Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/OwnUESYHcnkUPBgLkRU4QXSrpwo.cer
File:                     OwnUESYHcnkUPBgLkRU4QXSrpwo.cer (raw, json)
Hash identifier:          C7d4HrYAjtLZ5FiTf595iG7LmOyNcuQS2JyBKE2GIDM=
Subject key identifier:   3B:09:D4:11:26:07:72:79:14:3C:18:0B:91:15:38:41:74:AB:A7:0A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856FB05E654608ED6293BFB2C0931DB7F1
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/b4/5c28ab-4402-419b-acd2-b10f0b66232c/1/OwnUESYHcnkUPBgLkRU4QXSrpwo.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/b4/5c28ab-4402-419b-acd2-b10f0b66232c/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 23:35:07 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 146.19.123.0/24
                          IP: 2a12:bf00::/29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:b0:5e:65:46:08:ed:62:93:bf:b2:c0:93:1d:b7:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 23:35:07 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=3b09d41126077279143c180b9115384174aba70a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:69:50:31:b5:50:3c:25:41:29:91:7c:f5:f9:
                    cc:63:36:ff:90:5a:7b:d5:f2:93:65:2d:9a:ce:e1:
                    eb:df:40:1a:ab:a8:f2:3d:85:b9:93:ff:46:f3:4b:
                    9c:77:b7:bf:68:7c:d7:dc:60:e8:d7:52:ec:cb:67:
                    0f:1a:b4:42:31:58:ae:1f:5e:de:1d:13:a5:66:9f:
                    36:8e:1c:8f:53:c3:ab:3e:16:b1:9e:c8:22:8f:93:
                    8b:c5:ba:0d:6e:52:3a:aa:29:cf:6f:2b:86:b7:51:
                    39:8b:8e:42:b6:b7:b0:df:56:20:5c:f6:49:6e:5c:
                    eb:03:11:2e:ce:96:2c:1d:9b:ea:78:f9:ba:2d:de:
                    30:b7:71:1f:da:5d:e2:c3:ef:38:35:d2:cb:14:a3:
                    40:7f:fd:65:5c:13:06:46:83:50:94:c7:6f:84:16:
                    ad:f5:86:d8:21:a1:59:fe:e0:30:72:27:d8:4f:68:
                    ad:76:a7:4d:8f:ef:f3:cf:a4:80:92:e6:52:81:26:
                    0d:94:f5:b3:fb:b4:55:61:58:eb:de:b4:12:cb:5b:
                    b8:6c:93:e2:ed:99:82:fc:77:01:89:98:f5:7c:5c:
                    6a:03:41:b5:47:87:7d:5c:15:32:18:7b:f7:c6:d2:
                    c3:ad:7a:1d:a8:cc:ff:7c:87:fe:d9:37:66:56:be:
                    fa:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:09:D4:11:26:07:72:79:14:3C:18:0B:91:15:38:41:74:AB:A7:0A
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/5c28ab-4402-419b-acd2-b10f0b66232c/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/5c28ab-4402-419b-acd2-b10f0b66232c/1/OwnUESYHcnkUPBgLkRU4QXSrpwo.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.19.123.0/24
                IPv6:
                  2a12:bf00::/29

    Signature Algorithm: sha256WithRSAEncryption
         56:95:d0:0f:12:c5:17:0f:38:14:e7:b8:6b:e5:4d:8b:49:67:
         2d:5d:37:d1:c8:47:d8:96:fe:ab:ed:8c:99:7f:ef:b8:51:87:
         5f:2f:66:9d:14:15:5e:28:e9:40:db:cb:2a:87:75:c8:9d:be:
         bb:28:91:31:17:bd:ee:43:69:1f:75:df:bc:3d:69:75:b6:85:
         20:5a:97:57:28:70:14:f4:f3:bb:63:ef:32:da:92:81:04:d7:
         92:86:71:d6:58:d3:a2:af:00:15:89:25:d6:1b:3b:d5:d8:f9:
         b1:94:87:d2:f3:83:8d:3f:d2:5b:5d:a7:96:61:64:c0:27:5b:
         29:8f:94:06:ff:a8:3c:19:ce:db:f4:1a:86:d3:dc:61:1f:d6:
         3e:4c:76:51:16:b6:4a:4f:c1:aa:bc:89:63:1f:96:2c:74:4c:
         05:3a:e1:7c:c0:01:73:1f:a9:7f:e3:50:8e:69:09:44:08:36:
         85:f3:a1:e9:df:96:f9:1e:4b:f2:3c:1e:e6:f0:eb:8f:d5:26:
         aa:8f:78:28:91:38:46:78:b0:0f:06:73:66:97:14:49:d9:4f:
         40:49:c2:8d:d0:0e:84:f1:81:3a:26:88:4d:74:34:fc:2a:ad:
         52:95:fe:91:68:2e:07:cc:08:87:51:d1:f2:01:f8:a2:85:7d:
         8a:88:70:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----