Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/DVwdcS0FViSRpKJ4qEuc2jVTlDI.cer
File:                     DVwdcS0FViSRpKJ4qEuc2jVTlDI.cer (raw, json)
Hash identifier:          aesqbzeqRmLX4LVHL9AWJj+pEWW2reEASB33c8IjorM=
Subject key identifier:   0D:5C:1D:71:2D:05:56:24:91:A4:A2:78:A8:4B:9C:DA:35:53:94:32
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856DF7E64917DF62E0A223204AAD310A06
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/73/36756a-16b1-47cf-bb16-83601ed836bf/1/DVwdcS0FViSRpKJ4qEuc2jVTlDI.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/73/36756a-16b1-47cf-bb16-83601ed836bf/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 15:34:01 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 178.212.139.0/24
                          IP: 2a12:3280::/32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6d:f7:e6:49:17:df:62:e0:a2:23:20:4a:ad:31:0a:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 15:34:01 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=0d5c1d712d05562491a4a278a84b9cda35539432
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:a2:7f:69:86:39:77:0d:84:83:1f:56:5c:34:
                    75:74:d7:df:02:47:ea:46:d5:79:d1:4a:53:f4:d4:
                    31:64:fd:4d:52:d6:43:a6:73:41:2f:26:b1:fc:56:
                    c5:d4:21:9d:ba:bf:96:01:3f:49:d8:bf:bd:79:be:
                    55:f8:21:5f:e6:85:db:15:97:c9:44:3e:cb:ca:23:
                    68:4c:1a:9d:c5:80:15:9f:5e:56:32:c8:2f:2a:d9:
                    d7:72:30:64:ed:23:83:0a:ec:5f:33:6a:a1:3a:8a:
                    81:a6:94:84:29:52:1c:cb:ec:df:1f:44:ae:20:78:
                    0b:4a:b6:03:a0:97:c6:fa:60:41:74:72:7a:54:a3:
                    ae:87:51:f3:7a:ec:6e:16:f3:1d:f1:41:44:43:06:
                    ce:65:e4:62:4f:13:5c:32:20:e0:3f:a9:2c:54:6f:
                    33:43:8c:29:a4:e4:d1:7a:5d:2e:35:45:fa:1b:82:
                    5a:a1:9e:b2:d6:b4:51:b8:d6:20:8a:65:96:e9:56:
                    96:97:a5:cb:44:79:c4:28:17:09:30:ed:e2:0a:18:
                    ef:d5:9d:a7:ec:18:37:75:af:fc:84:63:66:88:4e:
                    6a:b5:f4:4c:c0:98:18:ce:6d:f5:79:33:da:ae:b8:
                    ae:d6:e7:20:e0:89:0e:f1:ff:a8:51:88:86:00:7a:
                    2c:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:5C:1D:71:2D:05:56:24:91:A4:A2:78:A8:4B:9C:DA:35:53:94:32
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/36756a-16b1-47cf-bb16-83601ed836bf/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/36756a-16b1-47cf-bb16-83601ed836bf/1/DVwdcS0FViSRpKJ4qEuc2jVTlDI.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  178.212.139.0/24
                IPv6:
                  2a12:3280::/32

    Signature Algorithm: sha256WithRSAEncryption
         20:f7:31:41:ab:96:a2:e7:ae:ac:0c:e4:5b:bf:1b:ae:e9:dd:
         5f:40:7c:36:16:05:e4:7d:14:81:7b:ab:03:8d:5e:7d:e5:c3:
         05:ce:7d:95:8d:ea:e8:39:ad:33:c4:55:5a:52:c5:3a:79:84:
         b6:9b:f4:c1:d7:65:93:dc:ea:b0:b1:36:32:36:41:3d:35:d4:
         2e:31:b7:1d:46:21:b6:2a:b2:a9:fa:6b:37:66:60:56:79:13:
         c2:2d:2d:8b:2a:a8:8b:4f:2a:52:03:37:ba:80:8d:6f:3d:bf:
         5d:9d:11:2b:f7:3d:91:3a:67:74:0f:e6:10:af:07:fa:c1:13:
         b6:14:82:28:72:03:38:5d:f6:84:49:39:f6:08:fd:49:55:d9:
         0b:aa:95:92:66:e3:a6:ea:5b:fd:1d:da:ba:23:9c:80:8d:75:
         0a:78:ce:de:22:0e:c4:cb:ce:db:b3:3c:80:35:46:56:f5:05:
         da:e1:16:f9:dd:94:91:af:1a:16:0c:61:05:cd:3a:c4:8f:4a:
         93:c6:25:f5:44:d6:b0:51:ed:7c:99:9f:b6:84:a8:f7:12:cd:
         1a:88:cd:80:12:34:43:9d:32:1c:76:01:51:af:a7:2b:80:51:
         bc:d5:ab:b2:1b:7b:a0:b8:34:75:80:2c:15:47:ec:af:73:b5:
         94:e5:ad:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----