Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Hu37F7h92VmmiF9Oy95sT3ZIGVU.cer
File:                     Hu37F7h92VmmiF9Oy95sT3ZIGVU.cer (raw, json)
Hash identifier:          AHV8wwUcAj44CoaSzbpR16zUAzCVNqg4p+BKG9HA9Hk=
Subject key identifier:   1E:ED:FB:17:B8:7D:D9:59:A6:88:5F:4E:CB:DE:6C:4F:76:48:19:55
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856FAED47E01F416766429B5261E2A3CAB
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/15/394f59-30f0-46b0-9680-c751995da013/1/Hu37F7h92VmmiF9Oy95sT3ZIGVU.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/15/394f59-30f0-46b0-9680-c751995da013/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 23:33:26 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 146.255.185.0/24
                          IP: 2a11:b780::/29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:ae:d4:7e:01:f4:16:76:64:29:b5:26:1e:2a:3c:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 23:33:26 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=1eedfb17b87dd959a6885f4ecbde6c4f76481955
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:3e:31:66:5d:41:05:5c:9f:49:ef:00:7d:10:
                    58:40:d7:3c:86:b2:c5:ff:52:8c:d4:bd:31:48:a5:
                    8a:6b:34:72:72:05:fb:9d:8b:bd:21:de:a9:aa:cb:
                    c7:8c:47:7c:ba:30:ca:5e:a2:c8:c0:a2:6b:1b:03:
                    39:a0:13:d0:04:e2:7a:b9:f2:f5:ab:fa:71:ae:fb:
                    9b:81:29:db:2b:ca:f3:ef:e7:01:28:d2:41:32:16:
                    ab:42:f4:c4:71:e3:6e:d0:0c:10:fe:6e:f1:6c:bb:
                    ce:23:ce:01:43:44:de:c4:c8:89:9e:00:1a:cd:16:
                    02:b8:3e:ca:ca:47:1c:de:55:3a:43:6a:b6:66:a2:
                    b8:81:64:44:12:9b:62:9c:0b:a4:31:2b:18:ae:f5:
                    68:0b:53:8e:2c:e5:64:56:d5:77:38:1d:15:92:86:
                    9e:31:bd:6f:bc:f2:3e:0f:fe:ca:76:f3:eb:73:f8:
                    4d:97:20:2d:0c:c0:3b:d4:d8:d5:20:0d:d2:29:7f:
                    5b:94:a9:eb:c1:11:56:fe:ba:a6:29:77:eb:43:29:
                    b7:d6:e6:65:a3:45:69:58:00:4b:d4:43:90:02:13:
                    3d:79:5a:3b:05:25:8f:c0:62:dc:f3:71:78:7b:ba:
                    69:14:e0:46:a9:dd:a7:21:36:5d:9a:93:11:5c:6d:
                    d7:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:ED:FB:17:B8:7D:D9:59:A6:88:5F:4E:CB:DE:6C:4F:76:48:19:55
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/394f59-30f0-46b0-9680-c751995da013/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/394f59-30f0-46b0-9680-c751995da013/1/Hu37F7h92VmmiF9Oy95sT3ZIGVU.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.255.185.0/24
                IPv6:
                  2a11:b780::/29

    Signature Algorithm: sha256WithRSAEncryption
         90:c0:d7:58:03:32:e9:fc:f6:73:56:d9:67:55:75:a4:a2:dd:
         74:2f:8d:ab:5f:fa:29:75:d0:45:d9:8d:c1:6a:8a:f5:a5:77:
         7f:a4:34:92:78:e3:4e:9a:72:ba:92:11:6e:57:18:c1:fd:64:
         ca:3b:97:59:97:e1:8b:f3:1c:50:03:30:d5:1d:76:dd:2b:2f:
         dd:7d:48:a3:f9:d8:ec:e8:a7:12:9c:c5:7f:6f:8c:1e:1a:50:
         9a:ee:b1:3f:ab:66:cd:57:4a:3a:98:04:76:b4:37:da:09:e3:
         65:53:97:93:a6:0d:45:01:f0:9b:c1:af:00:9b:91:e2:ad:77:
         f6:1d:f4:1c:65:05:26:f9:55:1a:19:b9:5f:a1:b9:d3:f1:8f:
         98:49:c3:5f:d5:8e:44:0a:f9:55:eb:d7:2d:fc:59:06:14:6a:
         c3:cb:f9:d7:4a:10:d6:f6:50:87:c8:1c:45:5c:28:9f:92:fc:
         95:c5:14:3a:9d:fc:05:df:1b:3e:76:9c:6d:04:9c:30:3c:14:
         38:b3:8b:13:31:01:a3:01:0c:e3:53:d5:8c:70:99:47:68:5e:
         c1:20:00:0e:71:15:2e:81:9e:44:c1:a6:7a:ac:dc:88:ab:e0:
         1b:44:e7:a7:a0:c9:4b:f4:42:dd:bb:b0:67:b7:1d:c1:20:c7:
         98:48:f5:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----