Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/gjtmmodiD68MQicQ4m7jAAyamkE.cer
File:                     gjtmmodiD68MQicQ4m7jAAyamkE.cer (raw, json)
Hash identifier:          akwskoSzX1nyZ6p+sfzzETEHP21cqhlO+vpR79cFKSU=
Subject key identifier:   82:3B:66:9A:87:62:0F:AF:0C:42:27:10:E2:6E:E3:00:0C:9A:9A:41
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0185708A37D61E1CBFFC9B2E0E1AB5F2F6E4
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/ae/3faba7-3529-414d-a79f-25ff96d41afb/1/gjtmmodiD68MQicQ4m7jAAyamkE.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/ae/3faba7-3529-414d-a79f-25ff96d41afb/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 02 Jan 2023 03:33:04 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 193.243.186.0/24
                          IP: 2a11:23c0::/29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:8a:37:d6:1e:1c:bf:fc:9b:2e:0e:1a:b5:f2:f6:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 03:33:04 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=823b669a87620faf0c422710e26ee3000c9a9a41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:6b:fa:72:d2:b4:4f:c7:fd:61:5e:70:48:80:
                    40:c5:39:d9:b8:ed:e5:f0:aa:a1:7b:70:4e:ac:38:
                    e5:88:a9:cd:ac:5f:02:b5:f1:b9:f7:99:06:a4:e0:
                    b4:67:b9:d6:93:6a:0b:a8:53:56:b2:c9:7e:37:7b:
                    e5:f8:6e:fb:e3:c8:df:ac:f6:10:2f:bf:aa:f1:57:
                    41:9c:35:56:a3:7a:5c:18:50:a3:c0:89:fb:b4:98:
                    51:fb:4e:a4:f6:bf:59:79:ee:9f:57:91:9e:a0:3f:
                    9c:19:94:d8:6f:db:f2:af:78:98:df:5c:58:6d:af:
                    ad:2a:71:77:ba:02:a0:27:43:dc:d7:16:0b:8f:d9:
                    03:dc:24:45:67:b8:59:63:ac:62:51:b2:a1:3a:dc:
                    13:d8:49:2b:06:d9:52:39:c4:cf:84:00:de:9e:33:
                    1e:37:4d:d5:51:2b:5b:97:8b:f0:43:6e:9d:54:ab:
                    29:67:36:00:0d:02:cd:4b:a1:d1:0d:1c:f1:82:29:
                    69:7c:7a:09:1f:43:ad:4e:11:6e:8a:0e:e9:e7:f7:
                    61:50:e3:96:e9:16:40:8f:e4:85:f3:d2:ea:61:27:
                    70:39:53:e1:3d:f8:ac:40:b8:b0:2b:b0:6c:c9:41:
                    d8:04:f8:79:99:fb:6f:a0:b0:46:e6:3e:cd:c3:b0:
                    ee:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:3B:66:9A:87:62:0F:AF:0C:42:27:10:E2:6E:E3:00:0C:9A:9A:41
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/3faba7-3529-414d-a79f-25ff96d41afb/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/3faba7-3529-414d-a79f-25ff96d41afb/1/gjtmmodiD68MQicQ4m7jAAyamkE.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.243.186.0/24
                IPv6:
                  2a11:23c0::/29

    Signature Algorithm: sha256WithRSAEncryption
         3a:8d:f0:f1:86:a4:ef:f4:20:c0:9d:82:78:57:9b:01:0e:bc:
         e1:d9:c5:a2:b6:06:22:0c:a5:8c:e5:19:a4:a3:6f:7c:54:32:
         62:0f:75:09:47:26:ae:90:45:39:ef:59:c9:20:7f:f3:7c:fb:
         fb:0e:92:bf:17:0d:7c:ee:37:17:75:a4:8b:cb:e7:de:91:6c:
         a8:47:cf:02:c3:08:78:31:ed:e2:90:9d:0d:d2:04:e9:63:eb:
         1d:01:51:9d:00:0e:f3:27:b7:b0:ac:0c:8c:b6:7c:86:be:6c:
         33:68:22:33:89:5d:1e:8a:e1:8b:97:bb:06:9d:ad:ef:5f:41:
         66:a4:86:9e:11:c8:4a:9d:90:20:3d:6e:dc:e2:75:81:25:9b:
         61:49:87:13:46:8e:ec:1f:68:4f:fa:53:aa:1c:d8:fa:56:80:
         6e:d4:60:58:ab:82:04:1c:e4:d8:da:5e:fa:74:75:eb:2e:53:
         3c:e5:b2:f5:9c:39:07:97:b8:c5:34:55:6f:1c:32:c7:fc:26:
         09:c3:89:5a:cd:25:d1:ec:d1:0f:e1:1b:4c:26:3e:08:26:8b:
         56:59:44:c8:e5:51:70:9e:c5:bc:f1:3a:20:a2:72:4b:b7:b4:
         f6:c5:eb:e6:a1:92:ec:eb:12:9d:f5:a4:bf:71:fa:b4:eb:0b:
         81:a3:35:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----