Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9DSK57rtxU7BIPQg151qG3Hef7c.cer
File:                     9DSK57rtxU7BIPQg151qG3Hef7c.cer (raw, json)
Hash identifier:          7vkRjsrxz9/KT/UferDMY4IAyKS9uG38zyEUQPC5x+Q=
Subject key identifier:   F4:34:8A:E7:BA:ED:C5:4E:C1:20:F4:20:D7:9D:6A:1B:71:DE:7F:B7
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018571D5A92DB1ED35D167BC81E0CD5754DD
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/79/2c4bd7-c498-4d02-b6fc-6c4e2569679e/1/9DSK57rtxU7BIPQg151qG3Hef7c.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/79/2c4bd7-c498-4d02-b6fc-6c4e2569679e/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 02 Jan 2023 09:35:06 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 194.26.129.0/24
                          IP: 2a12:b080::/29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:71:d5:a9:2d:b1:ed:35:d1:67:bc:81:e0:cd:57:54:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 09:35:06 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=f4348ae7baedc54ec120f420d79d6a1b71de7fb7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:ea:bf:52:99:b8:9d:b6:45:34:2b:2f:dd:fd:
                    98:2f:ba:9f:70:3d:86:bf:43:dc:34:7d:01:63:25:
                    e3:11:e5:17:c2:08:1e:c5:9a:14:cc:3a:0b:81:f1:
                    c1:a2:0b:b7:ec:b4:33:b8:53:5f:4c:ab:0d:c5:fa:
                    df:91:d5:ad:07:92:6e:15:22:13:6d:06:c7:1a:4e:
                    f3:30:b6:cc:04:92:fe:7b:fb:a1:3f:52:d9:2a:25:
                    09:0c:0a:b0:96:92:93:a2:cf:18:52:29:39:02:bb:
                    bb:71:71:14:9e:26:93:ae:86:7b:f5:75:0d:6c:c5:
                    d4:dd:67:4f:a4:97:b8:59:8c:ee:10:90:f3:b5:4d:
                    58:b0:0c:32:a6:be:90:63:09:07:e1:4f:8d:46:5e:
                    a1:d7:aa:04:ea:04:1d:18:f3:f0:06:8d:c4:db:57:
                    63:25:c8:af:8c:10:6a:6a:7d:62:c8:26:53:95:f8:
                    c3:52:b3:d9:af:97:1f:e4:a8:fb:3e:84:d1:a4:30:
                    53:d0:ea:38:f5:18:e7:2e:e6:89:55:21:ea:d2:46:
                    69:cd:ac:e7:c7:70:16:f0:8d:69:c9:76:7a:de:a7:
                    c1:52:e7:a6:09:3b:55:af:19:b1:ec:ae:33:ce:cf:
                    a9:d3:d0:a8:b4:6d:ec:87:66:53:dd:a5:42:5e:2d:
                    7f:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:34:8A:E7:BA:ED:C5:4E:C1:20:F4:20:D7:9D:6A:1B:71:DE:7F:B7
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/2c4bd7-c498-4d02-b6fc-6c4e2569679e/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/2c4bd7-c498-4d02-b6fc-6c4e2569679e/1/9DSK57rtxU7BIPQg151qG3Hef7c.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.26.129.0/24
                IPv6:
                  2a12:b080::/29

    Signature Algorithm: sha256WithRSAEncryption
         61:d1:5f:b4:d3:58:89:46:8a:2b:0a:a0:14:4b:07:b1:79:ff:
         ba:c3:0c:bb:a9:4f:e7:a1:36:3c:2b:b2:ab:3c:f1:8e:9e:f0:
         0c:f3:be:59:97:64:b8:e3:92:15:d8:e1:4e:7d:4c:11:0f:b7:
         75:12:e8:34:63:8a:08:62:15:b8:6b:f3:82:e8:93:fc:e3:80:
         a5:6b:cf:2e:19:65:43:67:a5:a9:af:fb:e0:ab:aa:a9:72:42:
         85:53:e8:d8:8e:00:b8:33:08:24:4f:39:e9:71:b4:c1:65:86:
         14:0e:50:6b:28:70:59:f4:d6:da:cd:3a:c0:9d:c8:fc:5e:ac:
         b7:3c:fa:3f:0f:24:56:fc:6b:0f:82:f3:7f:b7:36:02:48:81:
         88:f2:1f:42:ce:a2:07:10:c4:98:b0:bc:97:3e:61:49:13:37:
         e0:26:27:af:d1:54:a8:86:52:4f:d5:54:69:c5:6f:34:8c:c2:
         c0:02:ba:20:12:61:0d:5f:3b:55:73:a1:34:5d:f1:c7:ff:86:
         f6:c9:69:36:1f:a3:86:64:bc:ac:2a:34:7c:ce:ec:f4:9a:8b:
         95:58:3d:21:5c:b4:bd:b9:06:53:00:87:df:15:9f:80:5d:38:
         ee:1b:42:d7:9a:b0:72:af:e6:56:19:89:0a:be:60:c8:f8:aa:
         cb:d0:82:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----