Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d-Kz-zeq2h65p0Evr_SPTFo2-WQ.cer
File:                     d-Kz-zeq2h65p0Evr_SPTFo2-WQ.cer (raw, json)
Hash identifier:          8Ijd6U8XLz+vz7whLG0Az8mNVDW/wsMKuFWSd6DwSWk=
Subject key identifier:   77:E2:B3:FB:37:AA:DA:1E:B9:A7:41:2F:AF:F4:8F:4C:5A:36:F9:64
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856AF4CF454D8D4E9E7CF9BBD6435C22FB
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/02/f91dc9-4e8a-4701-8cfb-b7bcd3d871b8/1/d-Kz-zeq2h65p0Evr_SPTFo2-WQ.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/02/f91dc9-4e8a-4701-8cfb-b7bcd3d871b8/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 01:31:46 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    AS: 21286
                          IP: 80.79.96.0/20
                          IP: 2a03:4800::/32

Validation:               Failed, certificate revoked on Tue 21 Mar 2023 16:09:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6a:f4:cf:45:4d:8d:4e:9e:7c:f9:bb:d6:43:5c:22:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 01:31:46 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=77e2b3fb37aada1eb9a7412faff48f4c5a36f964
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:d1:55:c4:06:49:43:52:3e:2d:45:51:3d:af:
                    42:e8:0d:43:38:55:8e:e5:f3:dc:bd:d6:0c:5d:e5:
                    a2:86:bf:32:69:42:1c:7a:56:3e:c1:e2:1a:32:28:
                    c6:88:d2:f7:f2:09:32:95:7c:8d:99:df:bf:ed:a6:
                    75:d7:e3:c6:48:11:19:ee:89:96:73:1b:51:1d:9b:
                    70:96:1a:ee:45:40:29:c5:a3:32:96:bb:24:9c:22:
                    72:33:87:8c:cc:48:8d:3a:df:1c:60:99:78:05:a1:
                    2c:db:73:fb:18:58:a0:6a:b9:5a:18:75:b0:45:4e:
                    0f:09:cb:0d:b2:8e:77:76:cc:21:8d:ab:1d:fd:b1:
                    6b:47:03:6e:ba:58:13:08:9c:6c:7d:75:1a:17:89:
                    f7:ed:04:be:51:a7:07:5d:a4:97:28:f0:03:28:c9:
                    9a:dc:25:0a:37:c2:e6:4e:bb:0c:b2:dc:09:1b:fb:
                    10:4c:10:e8:80:f2:a9:53:5d:c7:7e:aa:aa:cf:4c:
                    4a:58:1f:6d:47:b2:03:e7:d7:97:5d:c4:40:f0:06:
                    64:0a:7c:67:b3:8f:58:9d:10:0c:c5:7a:d6:7f:80:
                    83:52:3a:79:c0:e2:f7:16:c2:68:84:dd:d9:65:04:
                    c3:fd:6c:da:42:e7:67:c8:99:13:11:c3:56:5b:b5:
                    6d:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:E2:B3:FB:37:AA:DA:1E:B9:A7:41:2F:AF:F4:8F:4C:5A:36:F9:64
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f91dc9-4e8a-4701-8cfb-b7bcd3d871b8/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f91dc9-4e8a-4701-8cfb-b7bcd3d871b8/1/d-Kz-zeq2h65p0Evr_SPTFo2-WQ.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.79.96.0/20
                IPv6:
                  2a03:4800::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  21286

    Signature Algorithm: sha256WithRSAEncryption
         2d:34:93:2b:6f:07:e3:fa:0e:65:a5:d9:f9:83:63:f4:48:03:
         2f:a0:f8:9e:3f:a3:1c:7c:fe:5b:4d:95:2e:2c:b9:44:7e:cc:
         c3:1f:19:3c:73:b8:0f:52:23:cb:9a:a1:7c:19:d8:44:a6:92:
         18:65:ef:d3:ed:de:95:7f:05:d8:bd:c9:d3:8e:cd:84:15:ab:
         6f:25:31:d5:a7:d9:65:f5:42:40:55:d4:61:c6:da:c9:cf:25:
         f1:f0:4b:88:f5:74:93:7f:c5:bb:94:73:72:0f:e5:2b:13:84:
         16:c3:2f:5d:4e:d6:df:e4:91:bd:61:9d:7c:04:f2:47:84:d6:
         98:47:2e:61:0c:df:87:1c:f4:88:9b:b3:88:3c:ad:e9:14:05:
         2f:5f:c5:da:47:66:f1:76:d3:37:8b:75:80:dc:6d:77:54:e2:
         61:0c:ec:d2:61:14:43:5b:b7:1b:6b:7d:6e:62:7f:f1:46:96:
         d4:d6:c2:45:bb:46:ab:34:d8:e1:b5:e7:a2:88:43:1c:34:78:
         ef:43:f1:ec:02:bb:8f:02:df:ac:59:6f:b3:cd:21:95:c5:ce:
         8d:ba:e6:a8:a1:89:ad:71:3d:3a:a3:5c:bd:cd:2d:d6:80:84:
         19:85:bb:c4:60:1c:f6:d8:d8:30:a0:4e:d6:63:a2:9a:43:ca:
         86:9b:15:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----