Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Cs8KlUY5yDWCl0vSnBmSJys2g6M.cer
File:                     Cs8KlUY5yDWCl0vSnBmSJys2g6M.cer (raw, json)
Hash identifier:          3Oes7rRmKQIDDkDkZptiYdpn/uuIL2hg2XdBGKAbfiU=
Subject key identifier:   0A:CF:0A:95:46:39:C8:35:82:97:4B:D2:9C:19:92:27:2B:36:83:A3
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018B61CFCE85FE7D966F7C222BFB79C731FD
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/ac/46ca25-7595-4e7f-a4b1-23386749fbdf/1/Cs8KlUY5yDWCl0vSnBmSJys2g6M.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/ac/46ca25-7595-4e7f-a4b1-23386749fbdf/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Tue 24 Oct 2023 13:11:30 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 185.202.110.0/24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:61:cf:ce:85:fe:7d:96:6f:7c:22:2b:fb:79:c7:31:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Oct 24 13:11:30 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=0acf0a954639c83582974bd29c1992272b3683a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:26:d4:87:2e:5d:63:b4:b2:01:f3:76:09:38:
                    4a:ba:94:31:9d:26:4e:7c:75:e6:3b:b2:0d:3e:c7:
                    7f:58:b3:77:38:0b:0c:54:fd:a6:72:40:6e:6c:64:
                    58:b9:7c:bd:73:21:52:42:72:36:5d:dc:87:67:83:
                    a0:6d:90:a2:18:8a:29:c1:d8:02:d4:0c:7a:7e:f3:
                    9e:42:01:ad:53:cf:b0:cb:91:01:0d:b0:ca:7c:9f:
                    bb:23:32:c3:0a:c5:b1:c7:98:86:7a:a9:bd:d0:84:
                    c7:64:44:16:81:e9:1f:32:3a:37:0b:3d:8c:cb:a7:
                    04:16:1c:f4:a6:d9:22:07:62:32:4e:fc:48:3f:14:
                    2a:81:92:84:09:2c:5c:4e:0b:6b:b7:f1:e1:d7:d9:
                    5e:83:0b:8f:e3:6a:eb:0b:c7:ee:f3:e1:26:3f:b6:
                    62:67:88:f4:26:5f:2a:a7:cf:f6:a6:79:3d:13:89:
                    ea:af:34:2d:c2:c3:dd:2a:c8:72:ea:c8:83:da:a8:
                    56:a1:ff:9e:60:a4:06:e5:06:76:68:9a:27:3a:ee:
                    d7:a9:3e:19:02:c1:f2:f4:e9:67:1f:4e:0d:49:c6:
                    15:13:ac:35:22:7f:dc:09:09:4b:8c:a8:9a:17:eb:
                    ba:ea:cd:7b:83:94:e7:1f:71:d9:f8:8e:30:9f:f6:
                    34:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:CF:0A:95:46:39:C8:35:82:97:4B:D2:9C:19:92:27:2B:36:83:A3
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/46ca25-7595-4e7f-a4b1-23386749fbdf/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/46ca25-7595-4e7f-a4b1-23386749fbdf/1/Cs8KlUY5yDWCl0vSnBmSJys2g6M.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.202.110.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a0:81:ab:7c:b3:ed:7d:01:72:77:70:d4:76:6c:8a:39:a1:6a:
         c1:c2:88:42:d5:0a:c8:ab:6f:43:19:42:50:22:4c:d3:e9:9e:
         78:11:2c:50:91:e0:4a:49:92:21:0e:f5:b7:4b:34:40:7e:6d:
         33:58:44:43:7e:70:1e:1a:4c:ee:69:25:48:e5:c1:15:2c:58:
         ab:3c:41:da:f0:aa:67:44:6f:75:26:31:a3:05:00:8b:fd:55:
         50:bc:35:a0:67:9d:be:f1:79:a1:1e:c3:69:ea:fa:64:ac:c3:
         1d:80:6f:5f:a9:9d:c3:8d:63:8c:49:3c:3c:67:8b:a3:d4:66:
         64:37:4e:b5:d5:dc:5b:a4:41:b2:ad:3d:da:3e:88:dc:26:9c:
         96:c7:d2:2f:b3:6e:b9:b1:29:ec:b1:af:b3:ba:01:4c:de:71:
         99:3e:c4:4c:f2:63:c0:99:66:7a:95:3d:14:4f:a9:1d:7c:09:
         42:85:18:03:e5:db:44:e8:31:66:5b:80:e4:5e:b1:4a:55:91:
         59:cb:af:a9:bd:62:5a:8c:63:91:7f:a3:03:1f:1f:5d:a4:f2:
         3c:70:98:b8:50:78:77:a7:bd:9f:44:7b:da:b0:99:7d:ce:11:
         26:04:f4:ed:01:bb:6f:c1:3d:1c:a8:42:b6:32:46:93:ea:b2:
         c6:21:db:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----