Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f_pRq-o-H0Ij9UDvDYW43Znui_Y.cer
File:                     f_pRq-o-H0Ij9UDvDYW43Znui_Y.cer (raw, json)
Hash identifier:          agVpLOLqQfTR1viIoCHYQ4rc0qZzIAuco8zZ+Xchsuc=
Subject key identifier:   7F:FA:51:AB:EA:3E:1F:42:23:F5:40:EF:0D:85:B8:DD:99:EE:8B:F6
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018570FA6CD72E8725DD3870A2C7B9ABE5B1
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/d3/c1615d-d56f-4ba8-b0f5-1fc42e79eb07/1/f_pRq-o-H0Ij9UDvDYW43Znui_Y.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/d3/c1615d-d56f-4ba8-b0f5-1fc42e79eb07/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 02 Jan 2023 05:35:38 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 217.114.33.0/24
                          IP: 2a11:7440::/29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:fa:6c:d7:2e:87:25:dd:38:70:a2:c7:b9:ab:e5:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 05:35:38 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=7ffa51abea3e1f4223f540ef0d85b8dd99ee8bf6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:35:19:f2:b1:3f:f8:03:5a:49:a5:2b:57:d6:
                    11:f7:c1:88:08:76:b4:96:65:96:cc:cd:79:82:e4:
                    44:c4:c6:de:7e:3f:01:a9:52:db:f5:23:d8:5c:1d:
                    07:07:bd:b9:75:fc:eb:c1:ec:04:53:da:2b:5f:de:
                    c0:5f:b9:0b:d5:ad:cd:bb:81:bd:18:ef:4c:a8:ae:
                    a9:62:4a:b9:1d:7a:69:d5:a9:f1:aa:48:15:b8:78:
                    33:9a:38:62:0b:32:d4:bf:f6:c9:4d:e9:4b:40:fb:
                    12:f4:4d:84:a8:48:66:5b:df:30:68:ab:1e:15:74:
                    13:a9:ce:99:1f:4d:54:eb:1a:2f:be:11:58:5e:64:
                    27:0d:ae:2b:c2:ee:f9:ba:7f:fb:cd:14:0e:99:38:
                    fa:ca:70:5a:00:24:d1:fe:f8:a1:46:e7:fb:fd:b7:
                    4f:78:6e:60:05:f6:b6:6c:30:69:e5:2e:b1:98:f9:
                    4f:8c:0d:00:82:36:68:32:9b:b0:6d:2f:4d:cd:e5:
                    0b:f3:f1:0d:ab:d4:d5:45:ca:0f:c3:4c:8a:65:b3:
                    99:91:ec:85:63:fd:cd:1e:8b:07:5b:ca:31:94:ef:
                    e6:c2:8b:34:02:17:bf:f7:ff:5b:22:65:70:ec:95:
                    3b:d5:db:e3:8e:e9:c7:75:6a:76:02:02:09:79:a9:
                    b8:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:FA:51:AB:EA:3E:1F:42:23:F5:40:EF:0D:85:B8:DD:99:EE:8B:F6
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/c1615d-d56f-4ba8-b0f5-1fc42e79eb07/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/c1615d-d56f-4ba8-b0f5-1fc42e79eb07/1/f_pRq-o-H0Ij9UDvDYW43Znui_Y.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  217.114.33.0/24
                IPv6:
                  2a11:7440::/29

    Signature Algorithm: sha256WithRSAEncryption
         80:e1:e8:1c:14:da:6e:64:3a:78:ad:76:28:a2:dc:10:69:97:
         d4:6d:4f:ca:24:88:fb:59:26:1b:44:82:35:71:ea:e4:f0:ae:
         ce:08:08:04:ef:6e:01:1f:93:bd:c7:10:4d:f5:60:24:90:eb:
         68:91:07:dd:4a:0f:a0:2f:0b:f2:04:4a:2b:cb:d6:7f:a2:59:
         2d:cb:58:5d:77:c3:4f:18:17:31:1b:50:3f:1a:64:f1:e8:ef:
         55:b0:56:43:a8:60:1b:0b:9e:b8:df:e3:52:f2:84:c1:5e:f8:
         bd:30:2f:e1:71:6f:b4:c5:46:2c:84:f9:dd:ec:7f:e0:d3:c3:
         ca:ed:95:02:ea:17:42:e4:0b:a8:2c:6c:d6:86:40:b8:fb:75:
         2f:0d:4d:0c:ce:7c:43:95:fc:b5:93:e6:36:af:c9:5a:aa:1f:
         3c:e9:f6:7a:18:ca:35:24:5e:a3:42:82:5b:71:a1:fd:8f:ff:
         33:4d:a3:b2:00:7e:21:af:b6:af:fe:32:25:6b:fa:8a:2f:43:
         6e:8d:fa:e1:e6:0a:f8:4b:b4:af:47:33:7c:1b:72:a5:e2:dd:
         5d:46:94:16:03:87:c0:a9:79:03:9b:60:01:d1:6e:a9:d0:0d:
         80:90:fc:af:1d:33:c3:28:b7:fa:94:45:49:24:ad:e2:46:56:
         78:b4:f3:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----