Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/CUiVoHGjrdnfPshOZFR6_cprYqM.cer
File:                     CUiVoHGjrdnfPshOZFR6_cprYqM.cer (raw, json)
Hash identifier:          MamnCrULf508BzyZN7u1GEvpJSChvSB+5V/5MERDTng=
Subject key identifier:   09:48:95:A0:71:A3:AD:D9:DF:3E:C8:4E:64:54:7A:FD:CA:6B:62:A3
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856DF7BFA7CC96B7BCAE9A56085E800E61
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/05/5cf307-650a-4384-a6b4-545d3068c666/1/CUiVoHGjrdnfPshOZFR6_cprYqM.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/05/5cf307-650a-4384-a6b4-545d3068c666/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 15:33:51 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 45.11.116.0/22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6d:f7:bf:a7:cc:96:b7:bc:ae:9a:56:08:5e:80:0e:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 15:33:51 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=094895a071a3add9df3ec84e64547afdca6b62a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:ce:fb:77:bc:34:07:7c:ed:d1:32:5f:5c:f4:
                    26:ed:fb:b6:eb:eb:01:4e:20:70:c1:f6:74:5b:98:
                    ea:a4:16:f4:1a:a7:d2:d8:38:93:72:9f:22:80:33:
                    fc:cd:f1:42:ec:f4:f8:0c:1f:7e:f8:ad:b0:f8:38:
                    4a:ed:a3:b9:79:42:1c:b9:51:01:aa:f9:27:3b:19:
                    da:f0:45:21:9a:0c:2a:39:de:bc:6f:ad:9d:cc:5f:
                    c0:32:20:39:76:12:01:4f:ba:32:a5:1b:a8:03:3c:
                    2e:6f:2b:aa:e2:87:63:29:5f:52:e4:3d:0d:54:92:
                    ba:74:a1:d4:27:4a:97:67:93:8b:00:d5:64:55:43:
                    78:01:75:9d:32:53:17:23:bd:21:e6:5f:45:6a:d6:
                    2d:12:d2:f8:1b:a1:35:09:3e:e1:78:a8:91:4a:3f:
                    c3:58:fb:d7:ae:c8:58:e5:ab:34:e9:a2:76:8d:29:
                    26:9e:0b:f9:54:74:cf:33:f3:4a:04:46:c8:63:05:
                    10:1a:3f:49:69:28:23:f8:7c:d5:26:e9:1a:05:a4:
                    7f:1d:05:97:cb:a1:0a:2a:2b:f8:92:3b:cb:41:05:
                    a1:af:4b:76:ef:0f:70:a2:b1:b0:16:ad:1a:f5:77:
                    95:0f:fa:2f:f8:0e:09:ea:d7:37:e5:31:f6:88:30:
                    81:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:48:95:A0:71:A3:AD:D9:DF:3E:C8:4E:64:54:7A:FD:CA:6B:62:A3
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/5cf307-650a-4384-a6b4-545d3068c666/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/5cf307-650a-4384-a6b4-545d3068c666/1/CUiVoHGjrdnfPshOZFR6_cprYqM.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.11.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         70:f0:86:f5:8b:fd:12:56:80:e3:b1:44:9c:f6:12:c9:3c:55:
         37:60:51:7f:df:1c:b3:db:83:e9:e6:29:a1:ff:4a:d8:0e:3f:
         7c:42:c0:bb:9f:b5:a3:5a:a8:cf:04:ae:41:19:f8:74:ab:3d:
         58:a9:7f:aa:e6:51:02:e1:60:e7:c9:f2:ff:3d:2d:00:e1:95:
         0e:1f:23:5b:7a:fa:7b:93:8b:26:43:14:1b:80:bd:77:b4:c6:
         11:f0:be:19:00:b3:75:de:aa:b5:26:ef:62:dd:4d:2f:ee:c0:
         bf:28:3e:27:e9:97:11:a3:0a:83:f2:1b:67:85:da:62:09:5f:
         3d:5a:48:88:41:99:76:84:88:dc:f6:6f:98:88:64:f9:2e:94:
         df:aa:22:a0:59:92:1d:8d:95:52:45:df:89:ed:9f:c2:cb:16:
         cd:aa:65:66:a2:87:79:bc:3e:fd:20:e7:da:19:fe:b4:2f:1c:
         88:8a:88:b2:21:6d:26:ec:27:56:d1:61:59:07:47:d4:af:fb:
         81:f2:a5:dd:4a:3b:1a:f4:f0:91:d8:f0:fc:58:44:6a:ae:09:
         ed:4e:e8:7f:66:fc:fb:ce:d0:70:7c:d2:84:da:29:1f:d5:e0:
         8e:78:77:6d:64:10:31:6a:eb:14:02:16:b6:2a:8e:be:28:3d:
         a2:dc:84:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----