Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/KaefPGi_9F0hYDL5knKQj0647GA.cer
File:                     KaefPGi_9F0hYDL5knKQj0647GA.cer (raw, json)
Hash identifier:          kPjD6ybgjNhc8ub6hZMVhr56ktU0XVq9rRw59/9HacA=
Subject key identifier:   29:A7:9F:3C:68:BF:F4:5D:21:60:32:F9:92:72:90:8F:4E:B8:EC:60
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01857089B4BB5283D39219A2212BBEA5DC41
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/76/97d5c7-935c-41da-9991-cd4b2a1d79aa/1/KaefPGi_9F0hYDL5knKQj0647GA.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/76/97d5c7-935c-41da-9991-cd4b2a1d79aa/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 02 Jan 2023 03:32:31 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 91.246.57.0/24
                          IP: 2a11:bec0::/29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:89:b4:bb:52:83:d3:92:19:a2:21:2b:be:a5:dc:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 03:32:31 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=29a79f3c68bff45d216032f99272908f4eb8ec60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:01:b3:b6:63:92:31:c8:06:33:d0:60:05:39:
                    2d:dd:4b:6d:3b:24:da:ae:d3:88:43:fb:58:df:3f:
                    ba:d2:73:b8:bd:20:91:0b:eb:cf:c2:54:1f:e7:70:
                    a8:6f:fe:3c:82:e9:aa:a2:27:00:ad:10:7b:47:a0:
                    84:7e:18:46:26:a6:b0:ee:56:02:cc:76:f3:6d:39:
                    72:24:4b:a5:91:11:a3:8f:d2:4f:22:bb:58:5d:84:
                    51:30:06:66:7c:ef:71:c4:cc:f6:85:1f:58:e7:ab:
                    3b:3c:bd:0b:03:ad:9c:b0:ce:f3:8f:ce:ac:a1:0f:
                    85:7e:16:61:01:cb:9a:be:b8:f2:56:c0:b7:c2:d5:
                    df:5b:11:c9:71:52:99:dd:de:66:a1:a6:fb:d3:eb:
                    62:7f:b7:7a:61:75:22:71:a5:4e:7b:46:aa:3d:af:
                    be:fb:97:13:6a:35:10:53:93:01:53:9c:d3:a7:47:
                    20:54:55:98:48:26:4e:07:f1:93:ab:50:82:be:58:
                    dd:e3:96:24:53:2c:95:0e:f3:af:24:19:ba:e6:b2:
                    dd:ad:83:6d:0d:79:1f:81:4a:3d:c1:9d:c1:4b:98:
                    fa:cb:11:fc:0e:d9:f6:ca:21:9d:9c:01:cf:4d:2b:
                    01:ee:3a:0c:fc:d9:d1:78:f4:18:a2:11:12:0d:09:
                    d7:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:A7:9F:3C:68:BF:F4:5D:21:60:32:F9:92:72:90:8F:4E:B8:EC:60
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/97d5c7-935c-41da-9991-cd4b2a1d79aa/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/97d5c7-935c-41da-9991-cd4b2a1d79aa/1/KaefPGi_9F0hYDL5knKQj0647GA.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.246.57.0/24
                IPv6:
                  2a11:bec0::/29

    Signature Algorithm: sha256WithRSAEncryption
         5c:0e:96:2e:8a:e3:fd:aa:ea:64:d0:38:12:a2:db:c1:71:a3:
         12:de:40:6f:e3:34:8f:9f:bb:af:6f:f4:af:a3:dd:4b:62:ec:
         9e:96:a3:98:c1:61:c0:bb:18:71:f4:38:50:7b:7d:5c:b9:c9:
         36:f9:7e:09:5a:34:aa:8c:68:ea:7c:df:0f:53:94:e5:cf:99:
         62:52:42:b3:7a:54:af:ab:0d:70:c8:25:5c:c6:38:f2:44:1d:
         07:93:72:e7:51:5d:92:e0:f7:25:c8:4d:98:33:16:89:1d:1b:
         5e:d3:92:60:44:b1:aa:66:49:63:18:ef:17:85:29:31:e0:2a:
         ad:26:7a:92:21:46:c4:09:da:38:b3:64:f0:33:3d:0d:f3:60:
         4e:59:44:bc:03:32:13:a3:ae:69:5c:c4:65:6c:b7:f2:c1:9a:
         18:f4:55:90:e6:5e:96:53:e1:41:e8:75:9b:2f:6a:b6:1a:a8:
         fd:28:1c:2f:4a:4c:20:93:2c:c7:cc:ba:f3:ff:d3:02:90:9a:
         fb:59:86:b6:bb:64:b4:7f:40:5e:90:bf:17:d3:40:e2:c4:07:
         9e:8d:9c:5c:a3:17:1e:46:fc:df:6e:f8:9c:79:1f:74:06:e0:
         6c:8a:79:67:3c:32:24:3a:27:a2:9e:e9:2f:b8:f8:f2:d5:ad:
         dc:23:a7:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----