Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/AvPAp4HKnBAEmeoURbyd2gllCpw.cer
File:                     AvPAp4HKnBAEmeoURbyd2gllCpw.cer (raw, json)
Hash identifier:          eQUotOuR76+yD5AVSWdIgEEPIItaU/Ry22G3lR/rCro=
Subject key identifier:   02:F3:C0:A7:81:CA:9C:10:04:99:EA:14:45:BC:9D:DA:09:65:0A:9C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856C3E87F2CF0539DEC9E3641383CD3151
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/45/5c2c95-81d2-419f-a0d8-78552e8490d7/1/AvPAp4HKnBAEmeoURbyd2gllCpw.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/45/5c2c95-81d2-419f-a0d8-78552e8490d7/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 07:31:55 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 37.72.128.0/24
                          IP: 2a11:2b40::/29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6c:3e:87:f2:cf:05:39:de:c9:e3:64:13:83:cd:31:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 07:31:55 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=02f3c0a781ca9c100499ea1445bc9dda09650a9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:7e:8d:c7:50:a9:0a:0b:ee:3f:79:3d:c9:cc:
                    be:36:45:f6:4b:4c:dd:88:8e:a7:63:39:aa:06:88:
                    75:25:3e:a2:e6:0b:bf:7f:40:81:51:11:44:3c:1d:
                    b3:45:e3:57:31:66:14:e5:d9:d9:70:92:b6:2c:90:
                    9d:8e:dc:ee:17:50:b2:18:b7:c0:6b:09:ab:51:6c:
                    05:bd:20:cc:a6:d4:59:2e:15:22:73:44:0f:97:a5:
                    06:1a:d9:e1:3d:57:0b:3b:69:6e:ce:cc:a9:8f:b5:
                    f4:9c:82:f2:74:a1:a0:67:3e:e7:73:37:09:c8:df:
                    36:b7:51:24:19:db:72:8a:2d:64:f2:98:93:27:7f:
                    37:10:6e:85:f8:49:f4:72:4b:d1:87:af:fe:17:53:
                    ef:9e:c7:2d:7c:ae:c9:74:f8:bd:65:fb:9f:60:fa:
                    eb:2b:2e:ae:79:52:bc:ec:d5:61:40:cc:ec:57:52:
                    0a:5b:fb:a5:96:9b:e7:d6:12:68:30:1f:32:f4:b6:
                    07:ce:50:84:3b:58:c8:53:7c:b8:f6:93:f6:5a:12:
                    fd:0d:7b:37:2a:02:b4:0e:f1:d6:1c:e2:87:12:8e:
                    42:e6:42:a6:0a:0b:ca:3b:7d:d8:c8:66:ba:10:4e:
                    20:64:70:4b:17:6d:47:f4:6f:8f:a9:77:71:6a:09:
                    37:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:F3:C0:A7:81:CA:9C:10:04:99:EA:14:45:BC:9D:DA:09:65:0A:9C
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/5c2c95-81d2-419f-a0d8-78552e8490d7/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/5c2c95-81d2-419f-a0d8-78552e8490d7/1/AvPAp4HKnBAEmeoURbyd2gllCpw.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  37.72.128.0/24
                IPv6:
                  2a11:2b40::/29

    Signature Algorithm: sha256WithRSAEncryption
         07:78:e0:4d:72:a1:cb:8c:cf:93:ea:7a:4b:c0:bb:86:47:9e:
         26:d9:37:6e:66:94:82:28:93:fb:16:d4:e4:e9:99:95:37:33:
         4c:90:11:2d:e4:fc:74:94:e7:f3:4e:e8:43:00:20:10:3b:0e:
         1c:ba:02:55:e6:fe:3f:49:75:ed:cc:3d:b2:46:d8:c8:7e:a2:
         75:21:de:eb:8c:de:9d:e8:02:67:ab:e8:b9:25:65:91:52:25:
         f7:08:dc:87:c0:6f:6d:7b:be:96:f9:7d:bd:4f:b1:b4:01:96:
         76:0c:3f:96:54:9c:2e:77:02:99:c9:4b:3f:5c:8b:95:0b:c6:
         c1:01:68:23:52:ad:5a:7a:cc:47:27:f4:43:41:2b:fd:35:61:
         08:7e:2e:52:4c:b7:e1:59:33:94:6f:07:7c:49:94:a4:b4:a6:
         07:85:96:43:bc:2e:63:cd:e3:21:4f:44:92:2b:66:ea:56:c3:
         42:d7:70:f0:a4:72:43:7e:6b:96:82:94:39:8e:23:11:7d:36:
         60:c4:ae:a6:bc:24:c1:84:29:4f:ab:f7:f4:25:96:75:0e:80:
         42:f2:d8:41:fc:2a:8f:a6:95:ab:21:63:96:9b:4d:56:a9:81:
         1d:78:98:92:ae:fd:e7:17:8f:e9:23:b8:3e:b2:ee:84:2c:77:
         c6:77:fd:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----