Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/FbHRf4P-hCdFxM0j4fGh7LnNM5I.cer
File:                     FbHRf4P-hCdFxM0j4fGh7LnNM5I.cer (raw, json)
Hash identifier:          jPhyUBBtC4c8DSLOz02cnC90Rmaf+JJCE+V/uKHSICM=
Subject key identifier:   15:B1:D1:7F:83:FE:84:27:45:C4:CD:23:E1:F1:A1:EC:B9:CD:33:92
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856EFB527A84C5C04A2B3C42B26BBD91CC
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/ac/e9cb7a-2461-4f65-a994-a9086f74dd8f/1/FbHRf4P-hCdFxM0j4fGh7LnNM5I.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/ac/e9cb7a-2461-4f65-a994-a9086f74dd8f/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 20:17:22 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 217.8.116.0/24
                          IP: 2a12:2a80::/29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6e:fb:52:7a:84:c5:c0:4a:2b:3c:42:b2:6b:bd:91:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 20:17:22 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=15b1d17f83fe842745c4cd23e1f1a1ecb9cd3392
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:cf:2d:04:07:d0:12:89:f5:cf:e7:39:ae:46:
                    0e:33:c9:fb:2f:9a:ef:d3:96:7e:fd:2a:4a:00:39:
                    ca:f6:81:60:82:d6:d7:41:37:b7:0e:53:3b:66:be:
                    55:11:32:29:16:79:e0:a7:c7:72:45:0b:b1:f6:7d:
                    b4:6e:48:9e:43:0f:fa:9d:40:cb:10:f7:ed:41:64:
                    9b:26:ab:18:45:4b:b4:88:40:95:9f:28:13:f6:df:
                    be:89:b5:7f:68:83:57:ba:3e:a5:9b:d5:45:e5:df:
                    64:85:e3:ee:8a:30:b6:eb:bd:aa:ea:3e:a4:98:2d:
                    66:fa:32:8e:15:81:55:16:79:0a:d4:b3:ef:6c:4f:
                    54:4b:24:22:8a:d7:2b:89:c7:bc:5a:cb:44:ea:a5:
                    b1:13:c4:27:31:40:de:f7:a5:d5:c8:cf:18:3d:25:
                    dc:1e:2b:0a:b5:a8:65:21:fd:92:1c:5c:62:25:c2:
                    16:9c:7f:52:91:50:b3:8a:cf:f3:20:03:20:fe:ed:
                    b0:8f:7c:1d:6b:2f:86:b3:c8:00:ac:d7:31:b7:22:
                    38:68:c6:de:a8:c0:de:aa:b3:42:98:df:73:e5:10:
                    73:c9:17:2f:32:54:f4:db:c6:47:1c:ea:3e:30:35:
                    af:f0:6e:86:85:ee:10:03:0a:65:d8:9f:f6:8d:fa:
                    00:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:B1:D1:7F:83:FE:84:27:45:C4:CD:23:E1:F1:A1:EC:B9:CD:33:92
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/e9cb7a-2461-4f65-a994-a9086f74dd8f/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/e9cb7a-2461-4f65-a994-a9086f74dd8f/1/FbHRf4P-hCdFxM0j4fGh7LnNM5I.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  217.8.116.0/24
                IPv6:
                  2a12:2a80::/29

    Signature Algorithm: sha256WithRSAEncryption
         66:23:3c:bc:a8:6a:66:0f:73:ca:26:1d:24:cc:b1:b1:90:c2:
         e3:24:ef:ec:fb:de:84:3b:1e:26:c8:75:22:53:46:37:48:61:
         67:bd:aa:85:36:e8:f0:82:b5:50:39:09:67:72:85:c8:81:7c:
         b2:f3:ea:63:9a:9e:4a:10:03:51:0f:1e:13:3a:ba:1c:6e:a3:
         1d:a1:9b:0e:76:2b:c9:e4:8c:62:bb:96:a4:07:08:2f:b2:fb:
         8a:70:93:54:8b:f6:d5:27:7f:e9:96:89:dc:3d:d4:fd:20:0f:
         40:47:27:62:58:a7:e4:f8:e9:a6:4a:2e:80:30:84:78:e1:b4:
         08:97:3e:99:08:e4:ab:3c:06:9f:e4:98:12:3f:f2:c8:98:6b:
         ec:6f:aa:72:52:24:3d:9f:7c:ff:3a:e5:ca:2f:aa:38:bc:ca:
         e5:7b:49:68:1e:77:d6:e9:40:19:7b:51:6b:64:38:b6:51:fe:
         20:42:18:c9:72:63:61:3b:6d:2b:98:7c:a1:71:56:a0:8d:b5:
         57:97:7c:19:24:3c:d9:9c:4d:ee:80:17:9b:87:65:2b:2b:de:
         de:73:79:08:a7:b1:71:a6:08:da:3d:9e:c3:50:48:20:62:e5:
         38:05:f8:29:62:e7:45:ed:be:0b:36:17:c9:2f:44:9c:75:54:
         b2:0c:2d:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----