Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aOB9dlla_NLSno068JyU1KDdg0g.cer
File:                     aOB9dlla_NLSno068JyU1KDdg0g.cer (raw, json)
Hash identifier:          V7pC26BbnuJHyDr4DnkbLUQ0FPx9bWb9YUjqC9Zn/xg=
Subject key identifier:   68:E0:7D:76:59:5A:FC:D2:D2:9E:8D:3A:F0:9C:94:D4:A0:DD:83:48
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0185701E017F596CBB3C2AF545E1304E2F6D
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/f1/219b59-ea14-44af-877e-99817fd559ca/1/aOB9dlla_NLSno068JyU1KDdg0g.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/f1/219b59-ea14-44af-877e-99817fd559ca/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 02 Jan 2023 01:34:52 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 62.106.80.0/24
                          IP: 2a11:8d40::/29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:1e:01:7f:59:6c:bb:3c:2a:f5:45:e1:30:4e:2f:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 01:34:52 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=68e07d76595afcd2d29e8d3af09c94d4a0dd8348
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:bb:5a:3d:c1:04:3a:d1:7a:0e:61:8b:fd:d9:
                    27:8e:0e:75:f6:ec:d1:dd:01:dd:79:40:1a:18:a1:
                    03:72:a9:d3:e0:ee:74:17:b2:7f:b2:38:5e:ca:ef:
                    0e:59:8e:e1:d6:3b:61:5e:3c:0c:c6:a5:e6:12:0e:
                    13:d6:27:90:e8:aa:36:aa:d1:e2:5e:9f:f6:fc:5d:
                    8a:1e:11:c2:4f:2f:1b:43:bf:5e:6b:6f:da:03:58:
                    c3:be:20:cd:55:31:92:de:a9:b3:a2:bb:c2:e6:2c:
                    7c:fb:75:12:27:74:4a:54:a3:c1:18:7c:f7:93:60:
                    98:7e:76:10:71:29:d7:73:28:8a:c5:fd:a1:a4:de:
                    f9:15:15:28:b1:bf:f7:f5:89:e7:0d:58:4c:04:b2:
                    ed:a6:f2:54:da:5f:40:e7:91:e5:83:ea:c4:f2:87:
                    17:d6:17:8b:49:76:e2:31:b9:83:86:0f:2f:f5:74:
                    ee:c9:71:49:80:52:25:ae:2b:c8:88:61:0b:ae:2c:
                    b2:9d:35:86:e0:67:d0:dc:77:9f:4b:0a:36:92:b4:
                    45:e8:dd:f1:5e:3b:9b:e5:65:8f:d9:43:61:df:8d:
                    25:0f:42:46:0a:93:3c:3f:54:33:f6:39:1a:ac:5e:
                    84:19:08:23:b0:3e:80:f1:f0:12:66:b3:7a:f1:9b:
                    17:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:E0:7D:76:59:5A:FC:D2:D2:9E:8D:3A:F0:9C:94:D4:A0:DD:83:48
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/219b59-ea14-44af-877e-99817fd559ca/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/219b59-ea14-44af-877e-99817fd559ca/1/aOB9dlla_NLSno068JyU1KDdg0g.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.106.80.0/24
                IPv6:
                  2a11:8d40::/29

    Signature Algorithm: sha256WithRSAEncryption
         28:39:7a:bc:68:59:30:43:90:f2:89:ff:b7:88:9d:b7:87:d1:
         4d:07:82:37:c8:ee:78:6a:61:07:1c:60:88:10:b8:50:60:64:
         c8:ad:6c:4d:bd:70:47:b4:e3:f3:d6:80:b0:05:73:76:63:7c:
         88:91:d7:43:d8:11:72:a9:be:d5:9d:36:78:06:ca:30:0f:6d:
         cf:af:20:e7:1e:78:44:41:02:1e:37:69:3c:c6:dc:c2:5f:ed:
         05:3d:c2:da:b1:57:b0:b7:34:2c:a1:34:e4:8a:fc:08:a5:26:
         bb:92:48:f9:58:eb:4e:41:66:9a:68:66:af:a7:71:ea:6e:c1:
         b2:d9:84:02:8c:6b:b1:ec:26:05:42:4d:92:78:dd:5b:0f:94:
         5b:90:c7:d7:56:dd:e2:0a:c7:c2:38:a4:09:c5:71:15:ac:bb:
         98:ba:4f:29:71:72:b8:72:ae:65:5e:e8:d9:c2:9a:5b:89:33:
         bf:eb:c4:82:b6:d3:64:96:e7:00:d0:2c:2e:9e:be:c8:61:c9:
         9d:27:6c:a2:e4:52:be:38:a9:bf:e0:ab:17:18:71:46:52:69:
         8e:a1:55:08:28:37:b4:f6:75:a8:5d:5c:71:2c:ae:46:9b:7e:
         a5:80:79:94:45:a9:1a:1c:86:1b:0a:54:f1:0d:de:f2:bd:4e:
         3d:f6:1e:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----