Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/HSqIrMkSOMUydRKQzPgxJw-X9wg.cer
File:                     HSqIrMkSOMUydRKQzPgxJw-X9wg.cer (raw, json)
Hash identifier:          ua27WRCYFpO0scBQtP8Ihto6FfOpRst6VLeDiP+tpuo=
Subject key identifier:   1D:2A:88:AC:C9:12:38:C5:32:75:12:90:CC:F8:31:27:0F:97:F7:08
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018570891389CA1B28728DAC6DA29016437F
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/6e/2476c0-7913-47b7-ac6b-fb4e840df23f/1/HSqIrMkSOMUydRKQzPgxJw-X9wg.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/6e/2476c0-7913-47b7-ac6b-fb4e840df23f/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 02 Jan 2023 03:31:49 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    AS: 39455
                          IP: 185.85.36.0/22
                          IP: 2a05:aa00::/29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:89:13:89:ca:1b:28:72:8d:ac:6d:a2:90:16:43:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 03:31:49 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=1d2a88acc91238c532751290ccf831270f97f708
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:1c:b9:e9:23:e3:34:17:c8:bb:37:49:10:a3:
                    a8:09:ef:2e:ed:41:23:00:a9:4a:fb:f7:e3:ca:70:
                    40:53:25:9a:67:4d:d1:98:8b:c8:2f:1c:db:ae:73:
                    36:32:0c:c9:92:b0:6f:cc:94:66:fa:e9:d9:b5:f2:
                    af:23:8a:32:5c:20:15:cb:ee:af:36:e2:4e:4c:92:
                    b3:0f:de:0c:83:e5:40:40:7b:16:bc:15:dc:4d:e2:
                    94:d0:2a:09:b9:d7:e7:34:b0:b7:23:e6:20:85:4c:
                    e7:2b:5f:52:9f:f1:01:de:05:cc:dc:7e:89:05:c2:
                    a6:f0:51:d3:4d:73:58:e2:46:d8:b0:10:72:b4:8d:
                    a9:30:f7:4b:45:70:a3:82:04:20:e5:08:cf:45:c7:
                    56:ab:1a:eb:34:22:38:ac:ec:5c:fe:05:07:84:73:
                    1a:46:b2:dc:ea:63:86:2f:f3:25:92:26:e5:cd:42:
                    ae:a5:c3:0a:3e:e2:db:be:82:32:0a:43:73:17:27:
                    88:b6:68:76:92:8c:88:29:bc:f8:04:78:78:ed:0e:
                    82:c4:59:a0:53:03:53:ab:c7:8e:f0:ba:b0:4f:bb:
                    31:de:04:7a:20:e9:ed:c2:ea:80:fb:60:33:87:8e:
                    d1:6c:cb:1b:b2:10:ed:1e:dd:33:50:f0:2c:83:8d:
                    4e:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:2A:88:AC:C9:12:38:C5:32:75:12:90:CC:F8:31:27:0F:97:F7:08
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/2476c0-7913-47b7-ac6b-fb4e840df23f/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/2476c0-7913-47b7-ac6b-fb4e840df23f/1/HSqIrMkSOMUydRKQzPgxJw-X9wg.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.85.36.0/22
                IPv6:
                  2a05:aa00::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  39455

    Signature Algorithm: sha256WithRSAEncryption
         15:4e:68:2a:90:dd:68:b6:37:47:f8:e7:1f:6f:5f:58:90:a2:
         64:7c:b6:c4:cb:df:e3:a0:6f:7c:2a:c2:ab:59:5a:21:5e:7e:
         52:45:70:6b:43:76:f1:60:fb:fa:f7:44:bd:19:1f:1e:e2:c7:
         c2:98:d7:d8:7a:2b:62:9c:d6:cb:46:ca:f7:b2:d6:2e:3c:25:
         c8:ac:16:35:cc:b0:87:3d:2b:a0:aa:2d:7b:5a:53:0e:02:a4:
         94:cc:9a:db:9f:6c:d5:7d:cb:89:8b:b3:54:b1:88:cd:b0:b3:
         da:16:df:3f:6c:ad:55:8e:fc:2f:2f:ab:4b:67:e3:ea:0c:09:
         4b:66:4d:b1:f0:e2:10:c7:b1:e2:c1:24:29:45:82:c5:99:a8:
         c0:a0:7d:49:8e:9d:6b:d3:ca:f0:8d:d2:66:f8:24:43:11:d3:
         19:ea:b1:30:c9:eb:eb:08:bb:82:d6:a6:c7:75:d1:e6:fc:8a:
         0d:01:4c:fa:72:96:b7:91:55:da:5a:84:38:62:bb:38:1f:0d:
         98:ea:40:46:b9:51:64:b7:57:27:32:96:fa:e8:fa:38:c5:c1:
         d4:a5:6c:4e:55:70:49:f3:99:50:66:33:41:b4:ac:58:27:01:
         3d:2f:c0:06:c4:4d:6e:e1:1f:a5:3f:be:81:32:62:06:01:02:
         14:32:7c:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----