Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/DsC73hPDZYK3lIHNsYgv8CYLD-0.cer
File:                     DsC73hPDZYK3lIHNsYgv8CYLD-0.cer (raw, json)
Hash identifier:          2u/fLD3eEkTz3kjGm8mEUWSQAQPLGLhRPT5EaeKK9sk=
Subject key identifier:   0E:C0:BB:DE:13:C3:65:82:B7:94:81:CD:B1:88:2F:F0:26:0B:0F:ED
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856F40CCED3E361A36356CB41A5F025240
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/71/4378ac-4905-4d7c-b8de-ed1496df69a8/1/DsC73hPDZYK3lIHNsYgv8CYLD-0.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/71/4378ac-4905-4d7c-b8de-ed1496df69a8/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 21:33:15 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 185.246.64.0/22

Validation:               Failed, certificate revoked on Thu 28 Dec 2023 14:35:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:40:cc:ed:3e:36:1a:36:35:6c:b4:1a:5f:02:52:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 21:33:15 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=0ec0bbde13c36582b79481cdb1882ff0260b0fed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:3a:b6:02:9e:d0:33:e8:e1:33:5a:7c:54:8b:
                    46:35:66:5d:a6:21:9f:0d:1d:7f:06:77:df:68:4b:
                    64:f2:15:5e:60:3a:be:b0:68:b1:70:78:9d:db:f1:
                    ca:b8:83:b2:7e:e4:e7:b1:25:9d:05:89:c0:9c:7d:
                    96:b9:93:44:10:5f:3e:9a:f1:0a:c4:e8:39:f9:26:
                    e2:e3:a4:17:ed:ef:f8:06:19:94:ff:bc:91:52:97:
                    c2:29:22:0c:ee:84:e7:d1:2e:71:4a:6c:a6:47:e3:
                    40:34:64:5d:66:cc:53:30:c6:a8:3e:f1:d6:74:69:
                    9f:cd:ad:85:fc:83:c3:f9:1b:02:8a:89:ed:e1:b8:
                    b3:64:3b:4e:7b:e3:2f:da:1b:3e:c3:3a:74:be:ef:
                    ea:7c:e2:c4:0f:dc:63:1d:b5:6d:d3:7a:3b:72:b0:
                    92:30:35:7d:3c:e9:43:0d:30:d6:75:a1:4a:ed:ba:
                    05:95:bb:54:e9:ea:a3:d0:e3:96:96:9e:7d:b2:b5:
                    de:40:a2:cf:d7:e3:d2:dc:7c:cc:95:04:d2:fc:15:
                    2b:1b:9a:87:ed:b0:90:53:14:c1:6b:0b:9d:0e:90:
                    55:69:b2:7e:18:24:91:12:ea:c1:4d:96:1c:55:29:
                    af:16:33:52:ff:7a:42:45:86:b8:be:9c:95:01:70:
                    3d:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:C0:BB:DE:13:C3:65:82:B7:94:81:CD:B1:88:2F:F0:26:0B:0F:ED
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/4378ac-4905-4d7c-b8de-ed1496df69a8/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/4378ac-4905-4d7c-b8de-ed1496df69a8/1/DsC73hPDZYK3lIHNsYgv8CYLD-0.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.246.64.0/22

    Signature Algorithm: sha256WithRSAEncryption
         74:29:a4:be:01:e6:4c:e6:5e:b3:1b:64:ce:6d:48:e2:2a:1e:
         da:2a:49:8b:fb:7b:a9:21:4f:10:1e:24:cb:b5:ac:c4:81:4a:
         42:80:2a:9a:6e:d4:65:5f:34:93:eb:ee:9c:dc:3c:4b:f1:b6:
         6d:00:bb:87:11:ee:7e:c2:20:b9:1c:05:3c:89:66:34:c5:1a:
         ac:1e:e8:ea:df:93:8e:fc:e9:6c:91:6b:c4:df:b2:08:e0:31:
         81:35:36:84:10:21:2c:65:21:33:dc:35:c5:e5:36:22:e9:51:
         84:57:19:38:2f:50:7e:68:f0:8f:e4:d8:0e:d4:8e:c9:12:8e:
         8d:ed:67:9b:c4:99:91:88:42:ee:93:d9:3f:b0:97:51:69:5e:
         19:05:85:31:65:64:d1:40:50:e4:ba:f6:f1:a0:88:1f:88:cc:
         a0:5a:d8:cb:69:49:ef:d8:9c:14:25:70:71:af:68:37:1c:56:
         de:ee:e3:2e:10:ba:b6:cb:b8:ed:81:a0:cd:a9:3f:dc:d0:59:
         98:f5:82:45:bd:5a:37:c2:55:bf:d5:0e:94:e3:50:d8:11:2d:
         c6:05:96:ba:de:bc:c3:b6:ee:e2:3a:78:3e:64:25:4b:d1:cc:
         21:04:c0:d8:53:02:3f:47:d8:ef:cc:5a:44:a2:20:98:e4:4b:
         5d:b4:95:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----