Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/YPZuVPaUvOfjLIoyYTblwoOjhJg.cer
File:                     YPZuVPaUvOfjLIoyYTblwoOjhJg.cer (raw, json)
Hash identifier:          0HS1Zo8dcmax0WQv1RIMzPQuRq2apoXuEYSEr3LFrDE=
Subject key identifier:   60:F6:6E:54:F6:94:BC:E7:E3:2C:8A:32:61:36:E5:C2:83:A3:84:98
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0185701CD7CA58EA7D997137991BD26811BD
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/41/3ea867-df9a-48e0-b8e3-5559915f3759/1/YPZuVPaUvOfjLIoyYTblwoOjhJg.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/41/3ea867-df9a-48e0-b8e3-5559915f3759/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 02 Jan 2023 01:33:36 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 146.19.132.0/24
                          IP: 2a12:ad00::/29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:1c:d7:ca:58:ea:7d:99:71:37:99:1b:d2:68:11:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 01:33:36 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=60f66e54f694bce7e32c8a326136e5c283a38498
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:ea:16:20:26:53:d3:77:db:e3:b1:0f:1f:82:
                    90:b8:ae:2f:d2:eb:2e:89:fa:d3:7a:b8:91:71:b7:
                    6b:03:50:b4:7c:a4:90:3f:d3:3f:df:7c:c9:2c:03:
                    f4:c4:84:08:f2:64:60:98:10:a4:17:92:f6:8e:73:
                    33:e8:19:0d:a1:02:ea:69:ee:58:8d:06:9b:7f:4b:
                    e8:74:da:09:d4:42:cf:87:4f:e7:fc:0c:a9:91:4a:
                    2a:27:17:d6:24:34:e8:44:9a:05:46:1b:30:57:31:
                    34:1a:d3:26:b4:e3:3f:8d:68:9f:37:71:c8:db:f4:
                    4e:90:0e:85:08:d0:83:f5:13:f3:76:10:17:c4:60:
                    07:a2:55:0e:7b:ff:05:b3:94:14:03:fe:79:2c:35:
                    fb:00:60:b6:33:dd:a5:a2:6a:9e:29:16:bb:2a:26:
                    fd:47:6e:ca:ef:9d:57:80:de:d8:ae:16:56:15:40:
                    32:e2:d4:fd:d4:76:81:0b:4c:26:ff:4a:8f:06:6c:
                    e0:de:2c:ab:03:2d:00:11:cc:5a:8c:66:14:39:48:
                    b4:f5:d7:39:4e:c3:3d:a2:f8:0a:6a:80:c7:7d:0e:
                    88:4a:9e:b1:f6:06:2e:5c:d8:b8:7c:2e:1e:09:7c:
                    72:94:33:de:c2:2d:39:6b:a1:a0:13:83:0e:eb:67:
                    41:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:F6:6E:54:F6:94:BC:E7:E3:2C:8A:32:61:36:E5:C2:83:A3:84:98
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/3ea867-df9a-48e0-b8e3-5559915f3759/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/3ea867-df9a-48e0-b8e3-5559915f3759/1/YPZuVPaUvOfjLIoyYTblwoOjhJg.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.19.132.0/24
                IPv6:
                  2a12:ad00::/29

    Signature Algorithm: sha256WithRSAEncryption
         59:ad:e5:f8:c1:3d:eb:f1:5b:a9:20:a3:e6:ed:07:14:dc:d2:
         5d:58:a9:6c:f3:8a:3a:b9:e7:d2:aa:04:fb:2b:8d:5d:8f:91:
         de:84:21:0e:ff:bd:68:37:f8:93:49:fb:94:75:bc:dc:24:72:
         11:30:4b:48:9c:b1:69:b8:37:e1:0e:b1:69:87:f0:ae:75:13:
         c5:0a:db:0e:e5:95:0c:87:42:c7:03:e4:f3:7c:73:78:b0:6e:
         28:a4:26:06:5b:d6:bf:b0:9a:e4:7c:df:f7:f7:d7:22:9d:b1:
         1c:15:95:de:00:b9:a9:56:7f:4d:52:5f:65:50:e7:a2:a2:88:
         88:38:25:7b:9d:d9:40:41:8b:ad:5d:64:3c:d3:7b:4b:34:17:
         d9:ba:e7:97:11:87:6f:0f:b3:11:03:ea:1b:36:d4:bc:74:a8:
         87:b5:7f:0d:f0:61:1c:24:ed:f4:7c:49:d7:72:54:8b:06:4e:
         1e:b1:35:de:ea:a7:31:78:bf:cd:7a:50:70:50:94:df:8b:79:
         43:e7:3b:e8:d2:55:95:bf:fa:51:cc:76:21:65:94:49:0d:e6:
         73:99:a7:a1:5d:51:03:3e:ad:43:ec:1a:3b:41:ce:23:3b:a6:
         42:59:ae:58:ea:d8:77:41:e2:45:32:23:8f:87:0c:ba:e4:cb:
         ec:8d:e6:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----