Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Cl0ds8h0vigpimiBLKoksbQ-A8k.cer
File:                     Cl0ds8h0vigpimiBLKoksbQ-A8k.cer (raw, json)
Hash identifier:          GUJX9Z3cvkRgvd0RYC4LYC9bLUWOzPYSLRnpK5nEVCE=
Subject key identifier:   0A:5D:1D:B3:C8:74:BE:28:29:8A:68:81:2C:AA:24:B1:B4:3E:03:C9
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856C3F47B353E6326B849A6A59383C9D7F
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/5a/343037-4550-469d-82fd-4f5588947a4a/1/Cl0ds8h0vigpimiBLKoksbQ-A8k.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/5a/343037-4550-469d-82fd-4f5588947a4a/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 07:32:44 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 109.205.57.0/24
                          IP: 2a11:9880::/29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6c:3f:47:b3:53:e6:32:6b:84:9a:6a:59:38:3c:9d:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 07:32:44 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=0a5d1db3c874be28298a68812caa24b1b43e03c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:bc:4e:54:d2:ce:3c:6a:f3:62:55:b1:b6:81:
                    7b:66:d7:c3:28:37:25:46:9d:ba:61:5c:9b:d1:0f:
                    80:18:3f:60:fa:51:23:3f:41:5d:86:8e:a2:6d:8c:
                    22:40:26:f7:ea:6e:f0:e7:24:6d:a5:ba:25:16:0d:
                    9f:96:f7:83:7f:da:19:c1:69:d2:c0:06:93:de:81:
                    67:04:55:ed:70:d0:39:8b:b8:8b:19:87:f9:53:e3:
                    f7:60:fa:c4:4e:86:f3:e3:06:a9:b5:27:a7:91:10:
                    96:2c:9f:76:2a:0e:71:fc:02:47:de:2c:85:b1:d2:
                    ce:4c:fb:c0:13:48:49:16:2c:d8:db:e0:c4:20:01:
                    8d:8a:36:6b:2c:ef:ba:0e:d1:40:25:19:8e:e5:0f:
                    8d:ee:f2:7c:bb:e2:64:2a:f5:de:d6:63:24:5b:f6:
                    34:e5:3f:82:d7:a1:4c:c5:e5:76:dc:d8:12:3c:59:
                    eb:75:30:60:c3:d7:60:1a:9e:06:c4:e1:62:45:54:
                    4c:b3:8c:d4:9e:69:3e:79:d5:ae:5a:73:44:0f:0c:
                    54:59:9e:0d:dc:9d:a7:32:61:dc:13:18:b9:9b:12:
                    ac:df:64:f6:55:b3:be:96:1a:b0:4b:ef:84:7b:d2:
                    0e:3e:7f:ae:a3:ef:57:84:1e:fb:77:c8:ca:42:ee:
                    ff:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:5D:1D:B3:C8:74:BE:28:29:8A:68:81:2C:AA:24:B1:B4:3E:03:C9
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/343037-4550-469d-82fd-4f5588947a4a/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/343037-4550-469d-82fd-4f5588947a4a/1/Cl0ds8h0vigpimiBLKoksbQ-A8k.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  109.205.57.0/24
                IPv6:
                  2a11:9880::/29

    Signature Algorithm: sha256WithRSAEncryption
         a2:79:9d:08:98:2a:5f:5b:e0:d4:3f:94:3e:fb:9a:9b:cf:6b:
         3e:99:77:45:65:a5:1a:10:96:03:eb:d1:0d:d1:88:07:ba:9e:
         cc:f0:9a:3b:a5:92:c4:93:00:23:fa:6a:d7:a9:06:69:d6:c2:
         1c:2b:46:10:99:77:a6:d6:89:f9:76:32:cf:09:a6:92:75:20:
         d6:fb:f0:a2:15:31:92:18:05:c0:44:8c:5e:25:bd:0e:35:4f:
         eb:af:c1:4f:1e:aa:95:26:f5:7d:f0:e6:d4:c2:31:ed:df:9a:
         78:91:bf:73:83:8f:81:6f:34:b6:79:f0:3a:ba:0d:05:1a:e8:
         54:31:dd:ad:98:1f:84:26:ed:c9:1b:f9:c7:d0:65:3a:39:27:
         8b:05:80:52:87:e1:4e:ec:20:f7:9d:31:57:0f:5b:dc:8d:85:
         72:a7:39:a8:70:56:37:e8:7f:5c:44:37:0c:dc:89:22:1e:36:
         b7:2b:42:95:ae:1f:44:64:92:f5:3c:84:ad:f2:6f:47:55:5b:
         24:b1:dc:7a:2c:bd:b5:f0:18:5b:fb:6c:9b:05:ee:f2:43:91:
         14:de:78:18:f8:81:18:81:18:55:bb:f6:4e:2b:5e:b9:03:eb:
         25:0f:1c:0b:40:5d:1f:5b:7c:66:31:08:0e:4c:97:67:fe:ed:
         9e:24:a8:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----