Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/MyDD4uzyi4xZN0-oFtxK2Q5fDPA.cer
File:                     MyDD4uzyi4xZN0-oFtxK2Q5fDPA.cer (raw, json)
Hash identifier:          E5Gk7hdQ+ev5wsWw/NFYh3dARLJ/QFf92Pm9EVkxcu8=
Subject key identifier:   33:20:C3:E2:EC:F2:8B:8C:59:37:4F:A8:16:DC:4A:D9:0E:5F:0C:F0
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01857245D7CB4438527D9B9ED9C580E63639
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/98/57eb89-91a8-4f98-adf1-d68f4c035ea1/1/MyDD4uzyi4xZN0-oFtxK2Q5fDPA.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/98/57eb89-91a8-4f98-adf1-d68f4c035ea1/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 02 Jan 2023 11:37:37 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 194.62.162.0/24
                          IP: 2a11:7a00::/29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:72:45:d7:cb:44:38:52:7d:9b:9e:d9:c5:80:e6:36:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 11:37:37 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=3320c3e2ecf28b8c59374fa816dc4ad90e5f0cf0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:3e:17:a8:99:01:4b:78:de:3c:83:e1:ed:b9:
                    d4:30:ea:c7:e9:3a:86:65:d1:16:de:67:19:54:e3:
                    ab:52:d6:e6:9c:ad:4e:b8:d9:01:60:39:00:80:e1:
                    6f:9b:f5:f3:53:07:57:07:2f:7d:c4:da:e1:58:e6:
                    c4:9a:d2:17:fe:e5:8f:50:2c:f8:8f:4d:df:08:3c:
                    67:4e:0b:70:91:b3:69:e3:f1:60:eb:0c:52:78:5b:
                    dd:89:56:01:c1:74:69:bd:9b:66:fd:c4:5e:ef:0a:
                    13:dd:9b:b7:bf:1c:1d:da:7a:45:eb:9b:23:02:d4:
                    b2:de:49:23:8d:5f:cf:f7:48:e9:be:9c:c8:39:d3:
                    f2:32:cd:17:b8:b1:58:69:17:84:b2:34:5a:c6:9a:
                    47:12:ff:ca:da:17:72:14:8b:3d:4d:eb:04:96:f3:
                    31:ae:d7:e8:c2:be:f7:0c:6c:cc:f3:f6:98:b5:a2:
                    f8:70:45:02:40:3b:5b:89:b4:13:8e:2f:36:eb:c6:
                    4d:df:b9:ca:95:f5:d7:41:29:78:f1:7d:a4:86:9f:
                    f1:1d:3a:41:78:08:37:5c:03:94:09:f2:c3:c3:82:
                    6a:76:09:35:3f:1b:ad:7e:a6:6a:0c:ed:5a:e6:ca:
                    fe:e6:08:1e:99:65:a9:72:c3:b1:8e:45:dc:d0:46:
                    e2:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:20:C3:E2:EC:F2:8B:8C:59:37:4F:A8:16:DC:4A:D9:0E:5F:0C:F0
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/57eb89-91a8-4f98-adf1-d68f4c035ea1/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/57eb89-91a8-4f98-adf1-d68f4c035ea1/1/MyDD4uzyi4xZN0-oFtxK2Q5fDPA.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.62.162.0/24
                IPv6:
                  2a11:7a00::/29

    Signature Algorithm: sha256WithRSAEncryption
         85:6a:8e:80:4e:97:84:e0:af:13:b2:03:c5:5c:5a:11:11:39:
         f3:6b:55:35:19:a1:58:fa:52:b0:9a:c5:33:70:e2:f4:c9:47:
         26:13:64:a1:93:cc:9d:8d:83:4d:30:3e:fb:d6:5a:cf:96:ed:
         10:f0:44:93:d4:c8:90:86:21:f0:d8:63:e2:31:b8:1a:3e:8c:
         70:d8:4f:03:bc:54:ee:f0:22:27:fd:b6:a3:8f:42:7c:35:fe:
         6a:52:8e:b7:bd:bc:34:6c:c2:00:2d:cf:fd:92:a2:33:87:ff:
         e8:4e:29:42:1f:87:c2:87:10:67:07:90:db:bc:93:57:27:14:
         db:74:dd:37:38:fe:46:43:ca:44:dc:fa:38:1b:d7:4d:ab:25:
         4e:16:f1:eb:38:eb:d3:2d:c6:91:98:44:f0:a3:38:5f:d5:79:
         52:de:0c:da:7f:12:f7:23:34:0f:d7:e4:35:03:54:36:d6:72:
         c9:75:9f:91:9d:94:ee:86:ee:35:49:50:4a:56:f1:f3:a0:3d:
         04:b6:b9:6e:94:e8:5a:44:35:ee:9b:9d:6f:2f:7e:44:4c:e8:
         93:fa:92:b1:2b:51:72:7a:6a:44:d6:a2:a3:59:58:11:02:e0:
         23:fe:f4:17:d8:cf:e2:a4:ae:f2:8b:71:fb:cf:6b:a7:3a:76:
         6b:35:6f:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----