Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/EFAEm12GDv-TZLP-TDPTJb3ruiE.cer
File:                     EFAEm12GDv-TZLP-TDPTJb3ruiE.cer (raw, json)
Hash identifier:          FsVJSV4ALrE3+yxRFquXnSdypVmQMmdlVS1cMEbYscQ=
Subject key identifier:   10:50:04:9B:5D:86:0E:FF:93:64:B3:FE:4C:33:D3:25:BD:EB:BA:21
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856CAD52467241589AC4821A7A221C2C96
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/46/40cc36-e1f9-4d3c-81d8-96cac7e7f1f6/1/EFAEm12GDv-TZLP-TDPTJb3ruiE.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/46/40cc36-e1f9-4d3c-81d8-96cac7e7f1f6/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 09:32:56 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 146.19.129.0/24
                          IP: 2a12:a500::/29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6c:ad:52:46:72:41:58:9a:c4:82:1a:7a:22:1c:2c:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 09:32:56 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=1050049b5d860eff9364b3fe4c33d325bdebba21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:5d:aa:2b:48:c3:c3:eb:94:8b:52:9c:9a:43:
                    f2:b1:f9:f1:d3:61:5c:56:d6:6f:75:77:7f:fa:67:
                    60:49:f9:08:94:38:52:e1:d8:04:4d:ba:b7:ee:8f:
                    59:ee:be:aa:af:cc:e3:1c:2e:50:41:11:ec:d2:dc:
                    8f:c7:81:78:5a:0b:98:c2:eb:f6:27:1c:ca:da:aa:
                    ea:38:46:d6:6f:e0:06:e8:21:54:7b:80:09:3d:f2:
                    f9:e0:bf:a3:eb:0d:90:24:f0:d7:3b:76:35:48:55:
                    bb:e1:a6:59:34:96:9c:e2:c1:af:8f:e3:1e:40:e5:
                    d5:ef:56:ac:82:bd:db:03:c0:c6:10:73:a9:44:21:
                    d1:ae:62:ff:85:1b:4a:34:51:c7:35:77:d2:14:aa:
                    51:d2:b2:5f:c4:5a:f4:03:18:00:de:73:6e:b8:1a:
                    99:9d:d9:27:1f:61:4c:f1:62:8a:a5:25:a2:55:5f:
                    a4:66:fc:93:6e:32:41:32:5f:8f:7b:15:3b:46:2d:
                    78:a6:88:bf:d2:7c:ec:8f:c0:00:ce:9e:9d:7b:b9:
                    8d:f2:72:06:57:ca:6f:0e:06:7b:79:ce:6c:9c:6a:
                    19:a7:31:dd:6b:bd:bd:21:d1:46:d3:82:97:a5:d6:
                    2d:23:8b:8a:18:df:89:0f:a6:c1:22:d2:fc:af:19:
                    00:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:50:04:9B:5D:86:0E:FF:93:64:B3:FE:4C:33:D3:25:BD:EB:BA:21
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/40cc36-e1f9-4d3c-81d8-96cac7e7f1f6/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/40cc36-e1f9-4d3c-81d8-96cac7e7f1f6/1/EFAEm12GDv-TZLP-TDPTJb3ruiE.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.19.129.0/24
                IPv6:
                  2a12:a500::/29

    Signature Algorithm: sha256WithRSAEncryption
         91:42:bf:d4:71:35:88:37:d4:1b:17:6c:3f:2a:28:1d:b4:24:
         8a:57:94:90:88:57:07:0a:73:b8:2a:cb:c3:63:13:53:eb:6e:
         82:35:d7:53:df:c1:b0:f4:cd:3b:d7:f5:33:85:64:e6:a0:4b:
         ea:d1:93:49:01:c6:11:54:ee:85:77:2e:9a:03:10:d8:4a:22:
         3e:f4:8a:9f:f1:68:da:53:79:91:9d:94:2f:47:fc:1f:81:36:
         2a:d4:97:1e:f2:2f:8d:71:61:db:68:f5:be:0a:d4:d6:ba:6e:
         e5:43:25:af:af:06:87:98:09:c3:bf:3a:6a:e8:d6:1b:80:9d:
         3b:b2:66:60:77:03:8d:80:3c:58:eb:6e:1a:64:94:a8:8f:d1:
         6a:bb:57:4b:61:a5:c7:46:59:c1:9a:0b:aa:b5:8d:4d:1f:fe:
         7c:46:cc:13:41:42:52:f0:84:fe:15:71:bc:da:43:12:31:c6:
         62:b8:b5:af:10:62:18:a6:da:e8:01:22:d5:e9:3f:f8:3e:fa:
         5b:63:15:77:dd:e8:bc:2d:8f:7e:2d:ce:73:ba:f7:12:5e:df:
         35:93:5f:0c:e9:ad:df:7e:f4:3d:1b:e0:68:40:9f:19:b5:88:
         ef:26:64:e5:02:27:c8:24:25:6b:5d:b7:f8:de:26:76:74:17:
         a3:d9:c6:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----