Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/GVq4QmjJBMglpPCesEDR9y4RIzE.cer
File:                     GVq4QmjJBMglpPCesEDR9y4RIzE.cer (raw, json)
Hash identifier:          kRotCzwDOk2aaD8zpxLpmSTfBkqvk+6v/Uu44xerhbE=
Subject key identifier:   19:5A:B8:42:68:C9:04:C8:25:A4:F0:9E:B0:40:D1:F7:2E:11:23:31
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0185716760B08EAB173E82D1F4A5F94D9C92
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/65/3cdcde-2cfb-4430-bbe5-47abd76ea672/1/GVq4QmjJBMglpPCesEDR9y4RIzE.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/65/3cdcde-2cfb-4430-bbe5-47abd76ea672/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 02 Jan 2023 07:34:38 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 88.151.11.0/24
                          IP: 2a11:5880::/29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:71:67:60:b0:8e:ab:17:3e:82:d1:f4:a5:f9:4d:9c:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 07:34:38 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=195ab84268c904c825a4f09eb040d1f72e112331
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:b6:09:48:67:e7:85:97:f7:c6:e0:f2:fa:30:
                    09:15:cf:4b:07:b2:be:d2:7d:bb:3a:54:38:25:61:
                    c9:98:3e:29:9e:49:fb:e7:ec:2b:d0:5d:21:b6:96:
                    b6:27:50:f3:db:7a:20:7f:3a:8d:42:42:27:e6:9b:
                    84:fe:cc:99:f6:8b:e0:a3:de:e0:a3:db:d9:d9:03:
                    c2:35:66:b2:75:a2:73:a5:d3:8d:dd:b3:08:ff:ce:
                    b9:5f:cd:2a:b0:7d:83:f6:17:a8:f4:9b:09:1c:27:
                    a5:7f:e6:8a:20:21:85:9c:c4:e9:ad:e9:e8:e9:ae:
                    93:e4:be:b9:6b:c7:59:93:02:81:dc:e1:3f:f7:f3:
                    8e:a8:9a:ef:4c:fc:62:f2:c7:5e:52:69:16:00:33:
                    10:c0:8e:24:b9:a5:fd:d8:de:ad:36:39:3e:5f:5c:
                    2e:4a:0a:74:28:db:d0:bc:fc:f5:56:a1:52:b4:72:
                    1f:fa:a5:38:b3:74:cd:68:67:28:af:2b:f5:aa:53:
                    cb:82:34:2d:d6:b1:6b:e0:ff:3d:d3:4f:b5:6a:99:
                    46:24:a7:0c:5a:1e:15:51:18:3f:ee:73:fe:dd:ed:
                    6c:29:2c:3e:24:e3:1f:0c:4a:c1:cb:36:40:0c:d7:
                    4a:70:0e:d4:cb:8c:51:ef:c8:04:36:e0:c2:c9:09:
                    29:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:5A:B8:42:68:C9:04:C8:25:A4:F0:9E:B0:40:D1:F7:2E:11:23:31
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/3cdcde-2cfb-4430-bbe5-47abd76ea672/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/3cdcde-2cfb-4430-bbe5-47abd76ea672/1/GVq4QmjJBMglpPCesEDR9y4RIzE.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  88.151.11.0/24
                IPv6:
                  2a11:5880::/29

    Signature Algorithm: sha256WithRSAEncryption
         ab:54:53:63:29:a7:7d:b7:41:25:2f:50:a7:4c:fe:75:c6:7f:
         6c:5b:7d:ce:1c:c2:37:d5:22:51:9b:1c:85:c2:81:35:bf:a2:
         27:75:d7:45:32:fc:10:6c:0a:c8:31:97:65:1c:ac:fc:b9:d2:
         39:a7:17:a7:e8:dc:a9:bf:e4:f6:f3:a7:95:64:00:b0:09:fe:
         f3:82:7d:be:d9:4d:ae:b4:2c:1d:ce:af:46:9b:96:5a:2b:37:
         94:66:1a:85:05:4d:52:39:a7:66:33:f8:3d:fc:d6:a0:00:dc:
         19:03:59:77:d3:39:99:20:81:46:df:50:4a:75:d8:24:76:ca:
         3f:cb:6b:ec:ae:57:94:d1:97:37:10:7e:1e:26:a9:95:05:96:
         11:4c:92:50:06:42:c1:1e:99:36:e3:28:68:75:5d:9b:19:af:
         ce:16:b2:77:4a:38:a6:38:ea:18:62:59:7c:08:e1:fc:69:9a:
         77:ed:85:c2:58:40:2b:69:62:b8:3d:8c:2c:a0:29:88:d1:73:
         d2:4b:51:68:69:09:f3:3b:32:c5:f0:c9:d8:f0:d3:6f:f5:27:
         1c:2b:56:f6:a3:c2:7b:ef:76:b9:f8:b2:3a:6a:35:33:74:a6:
         9e:a2:94:1d:35:42:f3:27:2a:6f:eb:82:e6:9f:65:f9:72:f5:
         0a:0a:a8:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----