Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/EDamPnF6tYzvZqxisgZ0gGls_p4.cer
File:                     EDamPnF6tYzvZqxisgZ0gGls_p4.cer (raw, json)
Hash identifier:          XgN1m+vv26GhLtuvNyxQf8iRUp5J2VyjC/nuj4bree4=
Subject key identifier:   10:36:A6:3E:71:7A:B5:8C:EF:66:AC:62:B2:06:74:80:69:6C:FE:9E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018570F8F9BE4A79646A825BED49DC01F905
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/23/72186e-17a3-46d1-a294-d5a78fc59d12/1/EDamPnF6tYzvZqxisgZ0gGls_p4.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/23/72186e-17a3-46d1-a294-d5a78fc59d12/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 02 Jan 2023 05:34:03 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 195.88.212.0/24
                          IP: 2a10:19c0::/29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:f8:f9:be:4a:79:64:6a:82:5b:ed:49:dc:01:f9:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 05:34:03 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=1036a63e717ab58cef66ac62b2067480696cfe9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:aa:0c:84:33:dc:4f:db:86:d2:90:09:2c:c0:
                    d8:9e:23:37:08:82:ff:50:13:60:a1:93:d8:26:e6:
                    f7:83:30:cd:15:e6:93:d0:a9:47:34:bf:83:d3:46:
                    15:4a:6d:67:8d:e4:31:c3:5d:02:0b:46:2b:2c:a1:
                    3f:f2:3b:20:84:6c:39:2a:7c:98:58:9f:7c:24:60:
                    68:37:7b:b2:83:4d:1b:73:26:29:83:e1:0e:ba:15:
                    1f:33:d9:62:8f:fe:c8:54:85:22:e1:a0:ee:f5:bf:
                    f7:19:a0:54:96:0e:5c:1a:a2:5b:f8:ad:07:fe:86:
                    cd:a3:04:e5:2e:f3:14:d9:4a:27:64:9d:69:d2:bc:
                    8c:15:ed:3d:2a:c8:64:ac:49:4c:55:be:22:70:2a:
                    9b:21:7c:1b:5d:cf:08:3e:cd:02:b8:91:fa:4a:9f:
                    6e:a1:c1:e3:25:53:29:e9:c4:cc:48:6f:e0:e5:46:
                    33:59:e8:75:77:61:9b:6c:cb:61:71:94:58:e8:a2:
                    4d:ba:a3:be:15:d7:92:08:41:0a:10:bf:e1:1f:31:
                    3d:bf:55:e0:c3:b4:23:e0:36:61:3a:64:ba:f9:3f:
                    ec:70:b3:87:86:87:8e:76:19:0e:ce:82:53:9f:aa:
                    6f:61:13:3d:74:dd:2e:fb:7e:e7:69:3c:56:f2:e9:
                    43:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:36:A6:3E:71:7A:B5:8C:EF:66:AC:62:B2:06:74:80:69:6C:FE:9E
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/72186e-17a3-46d1-a294-d5a78fc59d12/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/72186e-17a3-46d1-a294-d5a78fc59d12/1/EDamPnF6tYzvZqxisgZ0gGls_p4.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.88.212.0/24
                IPv6:
                  2a10:19c0::/29

    Signature Algorithm: sha256WithRSAEncryption
         67:bf:0e:1a:eb:81:7d:1e:85:fc:bc:05:81:e9:fb:d5:bd:e9:
         9d:34:c2:89:d1:b9:28:54:09:c6:12:01:ad:a6:14:51:e5:7d:
         d5:8e:72:b7:18:ae:d6:b4:22:34:db:0b:19:72:d9:c2:40:74:
         1a:f3:ac:e5:cb:f5:1b:93:93:d7:12:f0:3d:09:78:43:8b:61:
         a3:0d:19:b6:39:0d:16:ec:71:14:7d:b5:f7:ab:b8:34:1c:c6:
         2a:52:d2:b2:8c:72:ba:df:0c:4d:2c:73:d3:86:68:51:6f:5b:
         d5:fb:17:54:df:9f:54:f1:fa:d5:47:57:df:1d:30:8a:a4:85:
         8f:5a:df:90:13:53:57:e5:5e:1b:11:f2:ec:0b:4d:69:8b:5e:
         58:a2:4f:aa:20:5f:0e:0e:55:55:17:ec:10:c5:73:d6:d0:d2:
         56:86:54:86:25:1d:5c:c9:c3:86:6f:7a:a4:c4:76:70:b0:56:
         ea:94:98:b3:28:57:e5:44:8c:f4:8c:1d:6c:c3:77:35:d8:35:
         74:06:17:3e:d3:e3:00:78:4e:b3:c4:e7:2a:9b:04:7d:f6:c8:
         f4:94:99:23:4d:e9:78:33:4b:83:c1:d2:97:ab:47:89:8e:3e:
         74:34:f5:9a:90:1e:80:56:4b:d3:a4:30:63:ef:6f:7d:65:c1:
         fb:53:a6:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----