Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bo6dpD38eT1NVIgJe0ABukCUGQQ.cer
File:                     bo6dpD38eT1NVIgJe0ABukCUGQQ.cer (raw, json)
Hash identifier:          sfyaEa4Q6435p0ao3NjJWR4yi2bZJiJdzGeiQZFs5t4=
Subject key identifier:   6E:8E:9D:A4:3D:FC:79:3D:4D:54:88:09:7B:40:01:BA:40:94:19:04
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856D1B66F69501C4C35F7589616BC9A28A
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/d6/e16024-f7d1-4875-9efb-107056d8869e/1/bo6dpD38eT1NVIgJe0ABukCUGQQ.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/d6/e16024-f7d1-4875-9efb-107056d8869e/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 11:33:10 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 46.226.124.0/24
                          IP: 2a11:a700::/29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6d:1b:66:f6:95:01:c4:c3:5f:75:89:61:6b:c9:a2:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 11:33:10 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=6e8e9da43dfc793d4d5488097b4001ba40941904
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:90:e1:98:b3:43:fd:24:b5:32:5d:54:26:4d:
                    8d:ec:22:5b:e7:ab:2c:0a:8c:82:f2:75:1c:c2:46:
                    3c:12:35:9a:d9:56:80:98:c0:85:a9:0a:78:2f:7d:
                    22:fa:20:00:c2:7a:90:a2:a3:18:3c:97:d3:ca:0a:
                    13:11:f1:9f:b0:33:8b:1f:86:8f:74:d3:c6:7e:4a:
                    d6:42:1e:5f:3a:96:9a:2d:4e:f4:10:e1:14:b0:49:
                    95:61:92:bc:74:a3:b3:d7:4a:8c:bd:98:2c:15:46:
                    83:e2:00:07:ee:6b:bd:f3:31:1d:8c:dc:e7:b1:22:
                    c9:3d:9b:f4:1d:66:eb:37:e1:ab:bd:8b:37:9e:42:
                    9e:ee:44:a2:cc:82:31:07:b1:60:2b:1b:f3:2f:b7:
                    5f:8b:d2:68:89:94:c0:2d:c9:cf:ac:9f:90:1c:6f:
                    80:2c:d0:8a:38:0d:9e:64:25:5f:2a:01:0e:28:8c:
                    66:ec:b8:b0:8e:f3:42:1f:06:8d:91:09:da:0c:6c:
                    a1:41:4f:96:15:74:b7:87:21:bc:90:26:54:aa:80:
                    f1:67:29:a8:2e:96:42:72:ec:45:6d:55:13:12:d6:
                    9d:97:88:de:66:d6:f6:eb:19:da:c7:85:f3:1e:dc:
                    a2:b0:9a:0d:b4:48:58:79:97:97:65:cb:a9:c0:74:
                    92:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:8E:9D:A4:3D:FC:79:3D:4D:54:88:09:7B:40:01:BA:40:94:19:04
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/e16024-f7d1-4875-9efb-107056d8869e/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/e16024-f7d1-4875-9efb-107056d8869e/1/bo6dpD38eT1NVIgJe0ABukCUGQQ.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.226.124.0/24
                IPv6:
                  2a11:a700::/29

    Signature Algorithm: sha256WithRSAEncryption
         6d:6d:62:c3:08:7a:5f:fc:06:d0:2a:c8:3f:85:97:ba:bc:94:
         49:9f:cc:bc:7b:51:dd:73:3f:df:1e:b0:24:f3:c2:1a:27:82:
         84:49:12:04:cf:76:41:a8:a7:be:b5:6f:44:e4:58:7b:b2:d7:
         62:dd:ae:a6:7a:3e:9a:02:09:f3:a0:d4:b8:72:16:20:e7:32:
         b6:93:8d:64:01:3c:30:3f:f2:18:36:d4:1b:ab:d0:24:84:f3:
         a1:92:aa:e2:a7:9b:37:04:4f:31:c5:a7:9e:77:3e:f5:95:5b:
         62:da:f1:e8:d0:42:b7:51:98:1e:bc:0f:e2:af:d3:a6:2b:4a:
         7a:f5:f0:68:34:6d:a2:db:a0:90:f2:87:ab:d3:b8:9b:dc:13:
         43:1c:38:4b:13:64:60:34:b6:f3:dd:f9:91:84:ec:09:1e:25:
         7d:81:3b:85:e8:61:0a:35:c9:ba:8f:54:62:1c:14:f4:be:23:
         74:a9:6e:db:75:8a:63:65:ed:20:30:b1:72:20:b1:c3:da:ed:
         19:d3:30:cc:11:47:e0:bd:5f:a6:13:1b:6a:95:a3:ca:a6:78:
         a9:28:35:13:be:d3:72:94:a3:4b:2e:53:d2:8a:b2:f4:75:f8:
         e3:fc:54:f9:ad:02:87:53:e5:1d:31:42:1d:c6:d1:4f:23:19:
         22:0e:ba:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----