Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fgzO9rwOeqzd0g2vWKYAjkqANag.cer
File:                     fgzO9rwOeqzd0g2vWKYAjkqANag.cer (raw, json)
Hash identifier:          kf7Bx/tLeRa6ivC8v33SlLB7gKkYhlDWTwopL01BzVI=
Subject key identifier:   7E:0C:CE:F6:BC:0E:7A:AC:DD:D2:0D:AF:58:A6:00:8E:4A:80:35:A8
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018570FB07041C355759ADD063C12E542BE6
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/52/39d818-0ae0-4a41-bc10-cca70b2a7d34/1/fgzO9rwOeqzd0g2vWKYAjkqANag.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/52/39d818-0ae0-4a41-bc10-cca70b2a7d34/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 02 Jan 2023 05:36:17 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 188.93.119.0/24
                          IP: 2a11:1240::/29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:fb:07:04:1c:35:57:59:ad:d0:63:c1:2e:54:2b:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 05:36:17 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=7e0ccef6bc0e7aacddd20daf58a6008e4a8035a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:3d:22:ee:11:15:53:28:1d:c7:b4:96:f1:0d:
                    59:36:75:25:af:c2:c1:52:4c:72:2a:2e:dd:02:db:
                    e9:f5:48:8d:f2:5e:1d:f8:3b:66:f9:db:06:e8:38:
                    b3:a6:c5:6e:08:7b:b4:6d:68:d4:8f:cf:35:24:11:
                    af:9b:b5:c6:52:dc:d4:93:aa:28:ef:a6:3c:58:1a:
                    cb:cf:8a:84:f5:23:9d:08:8c:43:4f:37:d4:e9:84:
                    1c:e9:3a:ad:d1:c0:24:bd:06:ad:2b:54:b9:cf:e5:
                    32:80:3d:e3:1c:ed:c1:e7:4b:42:11:44:3e:0f:1c:
                    05:84:2d:11:e5:d9:35:4b:74:cf:12:e5:fb:73:07:
                    a3:95:1d:ce:74:42:97:8e:70:35:b7:98:f1:f4:69:
                    83:8c:0c:ca:e8:cc:c6:13:5c:bf:a4:83:0f:f9:86:
                    56:b8:67:40:28:b2:b7:85:64:f6:9d:4b:34:69:66:
                    a5:41:ba:83:18:8f:a4:87:08:cf:a2:12:82:87:e2:
                    6d:56:19:ab:84:b3:f0:e0:12:24:93:eb:4a:5c:22:
                    f1:dc:24:e5:e7:6d:bf:b4:ab:72:2b:b1:a6:8a:24:
                    ae:cc:45:8d:dc:b0:21:92:70:08:e6:68:55:ac:8d:
                    e4:a2:58:ca:15:f3:6a:f3:e7:0e:d3:a8:d4:06:6a:
                    bb:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:0C:CE:F6:BC:0E:7A:AC:DD:D2:0D:AF:58:A6:00:8E:4A:80:35:A8
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/39d818-0ae0-4a41-bc10-cca70b2a7d34/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/39d818-0ae0-4a41-bc10-cca70b2a7d34/1/fgzO9rwOeqzd0g2vWKYAjkqANag.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  188.93.119.0/24
                IPv6:
                  2a11:1240::/29

    Signature Algorithm: sha256WithRSAEncryption
         47:95:f2:09:f5:da:73:87:33:47:8d:d6:30:64:fa:e2:2a:a4:
         ce:54:d7:c2:1c:c4:b0:d3:1b:4e:53:b5:56:18:77:f9:41:ad:
         87:77:3a:89:fd:24:52:e8:f0:4a:f0:8c:cc:63:75:82:0d:99:
         6f:15:3a:f6:e6:ab:4d:08:9b:0c:0f:39:06:2f:14:f6:99:00:
         f7:23:70:6f:dd:bb:77:41:a4:de:5e:7d:6d:75:93:5e:33:75:
         d7:65:d6:31:7c:4e:47:61:60:69:8a:71:fd:57:10:df:2e:35:
         69:31:e6:29:02:d6:55:c8:c7:de:e8:90:cd:d2:eb:4d:30:8b:
         4a:4c:41:d1:b4:fc:e8:18:3c:a3:16:e1:6d:b7:b5:ac:08:25:
         11:37:02:f3:37:00:b1:9e:4c:44:29:dc:bd:92:a3:c8:21:d3:
         40:e1:60:5d:8f:26:af:b2:92:b7:30:93:6f:eb:ce:96:69:f2:
         31:b2:bd:0f:0c:ea:8a:8d:03:d8:e4:6e:37:58:4c:b8:90:6b:
         cb:80:8f:1d:ac:92:47:b7:13:b1:82:45:b5:b6:54:ac:8e:54:
         ae:8c:8a:83:3d:70:30:73:98:ea:42:9c:c6:f7:a5:bf:bc:a4:
         f4:8f:eb:b1:4f:74:00:86:2b:85:99:83:68:a7:20:20:44:92:
         5c:8b:d3:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----