Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/EUm9V2Sou4Sf6ixUBprEIxICULo.cer
File:                     EUm9V2Sou4Sf6ixUBprEIxICULo.cer (raw, json)
Hash identifier:          LAILjBHLYpjGHoY03HwJDCSKE/7D4Dk0ZBzNFfwoBcw=
Subject key identifier:   11:49:BD:57:64:A8:BB:84:9F:EA:2C:54:06:9A:C4:23:12:02:50:BA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856ED3AB33D0CFF3776E5D9D993D6D990A
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/87/1ace3c-3a1b-4614-aaf3-f2daf0e42d1c/1/EUm9V2Sou4Sf6ixUBprEIxICULo.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/87/1ace3c-3a1b-4614-aaf3-f2daf0e42d1c/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 19:34:03 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 94.103.191.0/24
                          IP: 2a11:4640::/29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6e:d3:ab:33:d0:cf:f3:77:6e:5d:9d:99:3d:6d:99:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 19:34:03 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=1149bd5764a8bb849fea2c54069ac423120250ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:b0:83:87:1e:87:a2:ad:74:ce:ee:07:97:ac:
                    39:89:e9:24:7f:a6:bf:81:df:0d:e5:f5:92:67:09:
                    1b:c3:8d:ae:f2:d9:df:3a:d6:3e:15:b3:c4:d8:57:
                    9d:10:21:f0:56:df:d3:7c:1a:e6:68:44:1a:14:07:
                    32:c3:c0:9a:4a:4b:00:8b:49:fc:b0:f6:ae:35:de:
                    d2:62:9d:38:82:41:86:c7:7f:a3:99:d4:0b:d0:a4:
                    43:92:79:4c:11:72:39:10:d4:06:ed:b9:29:8a:f2:
                    7d:fe:e5:54:6a:d8:15:18:f7:4f:11:92:23:58:7d:
                    08:09:a6:34:b1:a3:b9:f1:e3:c9:43:34:c3:99:28:
                    69:0c:24:ae:8f:09:7e:f3:93:d4:c4:39:93:3f:70:
                    c0:1d:c6:fb:86:45:68:de:cf:df:ce:ee:88:65:58:
                    5c:49:b7:60:10:d1:df:ea:04:26:20:c1:bb:b7:1c:
                    63:4c:d2:ab:f0:a6:00:68:40:a7:b2:a5:09:15:4e:
                    1d:33:3c:99:a1:66:ea:60:03:6d:7f:64:6f:92:79:
                    61:e6:72:dc:01:1e:e8:af:d1:51:9d:1b:ba:1f:7c:
                    6b:c7:c0:d3:5b:d4:3f:80:4d:89:c9:3d:68:7f:37:
                    79:50:a3:4f:50:4a:ac:34:a9:12:2b:ef:65:aa:c8:
                    8d:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:49:BD:57:64:A8:BB:84:9F:EA:2C:54:06:9A:C4:23:12:02:50:BA
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/1ace3c-3a1b-4614-aaf3-f2daf0e42d1c/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/1ace3c-3a1b-4614-aaf3-f2daf0e42d1c/1/EUm9V2Sou4Sf6ixUBprEIxICULo.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  94.103.191.0/24
                IPv6:
                  2a11:4640::/29

    Signature Algorithm: sha256WithRSAEncryption
         75:86:3d:f8:bd:ce:f1:f0:20:33:c0:a5:e9:ec:3a:25:6c:f5:
         39:4d:58:2f:6e:4d:45:03:10:b6:1e:21:54:68:9f:aa:ae:ce:
         67:41:18:21:a3:96:03:0b:c0:78:ab:40:84:6d:70:56:4f:ac:
         05:88:10:f3:d8:f1:6c:05:07:0a:3a:dc:80:8e:b5:e3:13:b3:
         b5:73:a3:40:e6:59:41:31:c4:80:dc:60:fb:49:00:fc:37:d0:
         ea:d4:43:a5:e0:35:dd:d0:6f:78:0a:c3:6b:b7:6e:a2:6a:44:
         49:68:10:d6:19:f7:7b:1f:87:f7:e5:26:fe:9e:83:c0:b3:ce:
         6c:34:80:94:ec:b9:29:4c:9a:37:8b:bc:24:fc:47:05:eb:34:
         76:89:9f:36:d0:0c:d5:21:a1:fa:ca:1e:b4:fd:91:3e:ae:20:
         9b:ad:c1:b0:b1:58:3f:8b:8c:f6:dd:52:3f:06:15:2b:c1:f0:
         eb:e1:b2:51:e9:e6:2b:e0:f9:15:59:c5:23:51:1d:6e:48:34:
         d3:8c:2e:94:27:f4:d5:42:c6:41:09:34:37:7e:68:43:15:7e:
         2c:46:45:29:91:22:d1:f6:46:cc:f0:22:a1:cf:5a:33:bd:8a:
         87:07:e9:38:ed:c0:72:16:3b:70:ee:2e:dd:3c:02:8f:6d:09:
         14:d2:22:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----