Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/CorUF-VSlhqo98KdwlsalWwsjQg.cer
File:                     CorUF-VSlhqo98KdwlsalWwsjQg.cer (raw, json)
Hash identifier:          CRGXFmhUC4bpu1Azb/pJduPexiVAYQNk8BZIY9BMU8o=
Subject key identifier:   0A:8A:D4:17:E5:52:96:1A:A8:F7:C2:9D:C2:5B:1A:95:6C:2C:8D:08
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856B636A48A6D2D92450A768323174C49F
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/d6/318b6d-68e2-42e1-9f26-94ab57c52e1d/1/CorUF-VSlhqo98KdwlsalWwsjQg.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/d6/318b6d-68e2-42e1-9f26-94ab57c52e1d/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 03:32:35 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 194.31.9.0/24
                          IP: 2a11:dc00::/29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6b:63:6a:48:a6:d2:d9:24:50:a7:68:32:31:74:c4:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 03:32:35 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=0a8ad417e552961aa8f7c29dc25b1a956c2c8d08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:ee:8d:70:ba:69:3f:ae:1f:0b:b5:55:5a:d9:
                    86:72:2e:c6:dc:77:8b:79:8c:b7:4f:a3:11:a2:1c:
                    00:de:0a:3d:03:87:20:b8:43:a0:3b:82:77:ff:97:
                    83:2a:90:04:52:9b:54:a2:36:c8:6e:34:50:ba:4b:
                    8b:0b:fd:ef:e9:1e:a5:01:93:3b:73:d1:e7:b8:93:
                    28:4f:f3:32:ee:e7:0d:32:56:36:2c:4c:14:9e:7c:
                    ee:03:72:3c:d8:17:2b:b2:00:7f:76:ca:b2:87:0d:
                    db:99:d9:36:b5:4d:5f:48:19:14:a1:39:89:13:80:
                    2a:5f:82:34:76:c3:95:13:f9:5c:aa:df:55:e2:0c:
                    a1:f5:a6:50:71:8e:9c:52:cf:7d:8a:a2:10:a0:75:
                    21:25:20:0e:ec:43:3f:ac:39:d6:71:7a:d9:d7:5f:
                    22:47:1c:a1:33:a2:81:82:20:14:53:2c:5d:59:e4:
                    11:51:e9:0f:38:dc:63:ed:48:24:ac:c6:2e:db:0c:
                    14:e1:00:3a:04:2a:64:a3:df:7f:f4:eb:c4:0a:66:
                    ce:61:d9:20:ce:36:2e:15:0d:a8:ed:74:97:5d:2f:
                    98:17:a7:12:18:6e:29:4a:cb:76:41:d7:47:96:c5:
                    da:85:d1:a3:b0:61:8f:90:d1:a7:ea:6b:ab:45:41:
                    26:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:8A:D4:17:E5:52:96:1A:A8:F7:C2:9D:C2:5B:1A:95:6C:2C:8D:08
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/318b6d-68e2-42e1-9f26-94ab57c52e1d/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/318b6d-68e2-42e1-9f26-94ab57c52e1d/1/CorUF-VSlhqo98KdwlsalWwsjQg.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.31.9.0/24
                IPv6:
                  2a11:dc00::/29

    Signature Algorithm: sha256WithRSAEncryption
         9d:bb:db:ed:0e:1c:26:d3:e6:c9:66:8b:d2:a6:2e:c4:85:e9:
         f0:23:21:18:af:bc:50:87:9c:71:7b:77:0d:b6:92:d7:bb:91:
         87:62:d0:41:b8:dd:22:64:7f:6a:6d:e1:83:f9:47:c2:84:74:
         ea:64:31:82:d5:a6:30:92:26:7e:a1:4e:68:ee:10:83:6e:dc:
         cd:ce:36:22:b5:b6:d3:28:af:47:1a:72:df:d1:7f:74:48:3e:
         2e:a5:f7:d9:12:47:b5:93:b4:10:61:f5:bc:21:48:c3:d7:c0:
         a1:a2:64:d7:56:c0:84:db:82:06:88:83:a1:96:1e:32:fa:f2:
         89:bd:8c:ec:37:e5:ac:1b:82:4b:50:cf:90:47:ea:4a:c3:3c:
         2e:bb:ba:58:57:f4:0f:4a:69:0d:b0:b5:f5:8c:16:cc:87:ea:
         74:e3:0c:39:5e:da:ee:5d:e6:e5:05:7c:4e:09:3c:e8:bf:e1:
         00:f9:bd:91:20:36:8e:78:34:cc:be:a8:a3:35:01:b6:37:32:
         36:5b:c7:f3:dd:08:1b:82:1d:88:9e:f3:ea:4e:ca:f1:09:24:
         c8:ae:2d:c3:f5:fc:66:2b:e4:2d:13:da:09:7f:cc:7b:9e:77:
         c8:ed:03:29:2c:c9:d1:cf:3e:c6:81:b4:0f:c6:45:6b:e6:c8:
         82:03:50:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----