Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/E19DjE_M-xjg4u0_yN2e6fNHybk.cer
File:                     E19DjE_M-xjg4u0_yN2e6fNHybk.cer (raw, json)
Hash identifier:          KnuT0XDXA42DgSX03XCARFWZohF8Mv680ku2WI7dPh8=
Subject key identifier:   13:5F:43:8C:4F:CC:FB:18:E0:E2:ED:3F:C8:DD:9E:E9:F3:47:C9:B9
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01857168D213B507EE63CF63DAB4E7A304E5
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/d5/467a5f-fadb-4d5e-82f1-45d42d4be187/1/E19DjE_M-xjg4u0_yN2e6fNHybk.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/d5/467a5f-fadb-4d5e-82f1-45d42d4be187/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 02 Jan 2023 07:36:13 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 146.19.76.0/24
                          IP: 2a12:6100::/29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:71:68:d2:13:b5:07:ee:63:cf:63:da:b4:e7:a3:04:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 07:36:13 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=135f438c4fccfb18e0e2ed3fc8dd9ee9f347c9b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:f8:f6:b7:c9:c6:81:73:5a:61:53:4d:73:e9:
                    21:21:b0:3c:6e:b9:11:91:0b:0a:5a:47:79:3f:7c:
                    0a:d9:5d:62:69:a9:fd:f5:a2:ba:a2:e5:8c:53:d8:
                    81:29:f4:d9:dd:ac:99:46:50:a8:c1:59:b1:06:b9:
                    93:1a:d1:12:2e:8d:5c:23:16:65:e5:57:62:3e:e7:
                    0c:9b:36:3b:d2:d8:de:4e:82:7d:70:ee:bd:05:2c:
                    62:db:dc:c6:bb:3a:ec:21:e1:38:51:a6:62:c4:8d:
                    f4:f6:a5:45:3a:7e:f3:f9:c7:be:88:c1:b5:71:d1:
                    cc:52:70:c7:dd:c9:5f:27:ba:49:db:3a:8a:a8:97:
                    66:d8:f3:3b:cc:06:49:20:f9:66:c0:e0:54:41:10:
                    81:68:6d:ca:aa:99:7e:d8:31:c9:8a:d2:08:f6:62:
                    f4:b1:aa:0b:6a:47:fe:6a:33:28:65:2e:0a:b0:b0:
                    3f:60:24:76:cf:fd:2c:c7:62:fb:ee:8c:a6:0b:71:
                    e0:ea:5a:38:2e:8b:8d:03:df:a4:87:6b:35:1a:a2:
                    52:ca:28:f8:a2:f6:46:ca:00:5c:02:a1:c9:8c:16:
                    7c:0f:73:84:50:4d:c9:06:c9:2d:25:88:5c:95:4b:
                    85:bd:d3:b9:a0:ef:02:46:3e:de:95:f0:b2:a4:3a:
                    4a:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:5F:43:8C:4F:CC:FB:18:E0:E2:ED:3F:C8:DD:9E:E9:F3:47:C9:B9
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/467a5f-fadb-4d5e-82f1-45d42d4be187/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/467a5f-fadb-4d5e-82f1-45d42d4be187/1/E19DjE_M-xjg4u0_yN2e6fNHybk.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.19.76.0/24
                IPv6:
                  2a12:6100::/29

    Signature Algorithm: sha256WithRSAEncryption
         9c:08:c5:10:fe:4c:22:27:aa:67:44:42:fe:37:96:fc:0f:96:
         f8:45:50:17:2c:c5:97:3a:68:7c:a0:1f:e5:d9:54:38:17:80:
         8c:ed:9e:bd:dc:92:43:f2:8c:35:40:17:0a:7d:5e:ce:c8:3e:
         5a:5d:47:04:f9:00:f9:5b:9a:fb:b5:be:c1:22:1e:03:a5:e4:
         c1:51:04:b2:55:58:ac:b1:94:26:b7:19:31:17:86:3f:df:dd:
         e2:62:47:d4:45:ef:6d:be:ce:b3:2e:93:42:a1:30:f7:03:aa:
         44:85:65:40:7b:cd:c0:bb:f5:4b:9f:0b:a5:a5:94:e5:6d:99:
         ef:d7:19:3e:29:64:3e:42:d2:ad:74:5d:16:8a:ab:f8:fa:72:
         ce:5f:26:1e:54:1a:7b:be:d6:cf:cc:ac:43:a6:d7:7e:3b:1c:
         50:27:6a:78:eb:56:a9:2c:44:1c:3b:dd:21:e8:ea:17:f3:98:
         a5:1f:45:61:05:eb:28:96:f6:90:77:51:32:8a:6a:f5:7a:e2:
         18:26:95:ae:17:e7:88:2b:8d:cb:c4:24:7c:23:db:07:a7:c3:
         3b:11:d1:d8:22:d1:11:75:e5:25:40:b8:d0:1c:92:30:75:25:
         97:0d:c8:fe:ea:55:ee:60:86:75:19:41:97:44:22:98:75:da:
         c4:b1:cf:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----