Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ZZR56F2YRDrpFqtL6IV06thBsBk.cer
File:                     ZZR56F2YRDrpFqtL6IV06thBsBk.cer (raw, json)
Hash identifier:          CuPHOpZi869DP8a6zRfrDANapBC0UwTDZCncLdH6fno=
Subject key identifier:   65:94:79:E8:5D:98:44:3A:E9:16:AB:4B:E8:85:74:EA:D8:41:B0:19
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856E6534F2FA8CF9B9F7861B34B93466D7
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/de/f4bf12-1441-4b28-83d2-b3fbb1b0677e/1/ZZR56F2YRDrpFqtL6IV06thBsBk.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/de/f4bf12-1441-4b28-83d2-b3fbb1b0677e/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 17:33:24 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 62.204.52.0/24
                          IP: 2a11:9640::/29

Validation:               Failed, certificate revoked on Mon 16 Oct 2023 07:35:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6e:65:34:f2:fa:8c:f9:b9:f7:86:1b:34:b9:34:66:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 17:33:24 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=659479e85d98443ae916ab4be88574ead841b019
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:84:53:0c:d9:f8:20:17:a8:94:29:f9:7f:33:
                    4a:fa:db:0d:bc:37:27:b3:7c:aa:ea:f7:1f:bb:f8:
                    23:e6:cc:e8:20:8d:b0:0b:3f:2b:35:30:fa:54:c5:
                    af:16:70:9e:52:3c:51:7c:85:bd:15:bd:41:bc:6e:
                    6e:47:a7:8d:51:80:e8:3f:b2:16:e6:c4:4c:72:50:
                    ff:ec:b7:71:93:43:0e:86:74:5e:5d:63:39:96:52:
                    69:89:07:eb:89:5b:47:f0:66:5e:22:cd:8d:31:75:
                    a4:6d:bb:95:22:7f:fe:09:73:dc:0a:2e:30:b0:1c:
                    4a:cf:c2:8c:78:10:c8:2e:6c:71:f5:df:ab:ed:3b:
                    2f:46:a1:11:8b:e1:37:bb:76:ab:8a:8b:dc:f0:0e:
                    20:f0:31:49:9f:25:0f:a7:01:f2:2d:b6:25:ee:7b:
                    f0:79:c0:27:93:49:a4:20:2a:f2:9b:27:cc:2b:3c:
                    63:9b:2e:3d:cc:45:b5:4f:bc:55:0f:fe:2c:88:4f:
                    f1:3e:40:12:79:e2:5e:d3:0d:ae:ae:f4:2d:ae:58:
                    10:b5:b9:8a:e4:97:9a:74:7d:37:35:86:da:b9:77:
                    69:60:50:bb:a0:51:80:5a:d8:30:6b:b1:7b:c6:23:
                    bc:d3:51:4f:cb:d4:1b:26:b3:8c:bf:a2:01:00:ae:
                    6d:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:94:79:E8:5D:98:44:3A:E9:16:AB:4B:E8:85:74:EA:D8:41:B0:19
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f4bf12-1441-4b28-83d2-b3fbb1b0677e/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f4bf12-1441-4b28-83d2-b3fbb1b0677e/1/ZZR56F2YRDrpFqtL6IV06thBsBk.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.204.52.0/24
                IPv6:
                  2a11:9640::/29

    Signature Algorithm: sha256WithRSAEncryption
         3e:00:94:8e:d7:50:fa:d7:5b:14:86:17:f2:06:17:18:d1:da:
         3d:ab:d1:9e:2d:79:3c:61:7d:b7:dc:7a:b7:d4:17:96:58:bf:
         f6:22:ce:6a:4a:68:bd:40:4f:a1:82:42:36:9a:1f:3b:bc:d2:
         9d:89:c7:43:e3:c1:34:e0:75:ff:f5:f2:cf:1c:f7:82:99:f2:
         db:55:71:2a:9e:2a:64:f7:d9:c0:b5:aa:a5:1b:ce:de:89:36:
         cb:68:19:35:9c:13:ae:82:8b:d7:68:b1:48:ab:25:a1:8b:65:
         a3:d1:9c:50:02:1f:4a:f6:b0:0b:3d:fb:f0:ba:7a:2a:b7:bc:
         bb:7b:cc:57:2b:1a:14:9d:25:a4:01:b0:47:29:74:0f:75:7e:
         86:c2:ec:ee:0e:b1:d2:b4:f0:c9:2f:84:15:41:d7:36:ca:d0:
         57:df:ea:9b:95:ec:18:69:ff:58:cb:5e:5c:75:db:36:7b:ad:
         04:2b:3c:b1:b8:2e:da:0b:0b:15:0d:00:64:41:1d:82:59:19:
         07:c2:65:25:17:ef:a4:cf:a2:27:25:ad:95:9f:e5:ca:1c:5a:
         a4:40:2c:7d:0f:9d:d6:94:46:8f:ef:4f:72:1b:58:3a:4e:57:
         61:fd:5e:2b:b0:92:86:3c:8a:10:05:ea:eb:85:73:3e:d1:be:
         14:d9:45:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----