Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ZKaPyYy91YbBQZUAXicsNH151CM.cer
File:                     ZKaPyYy91YbBQZUAXicsNH151CM.cer (raw, json)
Hash identifier:          DZmyXWVUkRpp7eXIUxVcH3xq/Dgx7pJxpqWjSvWGOZc=
Subject key identifier:   64:A6:8F:C9:8C:BD:D5:86:C1:41:95:00:5E:27:2C:34:7D:79:D4:23
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018570FA93F3CEC0669CE82B6395CC1E3FC9
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/9d/d319ee-867c-4251-b1e2-89e2fbd41482/1/ZKaPyYy91YbBQZUAXicsNH151CM.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/9d/d319ee-867c-4251-b1e2-89e2fbd41482/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 02 Jan 2023 05:35:48 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 45.94.32.0/22

Validation:               Failed, certificate revoked on Tue 11 Apr 2023 11:45:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:fa:93:f3:ce:c0:66:9c:e8:2b:63:95:cc:1e:3f:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 05:35:48 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=64a68fc98cbdd586c14195005e272c347d79d423
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:c8:e6:40:8f:66:15:fc:2b:51:c3:9d:01:01:
                    f0:82:de:cc:e4:7d:b5:e4:ed:95:ad:cf:ca:63:a8:
                    b1:c3:bb:37:cf:c6:cd:3f:43:d6:e9:ba:42:94:86:
                    cf:86:37:59:56:67:96:09:2b:8f:7e:f8:ac:0c:61:
                    eb:8f:01:52:ba:6f:82:72:20:f4:06:49:c6:46:30:
                    42:77:f3:4e:ae:98:6a:cd:ac:13:e6:4b:e8:93:d1:
                    1d:3d:32:1e:25:98:5c:4b:da:f6:75:13:95:52:93:
                    c6:6c:00:49:53:10:d3:5a:eb:f2:6a:d5:1f:f7:56:
                    56:64:f5:d1:6c:b6:53:15:ff:d3:3c:b0:7a:20:67:
                    0c:86:b5:86:ac:c5:72:aa:13:12:f4:f7:c0:48:43:
                    2d:6e:b4:16:3c:4a:23:17:30:48:d2:8c:0f:31:f2:
                    20:86:2e:70:b8:1b:cd:e7:dc:95:dc:fe:e9:e0:1e:
                    5d:a2:6a:84:34:16:c0:ed:fb:5a:06:9b:67:bf:1b:
                    f4:5a:3f:1f:48:4a:e2:c0:47:ac:f0:eb:ef:13:df:
                    92:61:56:93:22:a3:87:67:ad:a2:ef:23:09:85:b2:
                    1f:4d:77:87:35:cf:df:bf:8f:34:47:ae:a2:65:d1:
                    f0:ed:d4:55:bf:bb:54:e5:1e:01:87:b7:6f:33:4e:
                    1b:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:A6:8F:C9:8C:BD:D5:86:C1:41:95:00:5E:27:2C:34:7D:79:D4:23
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/d319ee-867c-4251-b1e2-89e2fbd41482/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/d319ee-867c-4251-b1e2-89e2fbd41482/1/ZKaPyYy91YbBQZUAXicsNH151CM.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.94.32.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8d:a2:be:fd:4b:50:26:79:a0:b4:3f:86:fe:79:e5:76:65:4f:
         17:27:7c:34:fb:2f:4e:b0:89:06:0f:ba:41:a7:cf:f3:d7:42:
         8b:20:ee:62:44:0c:3c:ac:55:fd:f1:05:80:fb:e7:2c:6a:f9:
         16:b5:df:3b:6d:c5:2f:d5:fb:c3:75:cc:42:74:3a:aa:0b:df:
         a9:2e:64:2f:58:0e:32:58:34:69:04:e1:f2:c4:45:1c:13:e5:
         7e:3f:f1:ba:cc:3e:6b:20:e8:b8:d5:b1:63:bc:65:ef:78:3e:
         38:4c:75:b7:54:6d:5a:10:f1:c8:b9:f9:29:10:d3:8a:7a:62:
         f5:d8:40:62:d7:ce:92:eb:f6:7a:1b:38:78:f8:2a:5f:38:00:
         9b:52:b0:22:f9:a7:50:93:0f:ce:74:df:50:6f:41:6e:98:88:
         82:b9:89:57:b2:8f:5e:22:55:52:e5:3f:87:05:c0:8a:ed:f2:
         a2:94:a4:32:18:89:03:69:e2:4f:ec:83:ac:6f:6f:95:30:75:
         75:71:36:24:fb:a5:5c:f7:a1:f4:cc:11:91:3a:83:67:54:b2:
         0e:6c:13:b9:11:ef:49:35:88:82:33:4b:0b:8e:a4:ef:92:d0:
         27:18:8c:c3:7b:b2:97:5a:43:c3:ba:be:9a:e1:3f:3d:55:99:
         6e:b8:52:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----