Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/BKCP6Dp8K_FVJPSNmnysQ5xG_Wc.cer
File:                     BKCP6Dp8K_FVJPSNmnysQ5xG_Wc.cer (raw, json)
Hash identifier:          xdi3eZmwlNovQcNpMTwgBEKfUNu2mLqdu/PbjpMqwFg=
Subject key identifier:   04:A0:8F:E8:3A:7C:2B:F1:55:24:F4:8D:9A:7C:AC:43:9C:46:FD:67
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856F4206E481FB758A90CDC191177834B6
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/e3/cf4025-3198-4a93-ab76-35720860a5b2/1/BKCP6Dp8K_FVJPSNmnysQ5xG_Wc.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/e3/cf4025-3198-4a93-ab76-35720860a5b2/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 21:34:36 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 195.96.149.0/24
                          IP: 2a12:1c00::/29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:42:06:e4:81:fb:75:8a:90:cd:c1:91:17:78:34:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 21:34:36 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=04a08fe83a7c2bf15524f48d9a7cac439c46fd67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:8d:bc:6e:22:d8:ae:31:ae:ac:c0:01:4b:84:
                    30:a7:04:91:6c:4f:b3:48:da:d8:b9:29:1b:af:b1:
                    3f:df:8d:bc:c0:cb:ed:6d:df:46:54:1b:ce:d8:8e:
                    53:a7:a1:bd:6f:4e:c3:87:0d:e8:26:a3:a3:52:f1:
                    14:7e:6b:0f:f6:91:65:28:77:59:73:b3:01:62:2e:
                    2f:df:63:e5:b6:39:a2:5d:53:ad:04:d5:13:29:7e:
                    20:70:7f:c6:44:62:86:2a:97:99:0d:5f:1d:62:4f:
                    ab:50:89:89:25:71:9f:00:d1:1f:4b:46:16:6e:4f:
                    a9:4f:c2:69:2f:97:49:5f:54:ca:1c:74:a2:1b:cb:
                    82:11:fc:e2:c6:43:c9:c0:d9:8e:27:4a:d9:f8:33:
                    6d:27:a8:3c:0a:e8:fa:c5:12:b9:57:78:d6:7d:4c:
                    f7:88:ac:b3:14:3b:6b:c4:c7:4a:22:32:f4:65:ab:
                    0d:2b:81:32:ce:a3:04:fe:a0:2b:9e:6e:b3:1e:8b:
                    84:32:a8:45:ee:16:e6:bc:e7:ef:7b:0f:8e:7c:f2:
                    e9:6b:a9:49:70:f6:5c:a2:80:40:02:6a:bf:fd:eb:
                    6c:72:c1:f8:8c:3e:05:13:82:53:ab:2b:c8:71:7a:
                    93:23:13:ea:8e:64:9d:df:d1:a7:bb:7d:7b:35:cf:
                    05:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:A0:8F:E8:3A:7C:2B:F1:55:24:F4:8D:9A:7C:AC:43:9C:46:FD:67
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/cf4025-3198-4a93-ab76-35720860a5b2/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/cf4025-3198-4a93-ab76-35720860a5b2/1/BKCP6Dp8K_FVJPSNmnysQ5xG_Wc.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.96.149.0/24
                IPv6:
                  2a12:1c00::/29

    Signature Algorithm: sha256WithRSAEncryption
         5e:87:e3:c1:ca:73:75:4c:4c:80:8d:98:bb:02:85:29:15:53:
         f2:63:5e:5e:f2:35:94:50:4a:23:04:48:44:09:e4:6d:70:67:
         3e:f2:60:ca:90:0d:a7:04:1e:6c:70:8e:f4:35:f7:3f:05:f6:
         9a:e1:48:44:2f:1a:1a:25:94:6c:8d:04:ab:35:8e:24:85:1d:
         62:61:92:d8:24:f3:42:9e:8a:66:99:a8:86:b1:c5:7c:af:16:
         4a:d5:84:35:03:b9:3b:c8:a9:67:1e:59:ca:79:10:4e:3c:06:
         dc:80:91:23:31:54:e7:f0:44:b1:7b:ba:8d:dd:a7:15:1f:f9:
         84:de:0a:61:04:14:ba:88:56:be:1f:92:2a:5f:75:63:29:19:
         bb:1b:fc:55:32:67:7c:bc:99:53:fc:26:a3:53:b1:e8:51:ea:
         ef:f6:87:ca:ff:65:75:a5:44:a4:bf:0a:b9:e5:26:7b:ef:ea:
         8a:c8:b5:64:98:5f:1c:3a:80:dc:27:72:12:05:17:15:ee:2b:
         bf:b7:25:61:4c:fa:94:8c:27:8d:75:35:d9:57:b3:29:72:71:
         32:6f:7d:e4:13:93:63:93:13:04:79:a4:f4:64:14:48:96:b4:
         8a:21:4e:35:18:6e:f3:ec:5d:7e:b9:89:dd:a6:ce:fd:0e:c2:
         71:17:43:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----