B6:C4:EF:7E:2D:40:71:EC:25:89:68:7D:C0
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/59df14-9ad0-4e18-9744-7863bd5ee223/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/59df14-9ad0-4e18-9744-7863bd5ee223/1/81bLzWBKQLbE734tQHHsJYlofcA.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.116.112.0/22
                IPv6:
                  2a05:7a80::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  204269

    Signature Algorithm: sha256WithRSAEncryption
         a8:47:f3:41:2a:28:b1:97:36:82:dd:d4:b0:38:e2:58:cf:ea:
         7e:29:ce:67:d2:1c:2d:cf:fc:06:b8:80:af:11:c0:f6:f3:56:
         35:2c:f9:a5:f8:36:9a:cc:6c:87:c2:57:ab:5f:dc:8b:19:cb:
         65:e6:1c:b3:8e:67:06:0e:2f:c8:51:e3:8c:58:ee:51:71:3d:
         b0:58:5c:94:fe:66:a4:5c:cc:11:20:4a:b8:c6:53:f5:fe:29:
         77:09:0e:aa:a9:75:4f:6e:c1:e7:4b:0c:4d:dd:8c:7d:06:64:
         ed:25:05:b6:8d:be:a1:ef:6e:4e:46:56:31:ff:bb:8f:0c:b0:
         04:d2:05:eb:52:fd:1f:97:c5:a9:5c:dd:c9:6b:6f:d0:51:37:
         ae:eb:77:74:e4:f1:9f:e2:0a:c3:7e:47:db:1b:fe:44:a5:96:
         fe:0f:1a:93:59:fe:fa:ee:15:15:39:d9:ac:8e:39:33:28:44:
         bb:6e:5e:d2:cf:82:0e:05:8c:ef:8f:8f:93:ea:05:8e:4c:45:
         73:78:ab:ec:3a:24:a3:2e:03:1c:04:76:81:d0:24:6e:7d:8a:
         32:c0:54:1e:e7:9c:25:83:66:6d:ca:1b:06:75:fe:e3:b3:a4:
         52:37:b3:0a:c4:6e:f8:b4:d1:67:2e:a6:fe:47:e3:ce:f0:ea:
         e9:ae:fd:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----