Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ixCsM-IDbSq2M0FxcP1UaobesUI.cer
File:                     ixCsM-IDbSq2M0FxcP1UaobesUI.cer (raw, json)
Hash identifier:          QVdid3X0Vsf0FM221gGNU8Af/BG6ePPf08lIXjC3+WU=
Subject key identifier:   8B:10:AC:33:E2:03:6D:2A:B6:33:41:71:70:FD:54:6A:86:DE:B1:42
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018570FA509F2FF071051FB5A43AD60DABE8
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/6a/87c662-4a22-4b35-867d-a178366761a9/1/ixCsM-IDbSq2M0FxcP1UaobesUI.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/6a/87c662-4a22-4b35-867d-a178366761a9/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 02 Jan 2023 05:35:30 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 146.19.182.0/24
                          IP: 2a12:f300::/29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:fa:50:9f:2f:f0:71:05:1f:b5:a4:3a:d6:0d:ab:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 05:35:30 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=8b10ac33e2036d2ab633417170fd546a86deb142
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:50:e2:b6:31:a6:c7:db:e1:a9:e0:8c:7f:bc:
                    95:9f:92:45:09:36:a1:45:f9:3d:b1:a3:72:cd:81:
                    27:90:2a:26:5b:83:5a:69:38:e3:f4:f0:6b:60:ed:
                    46:58:49:06:a2:01:87:b3:84:45:18:53:5a:8d:46:
                    54:45:a0:e0:8f:cf:76:9c:71:de:d1:e3:3a:89:b0:
                    f1:09:ab:f0:6e:f8:14:91:55:13:de:f5:6d:ad:35:
                    f5:53:4b:3c:c2:2a:e7:20:5a:1b:ad:46:93:05:1a:
                    be:3d:35:f5:c4:87:ba:07:2f:45:14:60:11:f6:b5:
                    39:56:2b:83:cf:dc:42:70:5e:b1:06:8c:99:8f:df:
                    d4:f6:f8:10:26:dd:1d:3c:30:7a:87:14:8e:eb:c9:
                    df:f3:1d:2d:d3:b3:9c:a3:c4:a7:e1:ea:80:09:94:
                    97:1e:7f:4f:51:c0:21:e7:90:ff:fe:65:c0:44:63:
                    5d:ff:2c:98:12:a9:0a:42:4d:d7:ed:d4:e6:11:47:
                    aa:59:27:ea:06:2b:b4:97:18:e8:1c:c5:ab:2d:8b:
                    83:57:d6:42:59:e2:d4:0e:2d:3d:01:1c:61:86:93:
                    e4:8c:da:f0:07:5e:8c:73:af:72:25:fe:dc:a7:49:
                    8b:64:ec:4d:d4:d3:3c:80:dc:2a:6a:23:13:2b:29:
                    af:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:10:AC:33:E2:03:6D:2A:B6:33:41:71:70:FD:54:6A:86:DE:B1:42
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/87c662-4a22-4b35-867d-a178366761a9/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/87c662-4a22-4b35-867d-a178366761a9/1/ixCsM-IDbSq2M0FxcP1UaobesUI.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.19.182.0/24
                IPv6:
                  2a12:f300::/29

    Signature Algorithm: sha256WithRSAEncryption
         22:6e:20:e6:68:40:e7:0d:6d:4a:1d:2c:d3:61:02:e3:ec:77:
         0c:3d:cf:fd:97:1e:29:b2:e8:b4:74:74:9f:0b:0b:ca:ea:05:
         36:30:28:33:21:93:2f:32:bc:af:20:0b:f6:24:27:80:89:7b:
         b4:5c:7d:7d:65:a5:3a:78:f4:07:ff:1d:8b:cc:92:80:98:c5:
         8c:71:7b:3b:bb:c0:e2:93:25:33:28:33:f4:ef:f3:ea:b5:3b:
         dc:9b:cb:8c:7f:8b:2f:01:30:00:29:25:16:42:c5:89:e1:d7:
         6b:eb:e3:9d:41:be:34:f2:0e:fb:88:8e:00:f3:35:b7:77:58:
         19:df:a1:1c:52:99:3b:8d:ab:5b:18:8f:28:d7:85:c1:0b:37:
         3f:38:39:5d:bf:d9:83:51:09:7e:d3:a3:ba:71:0c:22:bc:dc:
         b9:eb:a7:34:59:09:46:bb:d6:b8:2e:02:9e:e6:1c:32:9c:45:
         d6:34:9e:b9:8d:b9:80:8b:8c:93:82:af:e4:ea:44:a9:3f:a9:
         7a:a3:7d:37:ef:be:a4:82:65:08:f6:3a:64:ba:07:fd:3f:19:
         6c:5b:13:ec:a2:f5:84:30:f5:bc:26:e3:34:5a:a1:dd:53:9c:
         c4:02:08:40:71:73:1e:35:2b:04:35:44:f2:1e:d3:11:4e:7a:
         1f:5a:d6:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----