Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/JtxGblYiUSTugFiFRBMFZizrHyM.cer
File:                     JtxGblYiUSTugFiFRBMFZizrHyM.cer (raw, json)
Hash identifier:          E2lrhqQJMDdEnFg7Lkfj6mAEWp7xYuD61lghrv+CP6s=
Subject key identifier:   26:DC:46:6E:56:22:51:24:EE:80:58:85:44:13:05:66:2C:EB:1F:23
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856AF5273FE3ADEC51B0B239DAA2A8F564
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/43/abf2be-9ee1-4178-be1d-22f628d9f5a3/1/JtxGblYiUSTugFiFRBMFZizrHyM.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/43/abf2be-9ee1-4178-be1d-22f628d9f5a3/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 01:32:09 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 217.119.143.0/24
                          IP: 2a11:7dc0::/29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6a:f5:27:3f:e3:ad:ec:51:b0:b2:39:da:a2:a8:f5:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 01:32:09 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=26dc466e56225124ee805885441305662ceb1f23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:37:ba:53:50:ef:2e:6e:f3:c5:be:96:51:8d:
                    3b:08:6c:fd:0e:d9:46:e0:2e:f7:68:2d:c0:97:f6:
                    fa:51:82:7e:3c:a7:79:91:5d:43:cb:16:cb:84:c3:
                    e0:29:fd:98:99:8a:c7:a1:0d:ca:78:8c:5d:be:1b:
                    aa:57:dc:06:03:73:1f:8e:07:0f:fe:f9:79:c3:c3:
                    9c:6f:73:4c:26:9a:d2:60:e8:df:55:9a:77:3b:bb:
                    20:8e:68:85:e1:7f:c4:ed:b3:e8:1f:bc:55:70:d0:
                    c4:4f:6c:92:2a:5d:31:4b:fd:ee:69:da:25:2d:52:
                    78:3c:41:e6:b0:a7:23:a4:92:44:fe:6d:fd:8b:70:
                    a2:70:e1:43:c9:28:5a:36:f4:77:ce:fb:83:c9:48:
                    62:c2:a8:00:78:c2:5d:c5:21:fb:13:af:b7:2e:47:
                    08:f2:a9:8e:56:23:61:42:85:dd:18:e8:05:6b:d4:
                    e5:49:03:36:9d:46:f4:c9:c7:b8:07:8b:c7:83:4c:
                    7b:e3:88:30:b2:cb:f0:18:e1:b8:88:3e:c4:39:fb:
                    a3:dd:56:12:c9:65:72:04:5d:ac:da:dd:3d:47:f5:
                    ab:d2:2a:13:61:26:cc:01:8d:bd:13:32:a3:c7:e3:
                    f9:18:88:20:cd:e9:2b:1e:c6:53:d9:ef:f9:46:11:
                    98:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:DC:46:6E:56:22:51:24:EE:80:58:85:44:13:05:66:2C:EB:1F:23
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/abf2be-9ee1-4178-be1d-22f628d9f5a3/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/abf2be-9ee1-4178-be1d-22f628d9f5a3/1/JtxGblYiUSTugFiFRBMFZizrHyM.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  217.119.143.0/24
                IPv6:
                  2a11:7dc0::/29

    Signature Algorithm: sha256WithRSAEncryption
         2f:0a:34:af:fc:52:9c:b5:75:1d:f6:06:cb:1e:24:82:4c:ea:
         fd:e1:c0:dd:33:4e:e0:f2:fa:00:e0:0a:88:0a:9f:81:d6:53:
         91:b7:ec:d7:5b:63:ca:dc:92:9e:d3:36:73:7b:87:f2:79:22:
         40:1a:f7:0e:e1:c8:b4:4a:08:9c:85:e5:38:82:d7:89:51:7c:
         03:53:11:f1:14:61:17:fa:5f:4f:08:f4:c2:cb:87:39:16:3d:
         26:19:8f:e1:2d:3c:56:4d:d9:b2:a3:27:bd:53:86:2a:eb:7d:
         cd:1f:39:31:c6:90:28:0a:85:94:f1:06:59:32:3c:19:55:bf:
         41:2a:ea:7e:2c:da:a1:90:c9:3d:02:d6:29:c2:15:b8:3d:7e:
         23:e5:a1:f0:bf:83:ff:71:5e:dd:9f:16:ca:3b:48:fc:31:5c:
         68:4a:5c:04:1d:e9:b9:f5:e4:ab:ab:fd:ad:b0:f5:74:bf:cd:
         55:6a:b9:4f:a5:02:c6:0a:3f:77:1c:53:b0:70:84:5e:9a:3f:
         63:6e:17:cb:bd:26:18:39:5e:c4:dd:ea:13:31:97:92:0d:78:
         a0:25:99:4b:d6:37:d7:41:4e:ef:11:d7:1b:ce:fe:aa:9d:33:
         1e:da:4e:e8:06:2f:93:71:d8:3e:4a:36:d0:49:40:5c:59:b9:
         de:c7:27:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----