Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87WhfhIFXVSiKlziWG797NDb6uc.cer
File:                     87WhfhIFXVSiKlziWG797NDb6uc.cer (raw, json)
Hash identifier:          hsEn//jdgHIfD/kOuwRT4tfj+wKG9wHD0E0H85NmMHo=
Subject key identifier:   F3:B5:A1:7E:12:05:5D:54:A2:2A:5C:E2:58:6E:FD:EC:D0:DB:EA:E7
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856EFB8046268BB99E653DD5B34C27CD92
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/79/b30554-0f4c-443d-8639-328eb5d59e45/1/87WhfhIFXVSiKlziWG797NDb6uc.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/79/b30554-0f4c-443d-8639-328eb5d59e45/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 20:17:34 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 146.19.122.0/24
                          IP: 2a12:db00::/29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6e:fb:80:46:26:8b:b9:9e:65:3d:d5:b3:4c:27:cd:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 20:17:34 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=f3b5a17e12055d54a22a5ce2586efdecd0dbeae7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:ac:3d:49:d5:95:d3:3f:62:97:72:23:a3:26:
                    7f:18:c2:b2:7c:4c:47:5a:1a:8b:4f:c8:28:16:ac:
                    43:3a:32:3b:d7:0b:6f:e1:b1:49:6f:9b:3c:14:db:
                    b4:c1:20:65:05:bd:bf:60:48:48:2e:74:9b:17:e3:
                    1e:06:f8:66:97:d2:07:5b:d4:e9:12:2b:ba:8d:55:
                    af:01:7c:59:34:31:71:ff:b7:89:49:0b:01:74:e2:
                    e0:ae:f7:69:99:54:96:a7:2e:26:65:e0:94:30:06:
                    10:68:93:37:6c:72:ab:02:78:22:1f:84:4d:55:e7:
                    15:e9:1d:ac:5b:d4:04:ac:6f:5c:f2:75:11:4d:16:
                    85:e7:7b:11:91:56:21:0c:96:34:ba:f5:07:44:87:
                    4a:00:40:e2:4e:24:a3:e8:fe:81:9c:ae:15:35:d6:
                    c4:18:60:2e:5b:7c:2e:53:02:06:8f:d8:35:6c:e0:
                    d5:97:dd:e0:a2:2a:41:74:87:c5:1d:5a:d8:ac:34:
                    f6:44:0e:4d:1e:70:f9:00:21:3d:1d:c3:01:a1:2b:
                    63:4d:86:62:e0:92:1e:a9:50:9f:e6:d2:8b:9c:5f:
                    74:a6:a6:51:7b:c5:6a:5b:4b:33:29:87:1c:32:5c:
                    74:a0:01:88:bb:66:bf:9c:4a:f4:34:2e:ba:9a:4f:
                    31:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:B5:A1:7E:12:05:5D:54:A2:2A:5C:E2:58:6E:FD:EC:D0:DB:EA:E7
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/b30554-0f4c-443d-8639-328eb5d59e45/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/b30554-0f4c-443d-8639-328eb5d59e45/1/87WhfhIFXVSiKlziWG797NDb6uc.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.19.122.0/24
                IPv6:
                  2a12:db00::/29

    Signature Algorithm: sha256WithRSAEncryption
         71:e6:2d:25:e7:ff:64:20:df:3c:68:a9:d4:00:f4:4c:25:88:
         f9:56:69:66:dd:78:79:f2:27:36:42:f9:c0:72:21:52:ba:88:
         2f:73:dc:98:a8:2a:1d:fc:31:d4:17:53:9e:36:29:2f:0a:9f:
         d2:5d:f6:2f:01:2d:f2:bd:1d:22:24:bb:2b:54:53:43:92:3e:
         23:74:27:19:9d:42:be:b1:f2:cf:9b:5f:f0:f2:a1:60:6f:7b:
         b4:34:f1:50:c6:10:33:f2:8d:71:9a:0a:30:e5:2a:32:8d:c4:
         f9:86:27:c3:57:7a:d9:cf:2f:9b:5d:ce:8c:d4:0d:04:fd:57:
         82:ed:86:ea:98:93:03:6c:b4:f7:92:43:e1:4c:93:36:54:00:
         d3:8e:c9:28:3a:fe:d0:6b:d2:09:d3:ac:31:82:8b:4f:cb:6c:
         25:80:18:b1:c6:69:35:42:ad:9e:dd:79:3e:4f:9b:33:b1:f7:
         b8:b2:27:ea:2f:21:f3:87:a7:4e:e5:63:ba:db:9d:4a:e0:c3:
         1e:07:bd:1a:1d:0e:f3:ec:de:7a:bf:37:1d:32:dc:14:7a:f7:
         29:a1:1b:f4:7c:ac:8a:16:2a:7c:aa:e4:1b:44:af:4d:c6:68:
         4f:12:7a:c0:32:42:28:be:d7:69:98:34:ce:58:95:6f:12:7b:
         22:e4:bf:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----