Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/kapXS1EcKRt8-ukZW90J4AOGAsA.cer
File:                     kapXS1EcKRt8-ukZW90J4AOGAsA.cer (raw, json)
Hash identifier:          h9GT097sT7z6/juh5h7ntWr6CIousxGy+qyBIx26RY0=
Subject key identifier:   91:AA:57:4B:51:1C:29:1B:7C:FA:E9:19:5B:DD:09:E0:03:86:02:C0
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856DF7CBF82E6309E9C46F686275BB83ED
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/90/1a31bd-42e3-4f89-b981-d0a1c92899a4/1/kapXS1EcKRt8-ukZW90J4AOGAsA.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/90/1a31bd-42e3-4f89-b981-d0a1c92899a4/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 15:33:54 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 91.242.225.0/24
                          IP: 2a11:a8c0::/29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6d:f7:cb:f8:2e:63:09:e9:c4:6f:68:62:75:bb:83:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 15:33:54 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=91aa574b511c291b7cfae9195bdd09e0038602c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:89:66:d9:4e:90:bf:10:8e:68:54:93:ef:47:
                    e6:6a:8e:ec:4d:93:35:b4:28:8f:4e:21:eb:79:a2:
                    c9:d7:40:95:2f:8f:e5:82:7e:44:8c:90:c1:ca:3c:
                    40:0e:8c:7a:da:6e:ec:96:a2:d8:33:15:af:fb:f7:
                    fb:9c:f2:b9:13:cd:6d:4e:dd:ce:71:65:03:b8:cc:
                    59:b3:db:b3:7f:31:dc:b2:4e:1b:b5:4a:83:72:71:
                    9f:46:45:ea:c8:da:99:45:44:6c:94:98:8e:00:eb:
                    77:54:e5:d0:89:a0:75:36:0b:a5:42:46:ac:80:e6:
                    73:c2:37:21:2b:bf:b2:94:3d:9a:15:bc:06:6e:0a:
                    30:07:18:0e:9d:c4:cd:09:f2:d1:38:9d:2c:46:a7:
                    1c:62:7f:1e:43:a5:6b:13:dc:86:19:3f:c3:ec:6d:
                    00:56:2a:30:bd:f7:7f:6f:79:e5:cd:c8:80:fc:40:
                    e1:8f:2e:c5:89:c0:ea:37:28:7e:3c:20:52:b7:ad:
                    a6:98:78:f2:34:1f:ec:b6:84:ab:e7:96:22:06:00:
                    c7:58:75:01:2e:e2:16:3c:ce:0f:14:41:7e:9a:5b:
                    d0:4c:e3:8c:59:6e:bf:f9:08:6d:20:61:70:fe:ae:
                    0a:b1:9b:ef:6e:cb:17:1c:99:4d:83:77:a4:73:cb:
                    f0:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:AA:57:4B:51:1C:29:1B:7C:FA:E9:19:5B:DD:09:E0:03:86:02:C0
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/1a31bd-42e3-4f89-b981-d0a1c92899a4/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/1a31bd-42e3-4f89-b981-d0a1c92899a4/1/kapXS1EcKRt8-ukZW90J4AOGAsA.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.242.225.0/24
                IPv6:
                  2a11:a8c0::/29

    Signature Algorithm: sha256WithRSAEncryption
         57:67:19:48:50:82:2d:23:09:a7:9a:df:8a:09:f7:7b:68:b2:
         61:93:f0:d7:d5:8c:9e:ae:7c:00:1c:f8:03:b3:a4:0c:5c:da:
         3f:0d:93:dd:db:5d:9a:d5:78:6d:0d:f5:2a:d2:cf:90:82:9a:
         62:4c:d6:ee:97:52:3e:87:c3:d9:cf:f7:6b:4f:d2:50:c7:0c:
         59:2b:8b:0c:e8:e6:0f:43:14:12:bd:b0:af:6c:b6:86:7d:db:
         c9:b1:be:bd:d5:d7:d7:ea:9e:0e:c8:79:ee:0e:75:b9:7f:9f:
         c2:b3:4b:7e:7a:9a:4e:a0:a9:d3:4f:21:39:1a:08:f0:61:3a:
         92:8f:94:de:73:bd:16:01:7d:bb:78:6e:2c:53:f9:7f:56:10:
         f3:04:4d:de:f9:41:7f:48:ec:3e:25:c1:b2:d1:74:50:f3:97:
         a2:b4:b8:33:8b:15:78:c4:05:59:56:b9:39:b1:6a:f1:e8:7d:
         8e:e8:2c:d3:1f:a4:b2:e9:b9:73:4f:62:ad:74:2c:1d:02:ac:
         be:af:78:da:16:d4:77:af:59:b1:25:c2:5d:ec:2c:3f:5a:46:
         ab:3e:79:ed:b3:99:9d:01:47:29:ee:16:b8:77:2f:72:68:eb:
         27:ca:de:75:7d:69:ae:da:c3:9b:db:3e:b0:49:a9:0a:5d:a0:
         1f:13:77:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----