Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/TCl_WCiqThyOBB6dvqer05tVhNc.cer
File:                     TCl_WCiqThyOBB6dvqer05tVhNc.cer (raw, json)
Hash identifier:          6gA9Hn9s2eg9AVdMOjb9leckMSi/VdQg3S6Ba6kC9Vc=
Subject key identifier:   4C:29:7F:58:28:AA:4E:1C:8E:04:1E:9D:BE:A7:AB:D3:9B:55:84:D7
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0185DF1BA0C51D6F57E0F9E1AF4FB782F4CC
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/e7/9264a0-ed7b-4712-a910-c7f698dedd68/1/TCl_WCiqThyOBB6dvqer05tVhNc.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/e7/9264a0-ed7b-4712-a910-c7f698dedd68/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 23 Jan 2023 14:50:07 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 84.246.111.0/24
                          IP: 2a13:c400::/29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:df:1b:a0:c5:1d:6f:57:e0:f9:e1:af:4f:b7:82:f4:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan 23 14:50:07 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=4c297f5828aa4e1c8e041e9dbea7abd39b5584d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:ed:d2:aa:d9:dc:b0:9d:98:6a:98:4d:00:eb:
                    ba:a4:c2:75:c3:51:05:7a:30:8d:bd:03:c0:1d:d6:
                    ec:e7:44:c6:60:63:83:84:3b:48:3c:58:16:85:1b:
                    8c:c7:49:bd:c3:d3:1e:91:b4:ea:a7:f2:e8:18:49:
                    7a:b3:3d:86:a3:f3:b0:00:b4:eb:fb:c5:45:d9:8b:
                    cc:25:b4:29:3c:02:c0:9c:65:6c:2b:11:e1:ea:fa:
                    d6:80:c9:75:9d:ce:e0:ba:1d:3c:cf:dc:88:1b:56:
                    39:bd:52:aa:1e:0e:ff:3f:27:40:46:d0:c3:d8:fb:
                    07:35:1e:c7:3f:4c:cf:cb:b1:a7:e5:23:57:f7:08:
                    c8:da:31:da:ff:8c:e0:e7:e6:1a:ea:7b:83:d8:7b:
                    d7:75:82:4d:2e:95:b7:2d:78:61:fe:cd:75:1a:aa:
                    48:05:44:1c:59:1e:2a:17:88:19:53:b9:73:da:9e:
                    b0:df:df:ef:34:b0:2d:5f:71:9f:d2:6b:1a:4c:08:
                    a7:9e:f1:b0:9c:29:41:20:5c:1a:04:4b:ce:a0:07:
                    b2:13:33:08:ea:fd:73:54:86:bb:0f:18:98:92:99:
                    57:e5:dc:bb:08:14:55:f4:73:5a:b0:4f:95:11:cd:
                    8d:9a:a8:92:b8:cd:5e:80:16:83:e4:73:3d:0e:87:
                    eb:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:29:7F:58:28:AA:4E:1C:8E:04:1E:9D:BE:A7:AB:D3:9B:55:84:D7
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/9264a0-ed7b-4712-a910-c7f698dedd68/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/9264a0-ed7b-4712-a910-c7f698dedd68/1/TCl_WCiqThyOBB6dvqer05tVhNc.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  84.246.111.0/24
                IPv6:
                  2a13:c400::/29

    Signature Algorithm: sha256WithRSAEncryption
         27:ef:6e:58:cf:39:26:98:aa:a0:14:76:69:9f:fb:ba:0a:f8:
         c9:3a:d6:7d:1b:cb:75:d8:9f:9e:65:3b:b7:55:83:45:f6:66:
         ed:58:1a:49:05:7a:92:f4:3b:25:b1:ea:54:16:4a:98:f7:80:
         13:d6:a3:cc:04:e3:86:03:6b:a0:1e:d6:97:50:b5:bc:dd:a2:
         54:60:70:cb:4d:d1:f7:48:16:bc:28:6b:e0:45:83:65:48:90:
         1e:c7:1e:2d:b3:a6:87:94:34:ed:30:6e:02:b5:1f:2d:67:54:
         ab:2a:9e:22:2e:31:36:56:0a:fa:f5:10:05:96:5d:d7:ac:f2:
         86:35:ca:aa:2f:bb:9e:01:18:b8:e2:fa:60:05:23:0d:d5:e7:
         6d:70:34:a6:90:74:98:02:3f:c9:e0:e7:8e:cc:63:13:22:c5:
         10:d8:69:c4:c0:a8:ec:a2:dc:a8:77:6a:aa:3a:e9:30:44:b4:
         5b:39:9b:d5:88:c9:de:21:53:b1:85:87:d7:61:1b:c0:b6:19:
         ea:ac:b2:31:4b:ae:0a:78:8b:d2:71:f9:aa:38:7d:4a:b1:65:
         60:f1:b0:b6:2d:98:a0:b7:ca:3a:c8:bd:eb:e6:d8:5c:61:21:
         6f:8c:55:58:36:6a:ba:12:ac:4b:e4:77:7a:c2:bf:18:a6:5f:
         d8:25:32:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----