Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/DL7Dhs6cwE5_t_l1Sczj1sBejkU.cer
File:                     DL7Dhs6cwE5_t_l1Sczj1sBejkU.cer (raw, json)
Hash identifier:          0Bpn2Q73T6GR7kHZPtLW4TXM0Xzn+2Nj++9HAWnJ4yE=
Subject key identifier:   0C:BE:C3:86:CE:9C:C0:4E:7F:B7:F9:75:49:CC:E3:D6:C0:5E:8E:45
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856EFAA04EE90FA6823F15BB7C4728970F
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/22/7e89f5-3f07-4ce1-8c4f-9701e00e3f03/1/DL7Dhs6cwE5_t_l1Sczj1sBejkU.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/22/7e89f5-3f07-4ce1-8c4f-9701e00e3f03/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 20:16:36 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 5.172.181.0/24
                          IP: 2a11:4f00::/29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6e:fa:a0:4e:e9:0f:a6:82:3f:15:bb:7c:47:28:97:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 20:16:36 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=0cbec386ce9cc04e7fb7f97549cce3d6c05e8e45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:8d:4c:f9:10:f4:aa:f7:9e:b0:68:64:45:0b:
                    2d:93:f1:aa:f9:82:15:d4:f3:09:30:32:3b:fc:f7:
                    6e:df:02:25:fe:d9:2f:c4:62:a8:c6:32:ab:6e:9c:
                    3c:28:45:d0:41:83:7c:d1:b3:50:64:77:f2:fb:0e:
                    d1:64:4c:cc:a0:35:42:48:82:af:37:d5:2c:c7:72:
                    92:68:b9:b9:24:6f:9b:0d:ba:06:74:2e:e0:51:35:
                    90:ef:cc:15:38:03:aa:68:96:b1:85:c8:37:43:05:
                    d0:19:4e:d7:7d:f1:7b:fc:43:f6:54:81:a6:ab:cf:
                    15:80:33:08:13:8b:eb:3f:97:09:63:ea:8f:84:d2:
                    2b:3d:16:05:06:0c:5f:f0:b6:a7:8b:40:0c:d7:d1:
                    d2:f0:5d:0d:90:7b:bc:c9:39:a8:af:e4:0a:65:04:
                    fd:92:3f:60:bb:ec:8a:cb:d0:5b:89:f4:d4:ca:f4:
                    3e:b8:4c:e4:e3:d8:7a:dc:19:f7:ec:d1:40:ae:82:
                    26:63:24:ff:78:7d:41:14:20:71:48:54:d8:85:19:
                    ea:cd:11:01:12:41:80:6f:ee:c0:d5:3d:0f:4d:02:
                    43:35:36:ec:d4:8b:41:5d:10:c2:89:75:d9:0e:46:
                    36:fd:b2:0c:b3:92:aa:d8:ac:94:01:e8:00:ab:35:
                    d0:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:BE:C3:86:CE:9C:C0:4E:7F:B7:F9:75:49:CC:E3:D6:C0:5E:8E:45
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7e89f5-3f07-4ce1-8c4f-9701e00e3f03/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7e89f5-3f07-4ce1-8c4f-9701e00e3f03/1/DL7Dhs6cwE5_t_l1Sczj1sBejkU.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.172.181.0/24
                IPv6:
                  2a11:4f00::/29

    Signature Algorithm: sha256WithRSAEncryption
         14:ee:35:92:8c:be:45:b3:01:23:09:1a:31:1f:b5:a1:26:de:
         bc:04:cb:6a:b4:de:a4:b9:f0:3c:ac:9f:71:c4:7d:b6:b8:99:
         ed:16:4f:4e:d7:36:71:e5:cf:9e:14:c3:22:8a:a1:be:a9:e0:
         73:34:e1:6d:cf:5b:a7:60:3f:fa:47:6f:9a:4b:f9:b2:03:e8:
         2d:28:5a:11:a1:34:39:0b:5a:1d:26:dc:e1:1e:39:d9:0e:6f:
         4d:ae:b4:c2:62:2e:fc:a4:de:6e:a2:4e:e7:33:17:08:46:53:
         ef:9c:b5:25:e0:8a:09:d2:38:87:57:3b:76:9b:1b:bf:3c:ce:
         9c:a4:b8:6b:42:38:37:96:fd:73:de:1e:fc:a4:c3:98:8e:3e:
         64:06:ae:f2:92:ed:28:a9:71:a8:a0:88:bf:fd:21:78:1f:f6:
         84:c6:d2:f9:45:97:b0:c3:b9:eb:f2:89:b5:d6:38:66:27:28:
         76:2b:06:23:69:0e:0d:f3:36:bc:bc:5c:df:75:cc:6e:d6:ad:
         bf:ac:67:95:ae:96:4f:81:c1:96:04:32:07:49:4d:fb:10:96:
         06:67:e0:6c:ae:99:58:96:9d:b3:6d:75:cf:f3:63:c2:67:78:
         89:83:25:df:1a:28:02:a7:d6:c0:d9:6b:61:c1:e3:21:3f:c6:
         26:10:e2:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----