Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Ad94e-voXx3v7fVwIxDuaq2yjgY.cer
File:                     Ad94e-voXx3v7fVwIxDuaq2yjgY.cer (raw, json)
Hash identifier:          ln+KeQ4Uq5Tt3WglNYqAuDAQjRlmXfnfZya6yQjvmLk=
Subject key identifier:   01:DF:78:7B:EB:E8:5F:1D:EF:ED:F5:70:23:10:EE:6A:AD:B2:8E:06
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0185701CE7A2589A6B2DE10139C7E6D207E2
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/51/452b7b-6814-4cbe-bbce-b06535d61b3f/1/Ad94e-voXx3v7fVwIxDuaq2yjgY.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/51/452b7b-6814-4cbe-bbce-b06535d61b3f/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 02 Jan 2023 01:33:40 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 217.145.228.0/22

Validation:               Failed, certificate revoked on Mon 27 Feb 2023 16:03:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:1c:e7:a2:58:9a:6b:2d:e1:01:39:c7:e6:d2:07:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 01:33:40 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=01df787bebe85f1defedf5702310ee6aadb28e06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:e2:61:e4:47:0d:10:de:0f:d4:3d:a3:0a:0f:
                    f2:90:d0:de:fc:e8:1e:40:bf:51:18:12:d4:91:9c:
                    b3:97:3c:b2:5a:68:66:c8:1c:ee:ad:d7:68:47:31:
                    f2:2c:6a:9a:88:98:74:d6:53:95:a7:be:1f:f1:43:
                    d2:67:58:44:7a:c3:43:7f:f7:b5:be:c7:5e:34:4c:
                    8f:b6:6e:c9:1e:b4:ff:0f:99:eb:37:9b:96:b8:70:
                    82:5f:34:c6:15:f3:7f:20:cb:5a:e7:8f:e4:f3:10:
                    f8:33:26:9d:4b:0a:c7:eb:30:34:6f:74:fd:0c:44:
                    b2:b9:bd:e7:7d:73:6e:df:a2:70:34:94:5b:cf:55:
                    15:ee:4f:c4:bd:e7:94:56:44:5e:c4:cd:e2:73:be:
                    f9:67:3e:3f:22:6f:98:3a:5d:61:21:d2:a3:88:f5:
                    61:c8:f9:a0:91:0c:8a:a4:6f:44:95:f3:ae:61:e8:
                    2c:19:8b:0f:f7:da:36:d0:a0:f2:e0:1c:fa:cd:40:
                    34:13:04:25:3b:08:f2:db:e1:0a:20:2c:8b:1c:d0:
                    f3:cd:6e:36:37:2d:b3:52:db:fc:ae:01:8e:9d:69:
                    9e:46:32:3d:91:61:7f:d4:a6:7b:fb:3f:2e:78:7a:
                    fa:f8:21:23:4c:69:31:26:cc:10:23:2b:15:ac:14:
                    0d:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:DF:78:7B:EB:E8:5F:1D:EF:ED:F5:70:23:10:EE:6A:AD:B2:8E:06
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/452b7b-6814-4cbe-bbce-b06535d61b3f/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/452b7b-6814-4cbe-bbce-b06535d61b3f/1/Ad94e-voXx3v7fVwIxDuaq2yjgY.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  217.145.228.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4d:ba:ab:a6:b6:d5:ea:6b:fb:b0:b6:28:a7:c5:38:12:06:d1:
         39:1b:45:54:94:ba:81:2e:44:35:79:c9:c4:c3:1e:1b:8a:16:
         e5:98:df:ca:12:f4:9e:7b:d2:2d:3c:b5:f5:44:a2:b5:fe:78:
         cc:c0:17:98:8e:51:67:69:52:1b:87:a2:45:af:fd:d7:02:5e:
         5d:66:cc:d3:c4:67:50:05:cb:b4:e4:61:9a:e3:bb:d9:f1:84:
         f2:54:83:98:5b:65:5f:50:ac:3f:94:25:1e:ba:58:95:77:41:
         14:77:3b:6e:68:a5:38:f8:c3:ee:04:f7:7c:22:92:31:57:39:
         b3:58:1b:c9:d2:43:b2:1b:60:e6:c9:16:b7:dc:24:f9:d3:63:
         07:aa:7b:28:98:9e:b0:24:18:d3:62:25:4a:7d:2e:02:e2:e9:
         9a:0b:fa:6c:2a:a6:56:d5:f0:73:e3:af:ef:09:ae:7b:e8:bb:
         3b:b5:2b:32:6e:17:89:4a:92:0c:d5:d9:98:2e:43:06:5a:7a:
         9c:5e:ab:2e:2e:05:23:64:d7:16:b3:af:09:2e:a9:b2:f9:95:
         18:8f:68:61:ed:68:b3:e0:c8:5b:2f:59:8c:a5:ad:9e:f4:4f:
         96:a4:7c:15:a4:59:c6:39:7c:e1:4a:34:1a:65:e0:47:7d:64:
         02:5b:34:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----