Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/X9uKF--kZUkjo14GstBfx8INXvI.cer
File:                     X9uKF--kZUkjo14GstBfx8INXvI.cer (raw, json)
Hash identifier:          /UCNV6bMEsbFoEX0udnqcya3UPnR5TtzcGpiiAivvHU=
Subject key identifier:   5F:DB:8A:17:EF:A4:65:49:23:A3:5E:06:B2:D0:5F:C7:C2:0D:5E:F2
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856D1B86B326B1734C9FE11EDE81AAA69C
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/c0/821bbf-a024-457f-9b93-09108f3bf204/1/X9uKF--kZUkjo14GstBfx8INXvI.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/c0/821bbf-a024-457f-9b93-09108f3bf204/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 11:33:18 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 212.23.208.0/24
                          IP: 2a12:1a00::/29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6d:1b:86:b3:26:b1:73:4c:9f:e1:1e:de:81:aa:a6:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 11:33:18 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=5fdb8a17efa4654923a35e06b2d05fc7c20d5ef2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:af:ed:48:80:91:d0:ff:e2:f1:b0:0c:c4:6a:
                    f4:aa:45:bb:13:e0:4c:91:bc:87:34:de:06:67:9f:
                    1c:2b:89:68:94:6b:d7:14:7f:35:91:bb:7a:69:40:
                    d5:bc:46:86:a5:f1:25:21:24:ad:32:a2:db:53:b9:
                    0e:59:d3:06:54:97:75:5e:6e:ce:b9:b2:c8:42:2b:
                    29:e2:34:f3:c0:33:a0:c1:a4:31:73:ed:fb:31:ac:
                    51:ec:13:e4:e0:06:05:36:e1:60:ec:c4:91:a9:56:
                    a8:00:3d:9d:9b:d5:2b:45:f8:7f:fd:12:45:a0:60:
                    da:d0:b5:40:64:32:07:7c:67:91:c8:c7:d4:43:1f:
                    f7:9a:40:98:b2:01:ca:4b:51:7a:59:fe:f0:d8:6b:
                    8e:e2:9c:8a:44:eb:c3:61:08:33:59:bc:1d:b0:17:
                    ea:56:c1:b9:03:d0:b6:ab:a6:56:82:71:9f:0f:2d:
                    0a:7a:63:19:06:0e:5f:e0:35:13:96:c7:bc:12:f7:
                    1e:15:a3:ff:ca:40:38:c3:56:d0:f9:03:1c:17:07:
                    6c:66:b5:bc:af:b3:d3:76:61:f4:4d:df:3e:50:9e:
                    71:75:40:04:5f:e6:f1:7e:63:1f:d7:16:83:11:ae:
                    07:74:50:85:71:e6:69:c0:1f:06:c4:33:3b:60:ad:
                    4a:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:DB:8A:17:EF:A4:65:49:23:A3:5E:06:B2:D0:5F:C7:C2:0D:5E:F2
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/821bbf-a024-457f-9b93-09108f3bf204/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/821bbf-a024-457f-9b93-09108f3bf204/1/X9uKF--kZUkjo14GstBfx8INXvI.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.23.208.0/24
                IPv6:
                  2a12:1a00::/29

    Signature Algorithm: sha256WithRSAEncryption
         01:7d:c1:79:06:60:ca:63:04:f3:c2:3f:43:7c:0d:ee:f3:37:
         23:be:d8:0d:e0:b7:d8:ef:a7:1c:17:93:c7:bd:f9:f7:04:66:
         ba:5b:77:3d:a4:14:5a:3f:98:47:02:cc:4f:b1:46:ce:43:78:
         39:16:ba:ba:6a:7b:27:12:ac:89:f3:26:44:0d:48:11:01:2e:
         df:d2:dd:c1:01:a1:96:d8:50:df:a7:7f:75:97:6c:e8:b2:5e:
         a2:70:00:56:42:45:9b:e9:2d:c4:a6:f9:6b:b7:e3:dc:0b:f2:
         b9:ea:f0:1b:a0:fc:87:80:b7:bf:87:f3:6d:35:e3:b7:4f:e3:
         bd:72:7e:af:e0:cb:23:8b:21:9d:c9:b9:09:82:a7:02:97:38:
         c1:41:c4:cc:58:9d:2c:14:79:63:2e:cc:90:c0:94:0f:8f:cb:
         92:d8:cc:83:ac:56:1e:32:3c:34:bb:bd:bf:aa:18:e1:2c:22:
         dc:f6:45:db:61:66:67:f8:53:94:fa:09:6c:ee:a2:95:ca:26:
         6e:87:83:af:c6:b8:4e:aa:02:be:36:3b:3a:70:cb:50:e3:0d:
         2b:56:16:3b:7d:95:4b:18:8d:23:cc:eb:31:67:91:be:2a:51:
         98:14:4d:1f:d7:05:89:fa:84:a7:47:22:f9:6c:92:87:a6:44:
         29:a5:33:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----