Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8XQPwwzWxspfgKKaG-fRg0Yjzo8.cer
File:                     8XQPwwzWxspfgKKaG-fRg0Yjzo8.cer (raw, json)
Hash identifier:          8PaWok7tmQ4+sfaXOrhQnynl/tBb+rKgTNKO+EQCQ0g=
Subject key identifier:   F1:74:0F:C3:0C:D6:C6:CA:5F:80:A2:9A:1B:E7:D1:83:46:23:CE:8F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856AF51C18A7694F30D84B564E7DD93515
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/f6/750246-1e76-4358-8ac9-38510277816d/1/8XQPwwzWxspfgKKaG-fRg0Yjzo8.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/f6/750246-1e76-4358-8ac9-38510277816d/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 01:32:06 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 195.225.83.0/24
                          IP: 2a11:ee00::/29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6a:f5:1c:18:a7:69:4f:30:d8:4b:56:4e:7d:d9:35:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 01:32:06 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=f1740fc30cd6c6ca5f80a29a1be7d1834623ce8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:4d:d2:c4:9f:4a:a5:53:aa:d6:8a:1a:e3:8d:
                    be:c3:b9:2d:c5:67:fd:84:89:4e:19:b3:70:7f:8d:
                    a1:f0:1f:1e:bc:05:42:1f:4c:23:36:b2:a9:a1:7a:
                    5c:fb:dd:a8:f4:80:e0:16:24:6c:43:84:89:fd:0f:
                    42:38:0f:b2:d6:cc:97:e8:70:de:be:25:db:7a:05:
                    a6:92:91:23:af:2e:33:7c:d3:f7:13:93:5e:56:08:
                    6e:7f:26:e2:f5:87:cd:a6:a8:20:95:24:cb:53:ea:
                    cf:5d:9e:61:a3:e2:be:b5:83:bc:ee:a1:63:a1:be:
                    82:3d:01:3e:b2:94:c6:18:fa:da:ea:74:f4:9b:9e:
                    e4:4a:9d:6a:c6:ee:56:4f:14:6a:c1:a9:26:d7:81:
                    6c:34:9d:3c:07:78:0c:8c:73:e4:42:37:69:30:28:
                    a9:cd:91:23:df:23:28:b0:93:62:4c:3a:f6:8b:71:
                    6d:db:d6:99:2f:9b:69:5f:72:ad:0d:6c:c9:8a:c5:
                    99:25:de:91:e4:d6:2a:e9:5a:52:b5:ab:fa:e1:19:
                    f9:15:9e:94:21:2d:35:b8:23:51:df:bf:15:17:14:
                    c9:e6:d0:c6:da:f2:f8:f3:44:e4:4f:da:16:29:fb:
                    fd:36:a4:e9:06:4c:b0:09:02:f8:4a:c9:0d:95:a3:
                    6a:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:74:0F:C3:0C:D6:C6:CA:5F:80:A2:9A:1B:E7:D1:83:46:23:CE:8F
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/750246-1e76-4358-8ac9-38510277816d/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/750246-1e76-4358-8ac9-38510277816d/1/8XQPwwzWxspfgKKaG-fRg0Yjzo8.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.225.83.0/24
                IPv6:
                  2a11:ee00::/29

    Signature Algorithm: sha256WithRSAEncryption
         12:45:40:25:01:1e:c8:ef:c5:58:0a:a3:26:57:1f:d6:ac:bf:
         ab:72:02:67:2e:18:fa:64:a4:c1:cc:28:4a:cf:a4:4f:e2:7f:
         5b:32:60:56:4b:ab:35:bf:56:ec:9f:8a:01:9f:74:6a:ba:e5:
         a6:53:9c:92:c5:e6:0b:94:8b:7f:82:4e:a4:01:7f:5c:ae:4b:
         59:c5:c1:e5:7f:78:d0:e1:ee:ce:9c:d9:e0:e5:4e:c5:e6:98:
         da:9a:6e:04:01:8c:28:7e:72:e8:bb:fe:53:33:72:07:6b:ce:
         68:4b:f5:56:a9:fb:b1:28:0b:71:76:b9:b2:08:0b:12:6c:9c:
         e0:22:5e:48:2b:d0:06:d2:46:7a:db:9a:07:86:24:2c:c0:3c:
         84:90:98:70:d9:aa:03:d5:6b:68:c9:26:1a:0e:fd:a4:e1:85:
         58:b8:93:9d:b5:d3:e1:41:01:99:66:39:fa:8e:9d:75:4b:ec:
         28:f3:0b:0d:8f:a7:f2:e0:6f:6d:de:fc:17:f3:fe:b9:42:38:
         97:91:fb:ee:07:c4:49:f2:ee:dc:e4:74:ca:48:32:be:9c:e8:
         cb:1c:98:04:05:f7:e4:ba:2a:4c:33:50:6f:07:c8:1f:90:2d:
         d0:54:57:e5:78:ee:3a:70:b8:43:b7:63:78:8e:cb:c7:4c:f6:
         8f:7c:6d:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----