Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Cr6v1VZZXohAyo69GbvSrFkbTKg.cer
File:                     Cr6v1VZZXohAyo69GbvSrFkbTKg.cer (raw, json)
Hash identifier:          zX9pmfq8yX6Ovk3kneRt3yvggyd1fFG6tFy2oZJziXU=
Subject key identifier:   0A:BE:AF:D5:56:59:5E:88:40:CA:8E:BD:19:BB:D2:AC:59:1B:4C:A8
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0185E7C14B285B9AE0582F9D417EBF3CFFD2
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/ab/921536-ee46-4e80-a51f-b667ec0d6d0f/1/Cr6v1VZZXohAyo69GbvSrFkbTKg.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/ab/921536-ee46-4e80-a51f-b667ec0d6d0f/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 25 Jan 2023 07:08:02 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    AS: 44646
                          AS: 57567
                          IP: 93.93.80.0/21
                          IP: 103.39.40.0/23
                          IP: 185.40.204.0/22
                          IP: 185.86.44.0/22
                          IP: 2a02:2b0::/32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:e7:c1:4b:28:5b:9a:e0:58:2f:9d:41:7e:bf:3c:ff:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan 25 07:08:02 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=0abeafd556595e8840ca8ebd19bbd2ac591b4ca8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:e9:c5:3b:30:b2:85:3c:ab:04:51:fd:2f:35:
                    45:94:32:9a:9d:96:8d:7c:97:bc:40:06:98:b6:10:
                    04:19:1e:0e:7c:07:92:3a:83:4a:d3:e1:e9:eb:e5:
                    f9:75:87:43:1f:42:1a:7f:53:a2:f2:ce:18:1a:c4:
                    51:9a:2f:56:5e:69:85:38:e1:0f:fb:0c:f5:51:49:
                    56:2c:4a:c2:5d:16:0d:68:fc:d1:f8:05:84:3c:5d:
                    cf:52:9e:0a:0c:b9:e8:22:79:c2:90:d5:87:87:d8:
                    03:41:06:ba:27:2d:d6:04:cb:a4:39:ad:90:9a:a0:
                    0d:93:a1:31:6b:c8:ff:f7:e7:41:5c:cd:7d:7c:41:
                    1b:15:04:42:5a:62:b2:1d:b4:53:ec:ae:bf:b3:90:
                    01:e6:f6:58:17:ad:ac:f8:a0:94:73:1c:b2:5f:90:
                    d2:17:eb:1a:d0:7c:f9:60:ed:3c:6e:ec:2e:66:41:
                    9b:7d:5d:4c:25:f6:bf:b2:ae:33:b7:4e:40:23:45:
                    0a:fe:31:df:59:14:9e:54:b6:af:68:5c:d8:da:26:
                    3c:9c:34:1e:36:de:a0:8e:71:6b:50:9c:ed:95:0a:
                    fe:bb:17:b8:48:ba:21:1b:8c:6b:ec:4a:a9:62:20:
                    17:7a:4f:17:49:28:7b:fc:4b:bd:e0:0c:2a:2c:5b:
                    40:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:BE:AF:D5:56:59:5E:88:40:CA:8E:BD:19:BB:D2:AC:59:1B:4C:A8
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/921536-ee46-4e80-a51f-b667ec0d6d0f/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/921536-ee46-4e80-a51f-b667ec0d6d0f/1/Cr6v1VZZXohAyo69GbvSrFkbTKg.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.93.80.0/21
                  103.39.40.0/23
                  185.40.204.0/22
                  185.86.44.0/22
                IPv6:
                  2a02:2b0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  44646
                  57567

    Signature Algorithm: sha256WithRSAEncryption
         70:97:30:95:65:44:78:14:a9:7c:3e:9a:49:5e:e2:2e:ac:fb:
         b0:cf:b9:12:59:e3:a3:d9:24:37:1d:f4:60:30:8b:45:eb:ba:
         f3:35:82:b1:bd:55:42:54:dd:4a:4b:52:ea:08:20:97:d1:50:
         ac:db:7d:d4:9b:8a:30:a9:9a:f1:63:84:1f:c2:17:32:01:4f:
         36:dc:f6:26:e5:79:5d:c4:2c:45:0a:bc:d7:70:45:52:54:24:
         02:b0:3e:3e:0d:60:96:f0:0d:ce:99:02:3b:4f:75:4b:3f:12:
         07:02:4f:99:e4:67:e8:b5:a5:b5:86:db:eb:0b:59:16:01:be:
         0f:be:ec:31:de:a8:77:6a:29:61:6e:e7:e9:5a:5e:b5:37:55:
         69:ee:cb:dc:89:31:95:c8:1f:36:18:e8:8d:19:c5:54:f8:1f:
         41:f6:af:54:c7:b0:58:4c:9a:f2:e4:27:13:f2:7a:ef:40:f7:
         d0:c6:1e:e3:72:e1:54:d4:65:38:49:80:9c:ee:78:89:fe:6b:
         b4:48:e7:a3:41:43:95:0c:42:ab:b9:b9:2e:49:4b:ac:95:02:
         8e:54:3a:63:ae:a7:92:e6:47:1e:ce:6e:9b:40:30:ce:d3:01:
         83:ac:65:f3:97:a0:2f:94:ca:4c:94:c2:81:63:b1:4b:f7:93:
         5c:79:57:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----