Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/AYB7Z0CmNBv_r_RvFltYgfZg1hk.cer
File:                     AYB7Z0CmNBv_r_RvFltYgfZg1hk.cer (raw, json)
Hash identifier:          CEnu0lRNlt/sAzou8hWc5uLXyhBop5veV3jtXzGpc6M=
Subject key identifier:   01:80:7B:67:40:A6:34:1B:FF:AF:F4:6F:16:5B:58:81:F6:60:D6:19
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018B8F9C2D1CF9BD4F059330ED669085D28B
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/08/67e280-da2b-4d92-af0a-cee82cad1c9c/1/AYB7Z0CmNBv_r_RvFltYgfZg1hk.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/08/67e280-da2b-4d92-af0a-cee82cad1c9c/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Nov 2023 10:37:38 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 195.96.134.0/24
                          IP: 2a14:6e00::/29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:8f:9c:2d:1c:f9:bd:4f:05:93:30:ed:66:90:85:d2:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Nov  2 10:37:38 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=01807b6740a6341bffaff46f165b5881f660d619
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:c0:a7:ca:75:fa:4a:c6:ed:4b:da:7a:81:38:
                    48:19:7c:38:19:c6:86:18:c9:4b:22:9c:02:46:d2:
                    50:e9:77:c3:4b:32:30:a3:76:eb:ae:c4:8a:d9:f4:
                    97:16:99:b3:ee:4a:2e:0a:ca:f3:21:a4:f3:06:2f:
                    15:e3:aa:21:46:3b:c5:0d:d7:f9:cb:64:63:14:e7:
                    1d:5f:18:6c:4a:01:cb:56:fa:04:ad:09:8d:c4:01:
                    9b:6f:05:60:76:58:da:51:70:79:ef:3c:f2:e3:46:
                    b6:3d:fe:6a:0e:b4:db:1f:77:29:73:84:82:72:4b:
                    8c:ae:47:19:b7:a8:3d:9b:26:48:65:60:c1:31:c7:
                    ca:3c:be:65:79:92:71:2b:e5:97:70:c7:eb:f9:50:
                    61:14:42:a7:8b:22:0f:37:22:7b:71:08:d1:32:26:
                    f8:f3:56:ba:32:ca:ad:e0:84:c4:db:30:c1:46:ea:
                    bf:85:1a:ab:44:5e:4e:94:28:eb:68:7d:5c:c2:50:
                    79:2f:20:f0:63:7a:55:69:eb:a7:6f:66:87:a4:51:
                    bf:5c:86:df:91:42:3a:68:28:be:be:dc:ae:2e:78:
                    01:f9:1a:95:16:ee:04:b3:72:0e:55:79:ac:c4:a5:
                    f5:87:b5:f3:7e:8f:f7:62:e4:f8:29:09:60:c4:31:
                    51:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:80:7B:67:40:A6:34:1B:FF:AF:F4:6F:16:5B:58:81:F6:60:D6:19
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/67e280-da2b-4d92-af0a-cee82cad1c9c/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/67e280-da2b-4d92-af0a-cee82cad1c9c/1/AYB7Z0CmNBv_r_RvFltYgfZg1hk.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.96.134.0/24
                IPv6:
                  2a14:6e00::/29

    Signature Algorithm: sha256WithRSAEncryption
         8e:62:e0:17:13:f1:ca:e8:f1:1d:cf:af:4f:0a:d8:2b:02:c6:
         37:b4:ce:bc:06:2d:1a:97:08:4b:70:f8:de:ad:6a:73:76:d7:
         fb:13:48:45:63:14:dc:2f:e6:3e:c4:07:08:4b:30:b4:c9:85:
         8a:92:a6:64:fa:cc:b5:f0:7e:27:b4:cb:93:02:2a:2d:cc:5b:
         86:ae:90:ce:33:4a:2f:03:0c:cd:e4:07:b7:2b:91:23:bd:b4:
         d0:da:87:ef:e8:06:e6:b3:0f:f8:ca:c9:17:56:52:38:35:d2:
         48:d2:de:08:d1:ed:f8:fd:76:b7:c6:41:b8:42:ad:b6:89:19:
         bd:af:49:8e:91:5a:53:9c:a2:0d:4b:dd:f0:81:5f:82:8c:0d:
         8f:2c:7c:97:5e:d5:75:9c:c7:dd:38:cf:7f:77:9b:9d:4e:d0:
         ab:3d:bf:7f:7e:c2:c0:46:c7:16:4b:8a:06:cd:ed:6e:d0:af:
         9e:67:08:6e:9d:84:ef:76:f1:eb:41:86:8d:ff:79:64:6e:0b:
         b3:ab:2c:e1:d4:31:90:df:4a:2e:39:89:71:00:5a:2e:58:02:
         20:a8:e7:1c:83:35:72:32:72:fb:b6:92:c4:98:23:e4:b5:e5:
         3c:75:18:5a:a4:67:f2:6f:aa:23:51:57:8e:3f:2b:ba:f3:90:
         26:2e:10:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----