Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Ot7qO2qsTYNLT9fC5dPDl_YfQ9Y.cer
File:                     Ot7qO2qsTYNLT9fC5dPDl_YfQ9Y.cer (raw, json)
Hash identifier:          6lhEZGEc0OjdxWx/r05+pe92Q9qPe4gRAEVOpfRew7U=
Subject key identifier:   3A:DE:EA:3B:6A:AC:4D:83:4B:4F:D7:C2:E5:D3:C3:97:F6:1F:43:D6
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856EFAB652B2042621019E440EBEE6C492
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/8f/015f44-0f4c-4714-8615-23b072f5b188/1/Ot7qO2qsTYNLT9fC5dPDl_YfQ9Y.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/8f/015f44-0f4c-4714-8615-23b072f5b188/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 20:16:42 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    AS: 50461
                          IP: 91.108.192.0/18
                          IP: 193.106.196.0/22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6e:fa:b6:52:b2:04:26:21:01:9e:44:0e:be:e6:c4:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 20:16:42 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=3adeea3b6aac4d834b4fd7c2e5d3c397f61f43d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:da:5f:b1:41:c6:7b:dd:c5:17:e4:0e:04:86:
                    14:03:62:b8:ad:a6:5e:82:12:63:8f:5b:58:4f:59:
                    6d:5f:8f:3f:d1:76:87:e5:be:c7:96:95:c3:1e:76:
                    dc:bb:ed:4c:b8:bb:8d:b4:8a:c4:cf:24:83:47:8b:
                    49:d3:b0:3f:ee:8f:1b:81:72:07:55:2c:b8:4c:a3:
                    54:df:80:37:12:c7:dc:1e:4d:58:60:0c:a2:cd:b4:
                    c3:e0:a5:d5:04:21:81:c4:eb:0c:d9:60:f4:8f:01:
                    3b:57:76:a6:57:ae:a0:ea:53:5b:14:77:a3:aa:19:
                    dd:93:47:4c:4b:03:ab:7d:54:cc:82:29:77:39:0d:
                    fd:49:a3:01:fe:4f:69:ce:20:ad:9c:91:c6:cf:fd:
                    ab:63:a0:04:b9:09:a8:ef:fd:c4:e3:0e:b6:22:3e:
                    ef:c3:5a:ba:91:fe:18:c1:18:a0:3d:99:0a:f7:e9:
                    00:05:fa:5e:a2:7a:96:0c:8b:08:12:10:75:a4:8e:
                    96:2a:51:ab:72:9a:25:a7:a8:f1:77:d0:a4:c3:91:
                    60:1e:07:b8:0a:46:cd:c6:cc:78:6f:30:1f:0d:e5:
                    64:0b:5d:de:f3:2e:a3:8b:9c:f4:df:d7:e6:d2:73:
                    5c:1c:ab:9d:42:6f:37:8c:cf:67:d5:3c:92:a3:d1:
                    62:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:DE:EA:3B:6A:AC:4D:83:4B:4F:D7:C2:E5:D3:C3:97:F6:1F:43:D6
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/015f44-0f4c-4714-8615-23b072f5b188/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/015f44-0f4c-4714-8615-23b072f5b188/1/Ot7qO2qsTYNLT9fC5dPDl_YfQ9Y.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.108.192.0/18
                  193.106.196.0/22

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  50461

    Signature Algorithm: sha256WithRSAEncryption
         59:b0:58:d3:4c:e6:8d:6f:70:4a:82:d6:ab:b1:8c:69:4e:6d:
         78:25:0f:f0:fe:79:d9:95:98:d2:05:c4:b2:b7:d7:e7:2f:74:
         b7:2c:a0:f7:fd:4d:7a:52:bc:82:a4:b4:5d:56:e4:eb:34:f7:
         88:97:8b:23:93:07:45:8b:32:d7:3d:10:3c:de:5d:bf:7d:5a:
         76:24:9a:a3:68:31:79:69:78:37:97:bc:b0:d7:3a:37:d8:8d:
         8c:8a:d2:20:cb:31:3c:df:2a:fd:34:dc:e6:d3:23:33:f3:a9:
         94:9f:bb:6d:a9:e9:9b:04:89:15:1b:3a:cb:af:9c:5c:ef:7e:
         70:cf:6d:c9:28:76:82:e7:d6:c4:73:18:20:dc:ad:a6:91:cc:
         7c:72:d3:8d:12:3b:f3:54:4c:e4:e1:37:85:2c:3d:81:54:4b:
         65:20:f1:78:5d:19:29:7c:85:7c:fa:df:70:18:07:0a:b6:74:
         9f:b1:b9:8e:7e:46:4a:3d:9d:df:a9:a3:b5:00:c3:b8:10:27:
         cd:84:6e:e2:74:44:9a:f9:35:be:92:b1:06:0e:bf:ee:89:01:
         bf:46:ae:63:84:4b:36:40:3c:30:bf:ff:c4:15:0f:67:38:aa:
         5c:28:2d:a8:0d:92:f0:7b:1b:9a:6f:ea:d8:ef:b6:ef:cc:ab:
         52:43:0d:70
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----