Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1CduRlyUj06HUzumAU27q8z6sk.cer
File:                     e1CduRlyUj06HUzumAU27q8z6sk.cer (raw, json)
Hash identifier:          tX2DmKdTw3a1x8JBQGyhroo4HsU4yMA5rBPbHIfdX5I=
Subject key identifier:   7B:50:9D:B9:19:72:52:3D:3A:1D:4C:EE:98:05:36:EE:AF:33:EA:C9
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856F41EB9EFAC39768C616CBF2C969A4D9
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/dd/f71b3e-64bd-4587-9479-91eda98f8365/1/e1CduRlyUj06HUzumAU27q8z6sk.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/dd/f71b3e-64bd-4587-9479-91eda98f8365/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 21:34:29 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 146.19.184.0/24
                          IP: 2a12:80::/29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:41:eb:9e:fa:c3:97:68:c6:16:cb:f2:c9:69:a4:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 21:34:29 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=7b509db91972523d3a1d4cee980536eeaf33eac9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:30:ee:c6:4d:c0:38:7c:94:68:df:52:c1:43:
                    30:14:1d:55:34:79:dd:88:b2:06:21:a4:c0:06:5d:
                    21:cc:7c:92:58:d4:da:89:2e:3b:d2:78:a2:6a:47:
                    cd:ba:51:dd:cf:38:3b:05:c3:a1:19:d5:2b:f7:a1:
                    57:05:d1:21:73:64:dd:86:e2:b1:68:e6:b8:9b:66:
                    a3:29:ea:da:3c:59:23:f3:2f:50:2e:92:4f:b1:d2:
                    12:bf:2f:f6:c8:72:0a:e5:9a:23:02:93:5a:86:6d:
                    28:14:c7:29:bb:31:5e:66:ee:eb:9b:15:0d:df:c2:
                    65:35:db:1e:61:78:8c:ee:37:af:cf:09:08:71:55:
                    fc:c0:7a:b5:54:b6:8a:e2:0e:0d:08:e1:a6:e1:f2:
                    f4:c1:b3:4e:6d:0b:c8:f8:f9:08:ce:6b:3c:3b:02:
                    11:bc:aa:40:9a:16:98:82:bb:47:93:47:85:0f:fc:
                    bb:92:d3:de:2f:25:e0:4d:bb:59:46:74:13:f2:bd:
                    9c:a9:c1:f1:30:e3:9b:8d:9e:a8:85:fe:5e:92:a9:
                    71:68:b8:c9:bb:75:69:cb:3e:a9:96:df:db:8c:89:
                    e3:d9:bb:45:ac:17:14:16:92:2b:c7:61:98:b5:f6:
                    54:48:e4:93:8f:85:87:a8:1b:06:85:d8:37:a9:e0:
                    5e:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:50:9D:B9:19:72:52:3D:3A:1D:4C:EE:98:05:36:EE:AF:33:EA:C9
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/f71b3e-64bd-4587-9479-91eda98f8365/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/f71b3e-64bd-4587-9479-91eda98f8365/1/e1CduRlyUj06HUzumAU27q8z6sk.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.19.184.0/24
                IPv6:
                  2a12:80::/29

    Signature Algorithm: sha256WithRSAEncryption
         5d:e4:f9:e3:1a:27:9a:c6:00:b9:ea:2a:a6:98:f0:a3:41:a4:
         81:b2:ec:4f:98:0a:96:c3:22:71:24:96:c8:35:bf:93:52:16:
         95:3d:9e:f7:a2:77:c6:c5:04:99:ba:4b:d8:d1:65:f8:90:35:
         74:e0:30:ca:0e:4e:c0:a5:d0:b3:ef:50:8b:14:7f:52:7d:fc:
         5f:50:4b:94:c5:9a:b1:6b:7e:6e:d5:fe:30:98:27:a9:ed:7d:
         ec:fb:b5:7d:5a:81:96:f5:fa:6d:f8:36:44:8a:00:9e:0f:5b:
         0d:89:4c:ad:a1:e0:af:8d:7e:51:fa:96:cd:65:c7:35:8e:bd:
         2e:e9:1d:79:cc:cd:88:df:56:cd:61:41:a3:76:14:55:03:7e:
         53:1a:50:c5:4b:a0:22:13:05:e7:b4:7a:79:1d:c9:32:f6:4d:
         fe:4f:29:5f:a4:b9:98:ae:8b:34:21:18:96:99:35:be:c9:23:
         53:0d:db:08:16:0d:68:76:3c:71:81:96:f3:eb:30:9d:f7:33:
         af:92:64:88:82:85:19:2c:06:83:b3:3c:fd:50:c0:3a:67:31:
         bf:36:e4:21:ce:ca:e5:ca:1a:19:a4:1c:c9:7e:05:90:cc:fd:
         cb:84:bb:87:7d:b5:db:14:0d:42:50:46:f7:46:3a:ea:1f:93:
         40:f2:34:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----