Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/M1GLv3EVzYVz4N646-Z1hI8lvfs.cer
File:                     M1GLv3EVzYVz4N646-Z1hI8lvfs.cer (raw, json)
Hash identifier:          bm2m6FQc15zBtNSFCH7dU2zM6xpNaz1uO7iHRVC6ino=
Subject key identifier:   33:51:8B:BF:71:15:CD:85:73:E0:DE:B8:EB:E6:75:84:8F:25:BD:FB
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856D1ACAA6F18D4E7F5816712694C45BBA
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/7a/b50d8f-a95f-4eca-a822-658bc41b10fa/1/M1GLv3EVzYVz4N646-Z1hI8lvfs.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/7a/b50d8f-a95f-4eca-a822-658bc41b10fa/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 11:32:30 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 62.233.52.0/24
                          IP: 2a11:a640::/29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6d:1a:ca:a6:f1:8d:4e:7f:58:16:71:26:94:c4:5b:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 11:32:30 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=33518bbf7115cd8573e0deb8ebe675848f25bdfb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:b5:0c:c7:c6:8d:99:00:c1:f2:f3:a3:dd:72:
                    80:ab:e2:ee:f8:fd:4f:38:21:98:b1:58:61:46:6f:
                    8d:57:d8:06:4d:82:3e:15:9a:f4:4c:74:84:90:73:
                    e4:0a:26:16:97:59:51:b1:58:d3:41:0d:c5:33:0c:
                    a1:0a:2b:fd:aa:15:d5:e2:38:3a:dd:6f:f0:9f:da:
                    26:52:7e:75:ae:3b:45:e2:cc:a9:6d:28:06:a7:8f:
                    66:05:96:9a:c6:aa:e6:6a:61:a6:b8:04:1b:86:2f:
                    4c:85:d8:ef:78:2a:e9:4f:7f:f7:fd:ee:dc:fb:06:
                    cd:c8:35:5b:1e:14:38:3a:bd:d2:f3:65:e7:75:22:
                    c1:6d:f0:10:62:d7:84:fc:df:b6:ad:21:ef:fb:5a:
                    3d:9a:22:f2:69:69:45:8d:21:bd:86:93:04:f7:28:
                    99:57:70:c5:36:71:a5:58:79:6d:69:da:10:a2:07:
                    56:f5:53:f0:be:e9:cf:c7:ab:47:a1:29:7e:e3:15:
                    a2:cc:df:66:5b:d8:da:3b:c0:55:03:bf:a0:b2:ec:
                    06:e2:e6:df:4e:fe:0c:6a:5a:b7:2e:60:c1:c1:11:
                    15:58:b8:9e:30:56:17:eb:c7:a8:80:6b:08:98:27:
                    c6:b4:5b:84:2f:5e:a2:e6:0b:1a:6c:cd:03:ab:4f:
                    42:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:51:8B:BF:71:15:CD:85:73:E0:DE:B8:EB:E6:75:84:8F:25:BD:FB
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/b50d8f-a95f-4eca-a822-658bc41b10fa/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/b50d8f-a95f-4eca-a822-658bc41b10fa/1/M1GLv3EVzYVz4N646-Z1hI8lvfs.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.233.52.0/24
                IPv6:
                  2a11:a640::/29

    Signature Algorithm: sha256WithRSAEncryption
         03:bd:ba:a6:50:77:e7:e1:fd:31:c3:db:04:d3:3e:27:70:0b:
         7b:a6:07:ed:f4:4b:b3:3f:81:b1:0f:0b:60:ad:f8:9d:43:66:
         56:80:d6:33:be:c0:c5:1e:f1:b3:0b:01:da:fa:d2:82:af:1c:
         1b:28:d4:9a:55:c2:0c:db:20:a7:fc:bc:13:f0:32:e4:51:7a:
         e3:b8:ab:a1:5b:7d:d9:04:ac:ba:28:eb:63:48:61:37:27:1c:
         2a:f9:d9:18:7d:fa:c0:40:52:a3:a5:73:44:9f:a1:f7:c1:14:
         d9:d0:5d:e0:eb:2b:49:85:b6:4d:98:24:12:cf:42:1b:fb:55:
         f8:63:86:e6:f2:e7:40:78:21:c3:39:23:43:47:e8:ba:ed:41:
         ee:f3:7c:57:71:b6:6e:0a:5b:c2:5e:3c:6e:ee:16:71:cd:80:
         18:e0:c4:39:4a:76:af:ea:46:63:e6:c4:e1:cd:0d:09:d3:40:
         98:4f:ed:7f:c4:ee:77:56:ab:6c:83:54:71:c5:3b:f0:88:6d:
         4d:61:1c:bf:35:55:fb:69:2f:51:9a:a2:e8:57:49:9f:f4:cb:
         d4:cc:11:3e:92:60:76:49:21:ae:43:c7:88:c2:21:7c:66:e9:
         1f:08:39:1f:2f:ee:60:ee:34:de:d5:32:6f:ad:5e:87:2b:ac:
         68:e5:19:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----