Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/FUnxxKhu2QyvgZXdhNBA6sihm4g.cer
File:                     FUnxxKhu2QyvgZXdhNBA6sihm4g.cer (raw, json)
Hash identifier:          FewpgmlfhTtHKBMnR+g7PKNX5TqKMKoD0PkuRVyvOTM=
Subject key identifier:   15:49:F1:C4:A8:6E:D9:0C:AF:81:95:DD:84:D0:40:EA:C8:A1:9B:88
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856E65ADF948D43A0254E3D14C97EB40B1
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/02/89b5e2-5c38-4f79-a03e-f193b9a36b5a/1/FUnxxKhu2QyvgZXdhNBA6sihm4g.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/02/89b5e2-5c38-4f79-a03e-f193b9a36b5a/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 17:33:55 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 146.19.232.0/24
                          IP: 2a12:a80::/29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6e:65:ad:f9:48:d4:3a:02:54:e3:d1:4c:97:eb:40:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 17:33:55 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=1549f1c4a86ed90caf8195dd84d040eac8a19b88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:f7:a5:12:b3:73:59:2f:16:4a:7a:11:fd:0f:
                    4d:ca:20:da:0f:0f:4d:dd:4f:4b:fb:b2:05:13:0b:
                    e1:bc:dc:91:da:cd:b8:5c:cc:c5:b4:9b:88:10:2c:
                    dc:9f:21:25:06:23:79:48:32:41:f3:8a:5d:ce:72:
                    7a:6d:04:08:9a:cd:05:f7:e2:8e:25:82:49:db:cf:
                    f7:7a:c8:8e:cd:6a:9f:a7:70:8f:db:af:87:e5:68:
                    d8:33:e7:b0:51:7e:19:c2:6b:51:db:9c:ff:ba:40:
                    9f:29:23:90:a0:eb:67:1e:ba:5d:34:1a:7a:a4:14:
                    e5:f1:9f:d7:c1:68:ea:67:2a:4b:71:a1:b1:fa:34:
                    7f:0c:b1:d1:a0:0a:e7:94:bb:b0:96:b8:4c:32:85:
                    cc:c1:5e:cd:e8:a7:94:13:7c:d2:56:b5:74:45:5b:
                    87:12:3e:42:2f:2e:a7:03:64:a2:cc:85:46:57:65:
                    06:b5:08:5e:87:45:b6:3d:c3:ad:49:5f:08:98:02:
                    62:70:9b:b0:99:06:4f:b8:e1:f9:b0:66:f4:d2:2d:
                    67:77:dd:b3:1b:46:2e:45:d2:b8:13:fb:0a:65:31:
                    d8:6d:8a:f1:05:be:e0:4f:64:75:d9:0d:ee:95:8b:
                    7b:fc:b0:88:4a:1a:67:27:ee:12:2b:9e:d2:aa:09:
                    a9:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:49:F1:C4:A8:6E:D9:0C:AF:81:95:DD:84:D0:40:EA:C8:A1:9B:88
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/89b5e2-5c38-4f79-a03e-f193b9a36b5a/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/89b5e2-5c38-4f79-a03e-f193b9a36b5a/1/FUnxxKhu2QyvgZXdhNBA6sihm4g.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.19.232.0/24
                IPv6:
                  2a12:a80::/29

    Signature Algorithm: sha256WithRSAEncryption
         78:76:43:fe:94:0e:01:f4:a5:8c:1c:2c:f6:89:fa:78:f0:6e:
         63:45:1c:4c:b1:65:6f:76:07:ca:98:89:c9:91:3a:00:cd:66:
         f4:0a:c5:47:37:9d:d1:74:58:94:16:ca:32:5c:d8:64:43:79:
         4e:3a:1a:e6:c3:3e:d6:3e:5b:1e:e0:a2:52:3a:a6:a6:5a:27:
         d2:57:b4:79:6b:8e:c0:e3:34:0f:ca:cf:9b:62:c7:00:c2:a3:
         35:91:39:69:c5:a7:8f:20:4d:d5:74:f8:99:72:44:ba:90:57:
         75:98:6c:9d:a2:04:3b:36:83:c7:c5:99:3a:c8:7e:10:53:48:
         7a:ab:b3:29:72:e0:fa:d7:ff:cd:f1:5a:f9:10:b9:df:f5:5a:
         d1:07:12:0e:39:d8:e1:74:a9:ed:5e:f5:c3:bc:fd:a3:cd:19:
         84:00:e9:01:b3:00:0d:38:25:71:70:d6:40:9d:0a:44:24:5b:
         41:d1:53:b4:36:7a:40:70:a7:bb:55:19:f6:00:10:c0:f8:9d:
         0a:e4:96:9d:f1:dc:d1:86:5e:d5:25:ea:0f:8d:27:88:00:7a:
         99:67:98:ce:32:16:ba:a6:59:50:60:48:f5:7a:3e:e0:c2:6e:
         8c:96:88:83:a1:dc:64:1f:9e:71:a0:00:db:e1:f2:91:29:ea:
         e6:03:82:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----