Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/B_XM9qvXWCzFGUCnb5lQVjOYK7Q.cer
File:                     B_XM9qvXWCzFGUCnb5lQVjOYK7Q.cer (raw, json)
Hash identifier:          Rme3hiMiNGURACSgN1CNozL9wO7VSGu8cbUrmDzkbcA=
Subject key identifier:   07:F5:CC:F6:AB:D7:58:2C:C5:19:40:A7:6F:99:50:56:33:98:2B:B4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856FAE8A9B3143F3A92C92DEFC8BE7EE9C
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/eb/cd63ea-faa9-404e-9f57-0dae0d653e38/1/B_XM9qvXWCzFGUCnb5lQVjOYK7Q.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/eb/cd63ea-faa9-404e-9f57-0dae0d653e38/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 23:33:07 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 217.114.39.0/24
                          IP: 2a11:76c0::/29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:ae:8a:9b:31:43:f3:a9:2c:92:de:fc:8b:e7:ee:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 23:33:07 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=07f5ccf6abd7582cc51940a76f99505633982bb4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:95:fd:92:e0:c9:c7:e6:d4:73:22:39:dc:d6:
                    1c:c2:16:25:b6:ef:79:97:88:3d:0e:dc:c5:2d:e5:
                    5d:88:d0:ce:e9:9d:9d:ad:62:c1:87:0a:a9:22:49:
                    a9:12:c9:57:73:6f:9f:ec:47:bb:f0:31:82:51:b1:
                    6c:43:4d:a1:f1:90:c0:ff:a1:ad:c9:2c:ad:be:c6:
                    50:c5:5e:9b:59:e1:bc:22:51:27:40:f8:9e:37:fb:
                    7a:e7:25:c9:5c:a3:da:cc:c5:47:ee:34:22:ec:01:
                    bf:50:16:3a:03:30:2b:44:c9:d3:64:82:9d:2b:ef:
                    06:37:ff:24:56:5a:64:dd:6c:a1:cb:e5:08:12:af:
                    02:2d:dd:6c:02:10:e1:58:be:26:35:d2:49:81:a2:
                    be:28:b1:4d:b2:c4:6c:ca:25:e8:4a:a0:26:7c:c5:
                    c8:5a:b9:2c:f6:ac:0f:3d:53:bd:43:3d:2a:52:2e:
                    eb:9e:36:f1:0e:80:7e:06:ea:4c:96:4c:3e:34:ff:
                    ee:64:f4:d2:96:99:a3:83:f5:44:dc:71:1c:3c:47:
                    23:26:d5:a0:84:73:03:21:21:8f:56:1f:89:c5:df:
                    cd:07:e0:d3:6d:7e:e4:a5:0a:db:9b:21:68:75:50:
                    4f:37:b9:93:a0:ee:96:8e:b3:f7:25:af:0c:13:4f:
                    d6:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:F5:CC:F6:AB:D7:58:2C:C5:19:40:A7:6F:99:50:56:33:98:2B:B4
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/cd63ea-faa9-404e-9f57-0dae0d653e38/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/cd63ea-faa9-404e-9f57-0dae0d653e38/1/B_XM9qvXWCzFGUCnb5lQVjOYK7Q.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  217.114.39.0/24
                IPv6:
                  2a11:76c0::/29

    Signature Algorithm: sha256WithRSAEncryption
         8b:18:59:43:5d:5d:a0:66:5a:0e:51:ba:63:0e:77:f7:49:41:
         18:d2:54:fd:74:8a:c9:5a:df:52:b7:5c:32:df:14:ee:8c:75:
         90:34:61:3b:49:ab:88:4f:64:79:b5:77:72:2a:3d:ec:ac:c8:
         15:bc:92:de:de:9e:bf:91:18:8f:96:68:f9:22:2d:ba:21:8d:
         37:bb:75:96:53:87:be:1e:28:6d:7d:11:88:f8:e1:79:bb:e6:
         15:d3:a9:d0:a0:49:58:fe:c9:87:ec:cb:e7:5a:c7:76:d3:e5:
         9e:bc:33:27:d9:0a:88:bc:19:14:a8:ea:fb:22:d3:90:37:be:
         ef:f6:b8:3d:ec:b8:2c:a7:6a:08:f3:ff:09:9d:a7:ee:63:d6:
         53:4b:91:e2:df:da:16:43:15:f3:3a:e2:00:ac:90:fb:c2:22:
         66:36:25:69:5b:de:1e:e9:53:39:86:d5:d2:40:fa:c2:19:5d:
         bd:4a:8f:26:3b:66:d0:ad:f0:e1:bb:f6:e6:7c:df:19:f8:04:
         56:38:c3:70:ae:5a:fa:37:ef:1e:f9:34:d0:ee:ae:ad:d9:13:
         c9:0b:51:6f:52:39:ae:a3:8b:1b:9f:f2:a7:2b:63:4a:0c:1c:
         01:6b:14:cf:5b:1a:97:79:93:e3:87:99:74:1f:d6:0e:21:aa:
         e3:5e:40:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----