Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/CYVHYnorLeptCAryMUML6Kjml0A.cer
File:                     CYVHYnorLeptCAryMUML6Kjml0A.cer (raw, json)
Hash identifier:          XtY63sAoSXnp4V3tqUhDuHa9mcp1Kzh3a7libKvBdBA=
Subject key identifier:   09:85:47:62:7A:2B:2D:EA:6D:08:0A:F2:31:43:0B:E8:A8:E6:97:40
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01889B1C3F36AF1072E10F75796BCB96BF37
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/59/95fd62-fe39-4d9d-8ccb-6ce09552b9a3/1/CYVHYnorLeptCAryMUML6Kjml0A.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/59/95fd62-fe39-4d9d-8ccb-6ce09552b9a3/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 08 Jun 2023 13:04:59 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 146.255.184.0/24
                          IP: 2a13:7cc0::/29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:9b:1c:3f:36:af:10:72:e1:0f:75:79:6b:cb:96:bf:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jun  8 13:04:59 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=098547627a2b2dea6d080af231430be8a8e69740
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:37:a5:0a:ea:ae:e2:db:1c:f5:ff:73:81:68:
                    d5:9e:7f:6d:33:41:6e:8a:f3:ee:b2:07:07:70:1f:
                    52:13:29:be:88:d2:67:e2:6d:68:e2:38:44:60:1e:
                    43:19:10:dd:74:69:0d:95:4c:f5:9f:39:c4:dc:3e:
                    81:f9:5c:f0:14:8b:63:44:28:cf:f9:75:6b:52:51:
                    b9:13:85:43:39:1f:83:7d:a2:3f:cf:83:fc:31:ea:
                    3d:53:76:c6:19:55:b3:b7:01:d1:c6:72:7f:f9:c3:
                    19:df:04:0e:63:e4:b4:a6:30:34:bb:90:e1:b3:23:
                    3f:f2:2e:fb:f2:7a:48:d2:e9:04:c8:ca:6b:e6:5b:
                    ca:95:d5:ab:4f:5f:00:fe:04:14:f9:47:2e:03:15:
                    0b:11:b3:ea:fe:c9:b1:ef:da:3c:8b:1b:7a:c3:a1:
                    8d:a9:c2:80:5a:12:b0:c8:fa:18:cc:fc:df:60:fe:
                    34:b1:1c:27:2f:26:b4:d3:ad:9f:f7:dc:f6:23:9d:
                    e5:43:7c:12:cb:5b:35:04:85:df:1d:19:b8:10:46:
                    d1:c6:ea:92:6b:6b:f1:69:0c:6e:ef:d2:7a:5c:73:
                    94:18:a7:e4:3e:ce:8b:fd:d2:42:4a:41:0d:f5:86:
                    04:b8:f6:a7:3f:05:f1:f9:78:6a:0c:d9:4a:8a:52:
                    ec:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:85:47:62:7A:2B:2D:EA:6D:08:0A:F2:31:43:0B:E8:A8:E6:97:40
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/95fd62-fe39-4d9d-8ccb-6ce09552b9a3/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/95fd62-fe39-4d9d-8ccb-6ce09552b9a3/1/CYVHYnorLeptCAryMUML6Kjml0A.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.255.184.0/24
                IPv6:
                  2a13:7cc0::/29

    Signature Algorithm: sha256WithRSAEncryption
         1c:52:ec:dc:fb:c2:9f:53:d4:81:20:33:ae:87:74:18:22:8c:
         a4:38:8d:0a:49:45:99:52:1a:f0:fa:fa:e6:80:a2:f3:f5:e4:
         33:c5:81:23:87:bd:50:2a:22:71:47:4e:bd:73:5d:d0:73:ff:
         bf:1a:28:99:37:6b:a3:0c:ed:19:86:61:9d:21:23:d6:97:10:
         ef:df:cd:17:b7:87:4b:14:52:06:3e:81:5d:99:49:83:48:8a:
         6d:35:57:d4:52:1b:2f:5e:ff:4c:a7:00:8a:11:82:73:17:14:
         f7:31:34:3b:34:53:ef:42:2b:6e:1a:36:69:c3:bc:46:b0:ad:
         9f:b2:d8:a8:ce:76:a6:73:88:26:ca:b9:21:cc:ed:11:92:cb:
         2b:5a:e3:b8:9a:86:22:08:5d:69:4a:7b:41:c2:e2:c2:70:61:
         da:e0:65:19:64:17:65:b7:70:1f:8e:87:7b:bd:08:26:fa:73:
         31:00:e2:ff:a5:f4:a8:27:fb:31:d7:5d:b8:91:9a:da:49:68:
         ad:05:e4:8a:34:44:8e:90:c5:58:54:c7:7d:89:b5:48:a6:52:
         46:02:2b:bc:0b:7c:44:1a:5c:99:7d:51:42:1d:b8:68:33:d4:
         ea:a2:8f:8b:c0:e4:98:ef:18:62:0e:37:3f:97:6a:f3:7d:bb:
         c2:aa:9f:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----