Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8GYD8Cgu1ZATXzNkX1Xytiwpjjw.cer
File:                     8GYD8Cgu1ZATXzNkX1Xytiwpjjw.cer (raw, json)
Hash identifier:          g4xoLD2tuGXQQ5hUsmLDbqS2wXRqwhgV6CRYxG568Ew=
Subject key identifier:   F0:66:03:F0:28:2E:D5:90:13:5F:33:64:5F:55:F2:B6:2C:29:8E:3C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856BD0F26CE5BA5246B9CF07B6FFBC44B3
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/75/5ec1a9-44e2-436d-bacf-197abed4d16a/1/8GYD8Cgu1ZATXzNkX1Xytiwpjjw.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/75/5ec1a9-44e2-436d-bacf-197abed4d16a/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 05:32:13 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 94.154.126.0/24
                          IP: 2a11:49c0::/29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6b:d0:f2:6c:e5:ba:52:46:b9:cf:07:b6:ff:bc:44:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 05:32:13 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=f06603f0282ed590135f33645f55f2b62c298e3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:29:43:25:e2:12:fb:43:32:9f:b2:04:87:87:
                    9f:ff:0f:d4:bc:5f:9f:6b:d4:a5:05:c4:7b:07:9e:
                    4c:2c:d0:ae:d6:47:0f:dc:61:6d:02:1b:fa:90:c0:
                    91:08:42:e5:eb:48:83:13:79:d8:cc:d4:e6:2e:fd:
                    24:e1:b8:77:76:5c:b0:ac:4c:6f:33:01:e4:97:0b:
                    f6:b9:d4:26:a2:cf:a8:8a:98:d6:32:7f:f0:6a:31:
                    9b:57:b6:8a:44:ba:58:bb:af:63:70:19:ea:94:ce:
                    43:a1:27:4e:1d:0d:d7:0d:ef:79:6d:b4:04:84:97:
                    40:3b:5b:ec:d9:ec:a9:6a:5f:4f:df:6a:d6:f3:54:
                    4e:2d:59:e5:d3:d2:cf:c9:50:c7:9d:b5:06:2c:fb:
                    07:8a:98:1c:cc:53:95:50:da:be:99:52:8e:42:ab:
                    90:ad:20:f4:5e:96:77:fe:fb:d4:de:9a:f5:b5:9f:
                    37:bd:f2:63:92:41:89:d4:cb:2b:80:89:2a:4f:17:
                    43:ea:d9:fa:03:97:8b:7e:db:ca:82:b5:fb:57:db:
                    d7:25:06:5c:89:9d:c3:fd:b7:61:f4:2b:d7:fa:52:
                    ec:27:00:42:a8:12:7e:16:de:03:d7:16:ce:ae:77:
                    e3:77:e3:fc:b3:c7:73:ef:25:f6:3f:5d:6a:51:94:
                    d0:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:66:03:F0:28:2E:D5:90:13:5F:33:64:5F:55:F2:B6:2C:29:8E:3C
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/5ec1a9-44e2-436d-bacf-197abed4d16a/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/5ec1a9-44e2-436d-bacf-197abed4d16a/1/8GYD8Cgu1ZATXzNkX1Xytiwpjjw.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  94.154.126.0/24
                IPv6:
                  2a11:49c0::/29

    Signature Algorithm: sha256WithRSAEncryption
         91:8b:32:61:ea:9e:f9:b6:e1:9d:72:db:fe:c6:3d:1e:43:de:
         50:f9:d3:3b:ab:95:03:c7:2e:59:fa:6f:a9:1f:52:a2:0c:08:
         7e:06:a3:db:31:ec:56:14:cd:59:38:3c:4d:29:89:d4:3a:3a:
         67:f2:55:00:8a:19:7f:73:52:5e:3f:19:a8:c9:19:e7:58:73:
         86:34:1c:8b:75:4c:84:78:3a:37:96:cb:98:19:38:dc:e4:f3:
         68:a0:17:b5:2a:a7:48:4b:c0:28:84:d2:69:3c:6a:7a:d2:37:
         30:9f:42:5f:2d:d2:b2:22:8e:53:15:7e:95:1e:85:69:ba:9c:
         90:2a:9d:b5:fc:1f:4e:4b:96:96:a4:7e:78:9b:de:b6:89:59:
         b4:33:5b:e8:e6:97:f3:03:79:dd:1d:9c:f1:99:a7:7e:a0:07:
         d5:3a:66:19:2f:36:11:1d:28:b1:82:81:c0:6b:46:00:a8:f2:
         30:74:f5:6e:97:fc:26:c7:21:54:b6:f2:4e:40:8b:92:3e:26:
         13:da:8f:41:04:78:97:b1:88:7d:b2:7e:81:3e:db:f5:6c:30:
         cf:3c:7c:45:26:32:f6:23:12:21:f0:20:d1:ad:46:44:86:26:
         6e:f4:b1:7d:36:49:9f:f9:32:ee:82:c0:8e:64:6f:a8:c3:6f:
         9e:7e:79:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----