Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9-1uBmQ24KC2F0dJVainWObjXXY.cer
File:                     9-1uBmQ24KC2F0dJVainWObjXXY.cer (raw, json)
Hash identifier:          73JGiQUfVaG8PfbKKmb/Q1giq/qV2zcztnBpuGwONWs=
Subject key identifier:   F7:ED:6E:06:64:36:E0:A0:B6:17:47:49:55:A8:A7:58:E6:E3:5D:76
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856BD10FEBEC1083FC05A50C39DDA6DCA6
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/cf/7c1131-966f-43af-8f4c-c3fbc8d8f966/1/9-1uBmQ24KC2F0dJVainWObjXXY.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/cf/7c1131-966f-43af-8f4c-c3fbc8d8f966/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 05:32:21 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 146.19.92.0/24
                          IP: 2a12:7100::/29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6b:d1:0f:eb:ec:10:83:fc:05:a5:0c:39:dd:a6:dc:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 05:32:21 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=f7ed6e066436e0a0b617474955a8a758e6e35d76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:40:5a:09:ea:55:88:55:ee:91:cb:f6:8f:f3:
                    61:fc:0d:0e:38:6a:aa:2f:82:1b:17:50:a8:b3:10:
                    a4:fd:06:7e:a0:b0:ca:f8:8a:e3:48:32:73:27:4a:
                    72:4d:99:6d:98:7d:80:32:90:74:15:25:0a:70:87:
                    d3:14:64:8f:aa:2d:a2:75:4c:70:b3:5c:9a:7e:bb:
                    0f:24:4d:fd:f3:ef:b9:54:f2:58:4e:4e:d5:d9:34:
                    67:08:e3:a8:12:d1:6e:dc:5c:e2:be:f6:be:2f:92:
                    89:26:e1:07:6b:3a:35:4b:4e:29:39:0d:4b:c3:61:
                    46:ae:cb:fd:98:61:d3:07:34:94:83:1e:98:a4:55:
                    0b:17:47:81:4b:a5:2f:bc:3e:09:6d:7d:d5:e1:30:
                    d9:fa:c4:54:17:78:cd:78:0f:3b:c7:2c:41:ad:0a:
                    12:1d:4e:2e:d1:fb:fc:15:be:70:a8:8f:24:78:73:
                    cc:8d:1a:1d:c1:50:cc:34:e4:32:06:53:92:7b:3f:
                    ee:97:c2:42:86:31:3b:e0:12:8f:ba:16:59:fa:39:
                    9a:30:bc:f4:a5:04:aa:61:3b:de:64:06:20:44:4b:
                    06:29:dc:3b:a6:87:87:48:37:e9:18:89:44:13:9b:
                    bb:79:89:cd:28:f5:ae:90:33:95:47:1b:53:42:cf:
                    61:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:ED:6E:06:64:36:E0:A0:B6:17:47:49:55:A8:A7:58:E6:E3:5D:76
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/7c1131-966f-43af-8f4c-c3fbc8d8f966/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/7c1131-966f-43af-8f4c-c3fbc8d8f966/1/9-1uBmQ24KC2F0dJVainWObjXXY.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.19.92.0/24
                IPv6:
                  2a12:7100::/29

    Signature Algorithm: sha256WithRSAEncryption
         2d:55:f7:cc:14:b5:f3:e0:72:24:f2:39:88:2d:1d:d2:49:8e:
         ff:e6:50:80:06:5f:86:a8:35:7a:01:79:c4:ce:1e:08:83:1d:
         40:3e:8e:4e:30:0c:e1:84:75:83:6c:26:a9:07:44:d5:e3:39:
         6e:78:1f:4c:c2:2d:f8:34:20:f3:cd:aa:2b:89:36:ef:c3:a2:
         b4:65:b0:73:a8:dc:3a:32:63:18:d2:3a:b6:74:1e:83:a4:f2:
         11:7d:71:a8:ed:92:ca:1a:6e:19:99:96:13:6c:42:08:2f:6d:
         49:3a:d8:5c:bb:6d:90:24:bb:a5:dc:0a:ea:e2:5a:1f:48:25:
         42:8f:36:82:1c:e7:94:af:33:f1:c4:f3:ec:55:40:a4:3f:b8:
         be:3f:6c:8d:4e:79:b2:7a:07:cf:75:7a:a0:ae:75:87:2e:4d:
         a2:86:15:b4:3f:a3:cb:20:06:d7:ae:a4:bc:fa:f8:1e:31:a4:
         63:2f:7b:51:8e:a9:c6:8b:c6:76:a5:3d:87:6c:aa:90:cf:bb:
         ef:3c:27:15:4e:df:ef:2d:81:2a:8b:a9:84:b5:88:00:37:25:
         29:c6:c1:d4:51:01:2e:a1:79:00:86:1f:fa:60:bc:b2:a3:a1:
         de:10:cf:49:e6:07:1e:af:54:8b:22:b1:c2:ea:fe:89:bc:d0:
         a5:fc:fe:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----