Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9cv5dxP_MNLcdn1SHNMMK5KK54M.cer
File:                     9cv5dxP_MNLcdn1SHNMMK5KK54M.cer (raw, json)
Hash identifier:          RWl4yhdiyEuYTWsF7EWuwLMbEI+f4WJFE6QUaWm3KWY=
Subject key identifier:   F5:CB:F9:77:13:FF:30:D2:DC:76:7D:52:1C:D3:0C:2B:92:8A:E7:83
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856D1AAD1CDC3AA741F905A883ECFE352D
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/bb/c0dfed-1d0d-4fca-b15b-b5e4ef322946/1/9cv5dxP_MNLcdn1SHNMMK5KK54M.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/bb/c0dfed-1d0d-4fca-b15b-b5e4ef322946/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 11:32:22 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    AS: 60036
                          AS: 205464
                          IP: 185.213.92.0/22
                          IP: 2a0b:8640::/29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6d:1a:ad:1c:dc:3a:a7:41:f9:05:a8:83:ec:fe:35:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 11:32:22 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=f5cbf97713ff30d2dc767d521cd30c2b928ae783
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:ac:3f:76:5b:ad:88:d5:6f:08:20:3d:dc:75:
                    d3:ea:62:38:c1:ac:b6:a8:cd:82:44:fd:60:61:e1:
                    18:56:63:29:14:79:99:4a:93:01:9b:4f:85:7e:c4:
                    07:f8:48:1e:d3:ba:f6:dd:b0:6b:58:80:b1:85:d5:
                    69:39:64:34:f3:2e:cc:6f:1f:37:c1:d5:16:e9:2e:
                    db:a6:77:ce:25:50:14:5b:fa:da:0c:25:19:44:04:
                    2a:6c:cb:33:25:bd:28:51:94:5b:05:b7:09:cd:94:
                    3f:38:98:7e:06:85:5a:29:de:3d:42:35:a2:85:c6:
                    0b:26:2a:54:57:75:ac:b4:21:92:4b:13:dd:78:e2:
                    30:04:58:98:97:25:25:0c:9e:af:d3:dc:27:86:51:
                    a3:b6:1c:66:ed:49:b8:31:07:8e:f6:2e:df:75:04:
                    f8:ec:97:51:f6:f6:8c:d9:78:e0:e2:be:4b:03:87:
                    a0:07:94:89:c0:13:60:76:fe:f9:36:1a:a6:89:25:
                    69:2d:84:0e:2e:3c:c4:5b:63:3c:71:d6:04:9e:0c:
                    41:20:b6:a1:84:66:39:9a:9b:65:c5:b8:e9:08:71:
                    35:2c:87:88:93:61:28:2f:85:39:ef:bb:a4:1f:a3:
                    b9:af:cd:e3:be:b4:3f:46:1c:55:85:ca:03:fc:dd:
                    1f:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:CB:F9:77:13:FF:30:D2:DC:76:7D:52:1C:D3:0C:2B:92:8A:E7:83
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/c0dfed-1d0d-4fca-b15b-b5e4ef322946/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/c0dfed-1d0d-4fca-b15b-b5e4ef322946/1/9cv5dxP_MNLcdn1SHNMMK5KK54M.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.213.92.0/22
                IPv6:
                  2a0b:8640::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  60036
                  205464

    Signature Algorithm: sha256WithRSAEncryption
         5b:cd:87:6e:6d:03:fd:31:56:c1:01:af:45:c4:73:15:2e:3f:
         ab:f8:4c:88:a9:3a:18:d0:73:be:06:14:24:ed:a6:dc:6d:7b:
         22:6b:38:b1:ec:d9:06:55:53:51:a7:64:be:7a:9e:be:02:91:
         fb:00:14:91:1c:d2:c0:8d:ba:46:e9:c0:04:9d:43:a4:ad:bc:
         aa:13:e9:d6:cc:cc:b5:30:4f:61:4e:31:70:56:e7:02:b4:c7:
         05:c6:81:5b:59:60:1e:d5:d7:95:ea:0d:0f:ef:80:1b:5b:c0:
         b6:3a:9d:b0:cb:55:e9:a0:7a:4a:ed:83:4f:5d:80:2c:80:28:
         34:01:d2:59:d4:21:0c:30:4f:3b:cc:ea:89:53:9e:2c:f4:fe:
         da:eb:a2:1a:08:be:78:8b:c6:0a:6b:d4:e2:ac:aa:4e:e2:ba:
         86:41:3e:ac:78:1f:90:06:df:12:a4:04:9d:41:6f:6f:7b:d1:
         04:3c:96:f9:bf:34:18:0b:83:64:4e:50:e0:7b:4a:fd:a1:98:
         85:eb:7b:f7:63:e0:ea:9a:35:f7:40:79:a3:2b:ee:a1:1c:76:
         35:27:05:f1:fb:14:6c:21:23:88:23:05:66:20:90:2f:22:62:
         cf:f0:49:63:b2:55:16:cb:03:3c:a7:ff:84:a5:0d:a5:e6:7b:
         f5:56:00:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----