Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/FCs7hgfEFNhpNM4J4Rb9vB0ffyg.cer
File:                     FCs7hgfEFNhpNM4J4Rb9vB0ffyg.cer (raw, json)
Hash identifier:          eb2dqRk3sxlcC971E9y8mMfUwVsrKQq/aDHQAacdZrU=
Subject key identifier:   14:2B:3B:86:07:C4:14:D8:69:34:CE:09:E1:16:FD:BC:1D:1F:7F:28
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018571D6F60A3CA2A2DA59E172D9F38F62A4
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/52/8179a7-b735-47f7-a8ba-6922b49d0747/1/FCs7hgfEFNhpNM4J4Rb9vB0ffyg.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/52/8179a7-b735-47f7-a8ba-6922b49d0747/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 02 Jan 2023 09:36:31 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 193.141.92.0/24
                          IP: 2a12:8700::/29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:71:d6:f6:0a:3c:a2:a2:da:59:e1:72:d9:f3:8f:62:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 09:36:31 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=142b3b8607c414d86934ce09e116fdbc1d1f7f28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:8a:ed:82:90:9c:f2:46:f0:bd:fb:92:c3:f4:
                    c9:63:43:eb:e6:87:f0:8c:93:5d:f2:74:3b:e4:90:
                    a6:98:8e:86:9f:1e:e8:60:3d:14:61:a7:4a:ed:a8:
                    dd:e5:ef:7c:3d:1e:20:1d:a9:b2:75:54:b0:97:0a:
                    d5:54:4d:18:bd:18:31:0b:14:32:5a:cc:ae:7f:dd:
                    0c:78:04:3a:d7:bd:63:66:df:43:d0:90:fa:88:d7:
                    29:82:34:29:bf:1d:45:ec:2b:e1:89:a1:bf:5c:7b:
                    ad:3f:90:95:f6:d5:75:1d:3c:bb:3e:74:b4:db:fd:
                    d4:a7:ac:01:c3:98:22:9c:3c:5b:b7:a5:96:8f:5f:
                    81:21:f1:95:29:62:4d:da:05:78:1b:37:6a:ff:38:
                    80:7b:56:8d:0e:3a:25:68:bf:e1:c3:53:7d:a8:6e:
                    f8:35:d6:2c:d4:e4:f2:5e:1d:01:1f:17:61:e2:3e:
                    15:0e:23:64:95:28:c1:e3:d1:36:03:2e:0f:8a:ad:
                    31:33:2c:1f:cc:53:00:cd:e8:73:f3:94:bb:ae:b1:
                    db:ae:86:89:93:5c:29:33:48:db:3f:e6:84:0b:20:
                    6f:af:76:e2:ac:53:25:39:d2:d2:5c:36:a8:42:8d:
                    6e:31:de:06:46:b6:24:6a:20:e8:8d:ad:aa:b1:a3:
                    25:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:2B:3B:86:07:C4:14:D8:69:34:CE:09:E1:16:FD:BC:1D:1F:7F:28
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/8179a7-b735-47f7-a8ba-6922b49d0747/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/8179a7-b735-47f7-a8ba-6922b49d0747/1/FCs7hgfEFNhpNM4J4Rb9vB0ffyg.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.141.92.0/24
                IPv6:
                  2a12:8700::/29

    Signature Algorithm: sha256WithRSAEncryption
         5a:70:c0:a2:4b:f9:95:dd:11:ee:49:b1:68:c6:71:73:de:53:
         3e:a9:7e:59:75:e7:60:0d:7b:66:25:06:b9:a1:bb:ef:7c:3a:
         d9:66:06:23:76:d6:9b:db:f7:77:3e:92:68:17:ca:4f:d7:35:
         c6:25:96:89:3e:d8:27:9c:39:24:f5:dc:03:c5:ea:8a:68:7f:
         43:be:83:ac:17:d6:a6:b8:05:26:b3:d7:2b:d5:21:32:9b:ff:
         6e:39:2e:2a:90:85:49:84:01:48:d3:02:b9:19:2f:0f:83:b5:
         37:a8:97:10:39:e8:8c:02:1e:ee:a0:06:ee:b0:92:62:2a:4c:
         07:f9:58:3e:43:26:74:49:b1:8c:80:04:1f:6e:6d:88:62:01:
         38:3b:71:ae:74:28:4e:6d:62:56:5a:f1:54:c2:a2:13:cf:ea:
         b3:b6:44:8b:20:ef:80:92:73:73:05:47:47:d0:ff:8b:dc:53:
         de:4f:89:e2:b6:59:25:89:f6:e5:d9:71:b0:2d:84:8e:07:17:
         2e:d3:cf:d4:29:7a:55:ee:f4:b7:bd:40:95:92:fb:56:30:d5:
         cc:f6:71:9a:d3:e7:ba:65:7d:13:b2:31:bd:67:5c:42:77:89:
         7c:c4:3c:c7:09:5d:1c:f0:3a:39:17:de:9c:ff:b2:00:7b:33:
         e0:3c:cd:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----