Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/DNVWE91UzX0FFvd7htGdi2cBoe4.cer
File:                     DNVWE91UzX0FFvd7htGdi2cBoe4.cer (raw, json)
Hash identifier:          dIdndxu/5PupcOmsE1Djrv3td5gQVGpgtbP1Pzkd388=
Subject key identifier:   0C:D5:56:13:DD:54:CD:7D:05:16:F7:7B:86:D1:9D:8B:67:01:A1:EE
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856E652C3BD9DAF437CE8DEFEB2A154603
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/df/981095-e07b-4415-8ff7-a8e31b93be72/1/DNVWE91UzX0FFvd7htGdi2cBoe4.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/df/981095-e07b-4415-8ff7-a8e31b93be72/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 17:33:22 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 62.204.36.0/24
                          IP: 2a11:9240::/29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6e:65:2c:3b:d9:da:f4:37:ce:8d:ef:eb:2a:15:46:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 17:33:22 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=0cd55613dd54cd7d0516f77b86d19d8b6701a1ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:6c:88:a7:ab:bd:ff:66:7c:e7:2d:6d:f8:15:
                    09:5d:a5:f2:40:57:10:eb:70:4d:42:b1:0f:63:85:
                    7d:88:59:3f:d6:6c:0c:33:32:68:3a:73:17:30:92:
                    49:5e:e0:f7:20:9a:99:eb:1f:61:48:2b:16:7b:34:
                    c9:02:07:27:24:72:39:37:bf:24:21:e4:a2:bb:6c:
                    e9:76:9a:23:af:b9:64:5d:d6:a1:74:4a:1c:f3:aa:
                    b4:e4:38:e5:e4:c7:0a:63:85:41:7d:33:d2:10:90:
                    05:3b:14:15:32:21:73:eb:77:fc:a4:5a:42:fe:3b:
                    c9:da:78:e2:df:4c:ee:dd:fd:82:ea:f5:72:2a:03:
                    da:71:c0:b0:67:9f:17:95:cc:0f:8a:ce:58:df:7f:
                    22:e9:8a:37:20:1d:fa:56:9f:90:75:74:fd:e8:f8:
                    ff:45:21:4c:ee:e6:f3:6b:b2:e0:e1:13:90:b4:80:
                    99:0f:14:61:ed:1e:fc:59:40:23:ed:a1:d4:59:82:
                    1a:33:99:c5:d1:3f:c9:2a:f3:0a:82:38:5d:8e:a6:
                    de:04:e7:5d:f9:96:7d:aa:b0:ec:22:2b:58:d6:77:
                    48:cc:06:92:c8:b1:aa:03:04:94:2d:e3:53:4d:dd:
                    53:d8:6f:18:66:ce:e7:90:60:76:49:00:9d:48:c0:
                    bd:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:D5:56:13:DD:54:CD:7D:05:16:F7:7B:86:D1:9D:8B:67:01:A1:EE
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/981095-e07b-4415-8ff7-a8e31b93be72/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/981095-e07b-4415-8ff7-a8e31b93be72/1/DNVWE91UzX0FFvd7htGdi2cBoe4.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.204.36.0/24
                IPv6:
                  2a11:9240::/29

    Signature Algorithm: sha256WithRSAEncryption
         71:99:fa:b0:f4:62:aa:7d:49:c0:5a:10:13:22:d1:7b:e9:2a:
         be:8d:af:7f:b5:55:e2:ca:29:52:45:fc:58:1b:49:a8:8e:b3:
         a3:c8:50:29:64:c7:48:46:28:35:9b:5c:c2:cb:90:03:28:00:
         f3:b0:71:18:ed:4f:08:f9:1b:96:33:7f:78:51:fd:3a:8b:0e:
         91:9d:4f:04:31:ca:bd:b8:17:0d:d4:9f:90:2d:38:72:f9:7a:
         3d:9c:ed:87:cc:99:10:93:67:b1:2f:93:eb:e4:7e:75:53:3f:
         47:9f:d0:fa:5c:ba:dd:48:7c:87:4f:15:7d:9a:a6:8f:d8:23:
         eb:ad:89:fc:5d:3a:5e:b4:d2:04:e4:28:22:ce:4e:21:84:34:
         d1:7e:d8:73:76:ab:ac:5d:bf:0a:52:8f:c6:94:a8:fa:c2:94:
         33:71:7c:c9:20:27:ca:5a:4d:60:0f:6b:ba:ab:4c:35:89:31:
         85:6b:98:5e:43:8a:ad:ec:44:14:80:8a:c3:b8:8b:6d:c3:84:
         ba:67:b6:e0:94:21:97:ce:58:f4:f3:ca:ab:5d:53:00:6c:6a:
         15:58:6b:0e:c5:45:bb:6f:ec:fb:ac:7a:4a:ca:48:72:c1:24:
         61:c5:4f:c7:c5:31:e0:52:04:5b:d5:ad:8f:32:8c:1b:2f:fa:
         81:6c:eb:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----