Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/clUvPoe9QRNWViJE8vtQ76Um0gM.cer
File:                     clUvPoe9QRNWViJE8vtQ76Um0gM.cer (raw, json)
Hash identifier:          A1TwYOkLkmGMQtUCFG0Z1H4AsVIGGgcf9genNve0i8Q=
Subject key identifier:   72:55:2F:3E:87:BD:41:13:56:56:22:44:F2:FB:50:EF:A5:26:D2:03
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01857CC74AAF4875EE48C64684135CAF095D
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/10/6ee0de-06cb-4550-99da-23bf08171175/1/clUvPoe9QRNWViJE8vtQ76Um0gM.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/10/6ee0de-06cb-4550-99da-23bf08171175/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 04 Jan 2023 12:35:13 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    AS: 211912
                          IP: 185.235.142.0/24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:7c:c7:4a:af:48:75:ee:48:c6:46:84:13:5c:af:09:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  4 12:35:13 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=72552f3e87bd411356562244f2fb50efa526d203
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:b8:43:69:cf:a0:c9:73:17:f7:f8:02:80:b0:
                    f2:c8:20:7b:fd:46:f1:16:a1:05:9a:50:b1:e4:f9:
                    44:82:1c:fe:21:af:79:eb:6e:37:d9:cc:5a:63:dd:
                    76:a9:e8:a6:01:01:a2:58:d6:a2:f5:6e:de:82:0f:
                    25:2b:89:96:1e:f7:a5:07:aa:c7:11:75:ee:25:60:
                    19:0d:d1:f0:7a:74:b8:ba:44:f2:a9:32:75:6f:d7:
                    ca:e8:10:71:02:2f:1f:74:69:37:31:bd:ff:7c:8d:
                    53:15:a7:88:9a:48:7c:fa:74:91:a1:3d:ae:ee:9a:
                    f0:68:c4:fc:3e:71:ad:d0:9e:8f:2c:6b:1a:41:4d:
                    9d:1e:59:41:4b:60:95:ad:2c:55:85:de:85:de:ce:
                    4d:03:20:b9:d6:fe:01:f6:8e:bc:75:46:15:72:93:
                    f0:da:76:9e:ae:8e:bc:bb:29:eb:3e:f4:af:cc:24:
                    47:df:18:5b:bd:4f:ec:c8:56:21:2d:f7:c3:01:04:
                    22:a4:96:79:0b:cc:c8:09:09:01:05:50:06:ba:23:
                    30:72:ce:76:af:bd:91:7b:fd:3c:00:64:3a:a6:83:
                    ee:ab:ba:5a:cd:50:1a:88:e4:aa:b9:7a:93:ae:b2:
                    f7:0e:01:42:c9:6b:f1:9b:0e:7f:07:39:4e:31:9d:
                    0e:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:55:2F:3E:87:BD:41:13:56:56:22:44:F2:FB:50:EF:A5:26:D2:03
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/6ee0de-06cb-4550-99da-23bf08171175/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/6ee0de-06cb-4550-99da-23bf08171175/1/clUvPoe9QRNWViJE8vtQ76Um0gM.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.235.142.0/24

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  211912

    Signature Algorithm: sha256WithRSAEncryption
         1a:b5:a7:5d:6d:6c:e0:aa:f1:c6:a4:bc:d3:e8:b1:19:25:ed:
         71:23:96:40:2f:e2:37:d6:9a:f7:18:fb:d9:ff:cb:bd:da:14:
         31:82:46:37:7a:b5:ba:3b:89:93:1a:07:4a:25:aa:8d:ca:ce:
         62:44:cc:56:32:d1:31:af:cf:ef:cf:b4:ef:e9:1b:4b:d3:63:
         15:bf:a8:83:cb:e8:5d:0c:ea:1e:8b:b6:23:f5:78:ca:cd:66:
         7c:a1:5b:5c:85:73:6d:de:f5:d0:3a:eb:ff:3a:75:76:50:f1:
         2c:67:42:a7:be:2c:82:15:47:b4:c4:d7:87:34:d0:1a:67:fe:
         96:33:fa:1b:ca:25:76:28:18:40:ca:9c:16:4b:5a:a0:de:d0:
         e7:20:be:b3:79:26:cb:2f:a5:b1:d7:79:fa:f6:71:35:4a:d3:
         2c:39:ac:2d:26:db:03:fc:d2:26:49:8e:0f:ea:fa:7d:13:f0:
         aa:e1:33:dd:b8:29:b7:9b:95:f9:93:d0:9c:9a:24:57:14:56:
         e7:0c:45:7e:0e:46:7d:16:e8:37:88:00:ef:83:ec:5c:9d:db:
         a8:3c:e0:de:86:73:45:58:be:ef:ba:ce:0d:43:c1:15:76:f8:
         64:71:be:0c:f8:87:56:07:8e:eb:31:cb:02:77:88:57:9a:02:
         35:43:e0:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----