Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/RFy34lYN4pSkmmNw90JYndy83nQ.cer
File:                     RFy34lYN4pSkmmNw90JYndy83nQ.cer (raw, json)
Hash identifier:          XgU0spf+UDR59C4Y62c5iIdAmMA1kJhplEwjcBV+qMo=
Subject key identifier:   44:5C:B7:E2:56:0D:E2:94:A4:9A:63:70:F7:42:58:9D:DC:BC:DE:74
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856E65912BFD3D9B7E4492C94CDD01D059
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/76/ac531f-49a8-4ccf-a1ab-7b14735ee234/1/RFy34lYN4pSkmmNw90JYndy83nQ.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/76/ac531f-49a8-4ccf-a1ab-7b14735ee234/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 17:33:48 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 146.19.221.0/24
                          IP: 2a12:680::/29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6e:65:91:2b:fd:3d:9b:7e:44:92:c9:4c:dd:01:d0:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 17:33:48 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=445cb7e2560de294a49a6370f742589ddcbcde74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:43:ae:0c:32:9c:6e:01:42:03:cf:df:07:cb:
                    eb:05:83:fc:17:99:f2:47:1e:5d:24:95:e0:35:58:
                    5f:d2:3e:3a:7c:f0:fa:a4:2e:0b:1a:e4:8b:65:c6:
                    60:94:16:b4:79:cf:c5:aa:62:6f:5a:08:2e:af:05:
                    00:cf:83:47:a0:cc:a7:aa:70:aa:c4:9e:20:14:d6:
                    e5:57:e4:d4:cf:20:26:b8:bb:a4:2e:c2:d0:e4:1b:
                    08:41:bf:6d:53:33:d4:84:03:dd:17:42:3a:a7:06:
                    0f:13:34:e5:c5:68:ff:4b:e9:17:a1:61:1c:cb:d3:
                    36:82:03:fc:c2:50:9f:17:44:61:a4:28:49:d5:45:
                    ea:d6:5a:45:d6:28:51:d6:38:05:97:23:ab:aa:07:
                    c5:de:de:62:ff:dd:a5:75:51:4f:f8:8a:17:75:6a:
                    eb:9a:53:97:70:94:ce:d5:4a:18:2e:51:a5:91:5f:
                    9c:d7:08:c3:80:3c:09:f7:f6:60:fb:b6:ce:b1:59:
                    dd:7a:da:3b:86:19:e4:92:fd:dd:c3:4e:92:72:b3:
                    f5:ec:3d:c0:04:4c:d7:bb:0f:04:62:4a:07:7d:02:
                    b5:e5:43:61:22:bf:0d:cf:be:0f:79:d8:cf:59:d9:
                    a3:23:82:f8:2d:97:c5:39:bc:c8:6d:4e:a6:47:79:
                    e8:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:5C:B7:E2:56:0D:E2:94:A4:9A:63:70:F7:42:58:9D:DC:BC:DE:74
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/ac531f-49a8-4ccf-a1ab-7b14735ee234/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/ac531f-49a8-4ccf-a1ab-7b14735ee234/1/RFy34lYN4pSkmmNw90JYndy83nQ.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.19.221.0/24
                IPv6:
                  2a12:680::/29

    Signature Algorithm: sha256WithRSAEncryption
         50:19:ad:72:73:a7:fa:ff:3b:61:be:f0:2d:f1:d9:c4:af:09:
         d8:dc:aa:32:fe:94:bc:d9:93:6b:fa:73:b9:86:73:7e:e2:f6:
         ae:89:40:eb:b7:72:99:2b:7d:68:d6:6c:3d:e8:90:1d:ce:62:
         08:65:df:f3:11:75:85:04:42:bc:66:24:f7:2a:a3:4b:e2:f1:
         70:ad:3a:fa:00:97:3d:b3:a7:ef:19:45:6e:ff:8b:22:b4:84:
         8f:f1:5d:3b:1b:a2:fa:74:68:d3:83:3e:d4:c7:73:02:d5:a4:
         43:0e:b0:e6:63:2c:74:e8:a7:1d:09:4f:74:4d:26:84:66:10:
         d0:c3:da:1b:83:14:27:d8:7b:23:6e:a9:10:ba:b0:26:8a:06:
         08:6d:56:48:d9:4b:72:89:0f:a3:55:ae:f2:05:09:ac:97:b7:
         42:3e:1e:2f:ac:17:9f:e1:99:6b:36:8d:a4:e7:91:1b:58:4c:
         d3:5c:0a:19:65:76:6d:d3:f1:2e:ed:4e:51:cb:0e:e1:1a:ce:
         5c:82:30:19:a1:a7:e1:ee:43:20:02:e6:8d:55:b8:8c:6d:74:
         29:a6:28:5d:b9:9c:bc:f5:c1:cf:7c:ca:ed:6a:74:93:43:b5:
         38:e8:1f:a0:19:8d:66:3d:ec:94:14:9a:b5:d9:63:99:69:6c:
         28:c8:74:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----