Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Ds2ZqhcBdjpaHtm7430swJMpybo.cer
File:                     Ds2ZqhcBdjpaHtm7430swJMpybo.cer (raw, json)
Hash identifier:          iXLCD5LL+4iCzb2uf7L2cqKH8YFTy2VLeAwjWp7vlSI=
Subject key identifier:   0E:CD:99:AA:17:01:76:3A:5A:1E:D9:BB:E3:7D:2C:C0:93:29:C9:BA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0185E436E8A8AED3C1AE9989E4A771CEFCD4
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/83/e1bd2f-6197-4465-a368-a7dea5727c2c/1/Ds2ZqhcBdjpaHtm7430swJMpybo.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/83/e1bd2f-6197-4465-a368-a7dea5727c2c/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Tue 24 Jan 2023 14:38:01 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 89.248.71.0/24
                          IP: 2a13:e400::/29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:e4:36:e8:a8:ae:d3:c1:ae:99:89:e4:a7:71:ce:fc:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan 24 14:38:01 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=0ecd99aa1701763a5a1ed9bbe37d2cc09329c9ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:42:72:c3:01:b0:88:e2:6b:8d:e1:14:2b:e2:
                    4e:79:e2:f9:44:3a:4b:c7:43:1e:d3:1b:ea:3a:df:
                    5d:61:8c:8c:19:4f:d4:77:66:bc:e6:55:53:ea:a2:
                    a5:5e:6d:69:9f:3c:9b:ae:45:ec:62:37:a6:4a:dd:
                    6e:90:2c:e9:6c:8e:3f:19:b1:69:a9:aa:c7:90:19:
                    a6:f1:70:ff:a4:05:00:b7:b7:69:79:d1:f6:b8:a6:
                    27:51:aa:8b:6f:0f:e1:f0:41:72:bf:54:b9:79:a4:
                    74:a4:e3:7b:88:64:75:b2:de:6d:b0:a6:f7:9d:87:
                    70:4a:6b:77:8f:cd:99:5c:33:b8:af:8a:8c:8e:96:
                    30:78:59:8f:13:d1:57:6d:e7:74:49:98:78:3e:a6:
                    b8:1c:d9:1c:11:6f:3a:9d:16:da:5b:1f:0a:32:fc:
                    5c:bb:76:42:11:66:36:05:27:2a:49:82:cc:dc:8b:
                    e9:e8:e9:1a:68:b4:bd:d5:d5:cd:a8:97:66:9d:80:
                    06:dc:27:27:69:76:19:84:ac:01:5e:0a:9b:ec:a6:
                    09:2b:ff:25:44:a5:9a:c1:7d:91:22:aa:f7:f4:c6:
                    57:8f:9c:a6:c2:6f:52:47:b9:30:4c:3e:b1:25:26:
                    9d:d3:5f:8b:89:53:f1:c5:c4:4c:62:9e:f0:1c:a0:
                    2d:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:CD:99:AA:17:01:76:3A:5A:1E:D9:BB:E3:7D:2C:C0:93:29:C9:BA
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/e1bd2f-6197-4465-a368-a7dea5727c2c/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/e1bd2f-6197-4465-a368-a7dea5727c2c/1/Ds2ZqhcBdjpaHtm7430swJMpybo.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.248.71.0/24
                IPv6:
                  2a13:e400::/29

    Signature Algorithm: sha256WithRSAEncryption
         77:80:f8:fd:6d:5e:a2:04:9b:24:17:cf:cb:d0:cf:f0:14:75:
         4c:ed:eb:05:48:29:50:3f:a2:a3:7a:14:8f:7b:88:30:75:f2:
         6b:d1:f4:4c:2a:45:72:07:dc:a0:61:36:6a:32:65:4d:89:c0:
         0b:61:c0:db:b1:0b:a1:3f:b3:5d:68:4e:0e:64:59:82:75:91:
         a9:c2:94:53:bf:58:f5:46:31:59:48:c7:1c:fa:cd:f5:5a:e8:
         0c:a6:07:0a:0e:f3:6e:38:a5:6b:fe:7f:8d:dd:28:02:fb:e5:
         5b:58:a2:23:ee:01:09:c3:44:4a:5c:b2:f4:60:e7:4d:05:8f:
         05:cf:da:a0:17:50:1a:2e:3d:03:c1:c9:ef:7c:81:f0:d0:51:
         e3:31:56:a8:91:cc:65:96:5c:fb:9e:ea:ae:0c:e9:29:16:88:
         18:bd:7d:93:57:b7:7e:0f:e5:d4:13:43:66:72:88:6b:03:d4:
         c1:84:3b:c7:b7:6f:89:b9:4d:e9:99:f8:9d:a1:6a:d1:d5:10:
         a1:b8:83:82:9e:f3:7c:3d:51:84:48:e7:97:ea:59:a1:79:21:
         f6:ac:e5:82:72:fe:8d:51:33:f0:b3:79:ff:59:7f:34:8e:b3:
         41:60:19:7f:ef:25:3a:4d:93:c9:74:84:39:57:8d:ea:64:85:
         20:ce:a2:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----