Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/P1AbS4r8I5ziVs0dOR1xdPk7JRU.cer
File:                     P1AbS4r8I5ziVs0dOR1xdPk7JRU.cer (raw, json)
Hash identifier:          /o5rGnQxPMLzy4+D9k5slYYAMZau876ncNByLDUVTjs=
Subject key identifier:   3F:50:1B:4B:8A:FC:23:9C:E2:56:CD:1D:39:1D:71:74:F9:3B:25:15
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856BD123B6BC345D505C19FC65357AF314
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/22/99488d-3bd6-462a-9cc8-9bc3816a0e15/1/P1AbS4r8I5ziVs0dOR1xdPk7JRU.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/22/99488d-3bd6-462a-9cc8-9bc3816a0e15/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 05:32:26 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 194.26.137.0/24
                          IP: 2a11:5740::/29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6b:d1:23:b6:bc:34:5d:50:5c:19:fc:65:35:7a:f3:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 05:32:26 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=3f501b4b8afc239ce256cd1d391d7174f93b2515
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:63:e4:58:4a:65:26:10:e6:d3:38:eb:e2:60:
                    42:d4:24:a1:62:29:5a:69:72:a6:6f:9c:72:fa:e5:
                    0c:30:db:f3:24:56:19:6c:9c:5a:b6:8b:34:f7:08:
                    52:64:de:45:44:34:7d:6c:34:cb:d3:fc:10:61:87:
                    3a:78:f4:51:39:dc:83:a6:6b:05:36:f1:14:7b:4c:
                    d5:13:c7:c4:54:2a:0d:78:19:66:f3:e2:bb:9e:4f:
                    d8:5c:bf:44:1c:90:3d:bb:81:1b:60:0b:8b:9a:93:
                    76:f2:a9:fc:be:95:05:e0:5f:4c:ac:86:aa:c2:cd:
                    6c:c7:ae:c5:12:b9:4a:71:b2:2e:71:12:32:8e:a2:
                    9e:70:bb:46:97:9e:c7:83:0b:48:95:72:b0:0b:4c:
                    33:e4:b7:25:98:38:5c:17:32:07:79:58:55:04:5b:
                    64:29:d5:50:fe:10:92:59:43:0f:7b:df:e3:0e:dc:
                    6f:ed:ae:da:01:ff:0b:3d:7a:8f:ad:d3:9e:2b:47:
                    bb:a5:d3:d5:7f:2f:b6:b3:3f:8a:82:2d:b0:49:1d:
                    3e:d3:d0:fa:14:fd:21:b7:c7:a6:04:75:fc:1d:46:
                    2a:3a:84:22:69:54:6b:4d:f8:0b:47:1a:99:f6:72:
                    d6:47:a0:7d:98:40:ec:6a:ec:d2:3c:bc:f0:ad:1c:
                    4c:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:50:1B:4B:8A:FC:23:9C:E2:56:CD:1D:39:1D:71:74:F9:3B:25:15
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/99488d-3bd6-462a-9cc8-9bc3816a0e15/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/99488d-3bd6-462a-9cc8-9bc3816a0e15/1/P1AbS4r8I5ziVs0dOR1xdPk7JRU.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.26.137.0/24
                IPv6:
                  2a11:5740::/29

    Signature Algorithm: sha256WithRSAEncryption
         b0:94:ab:7a:d5:e0:19:4f:56:43:b2:ff:34:b7:b1:3a:8f:de:
         e7:65:ca:d2:5a:af:b5:e0:2c:5b:40:6e:99:0c:8b:27:89:1f:
         eb:3e:f2:66:db:b5:1d:8f:00:5a:5c:0c:4a:fc:35:35:0e:88:
         6a:91:5f:28:4e:fe:70:ef:33:22:85:cf:b2:0d:3c:d7:eb:b1:
         c9:2d:6e:89:2b:a0:92:99:5e:79:0f:54:31:3c:eb:16:3a:ae:
         14:aa:fb:46:03:6d:e7:03:3c:f1:54:fe:93:9f:f6:b1:fa:93:
         02:45:d1:ad:6c:f2:fe:c2:03:e8:b0:14:64:36:2f:fd:5a:37:
         a2:7b:08:db:7a:ca:15:21:6d:75:14:bf:25:14:83:a4:a2:ba:
         f7:ce:6e:00:30:73:65:ed:f1:78:0b:45:c9:7a:8a:de:2f:2c:
         7e:bf:8a:23:ec:34:3f:92:cc:0f:4f:ca:31:b6:f0:4a:3a:75:
         0d:15:82:56:7b:f9:e8:68:46:bb:e2:03:8f:b8:ab:03:e3:6b:
         70:ad:39:a0:74:56:eb:f5:61:4d:da:68:7e:5e:4f:48:47:82:
         f4:34:b1:9c:30:73:b3:7b:5e:09:95:bc:5a:27:50:9b:9c:bf:
         39:bf:1c:a5:24:53:28:62:6b:83:b9:df:24:e7:60:81:22:31:
         0f:05:0a:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----