Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/m0h4hjxhXxsDxsgOVx7BcK40iiU.cer
File:                     m0h4hjxhXxsDxsgOVx7BcK40iiU.cer (raw, json)
Hash identifier:          OycCk21e/sPNgJipUoeKVX1s/Ctoecb10QTw27/W5nw=
Subject key identifier:   9B:48:78:86:3C:61:5F:1B:03:C6:C8:0E:57:1E:C1:70:AE:34:8A:25
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856FAEF2C97B889D32239C3C4DFEF0EC28
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/79/4c747e-26a2-4c36-a242-098c13d8e86d/1/m0h4hjxhXxsDxsgOVx7BcK40iiU.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/79/4c747e-26a2-4c36-a242-098c13d8e86d/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 23:33:34 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 92.119.36.0/24
                          IP: 2a11:9e00::/29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:ae:f2:c9:7b:88:9d:32:23:9c:3c:4d:fe:f0:ec:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 23:33:34 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=9b4878863c615f1b03c6c80e571ec170ae348a25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:76:62:3c:25:98:59:45:fc:4f:97:62:f7:ee:
                    e9:51:97:76:4d:a9:f1:1f:b1:41:20:48:8c:72:4c:
                    b6:f7:03:8c:f1:a2:43:0a:74:09:65:b3:4e:3a:1d:
                    0c:1d:fb:70:f0:1b:0c:50:0b:0c:cd:49:98:7a:e8:
                    64:9d:af:6d:33:5f:9f:2c:fd:d3:1b:3e:37:2d:2f:
                    c6:f6:00:9d:7a:49:2e:24:93:40:3a:af:be:e1:dc:
                    1e:7d:4e:a1:9e:76:31:85:36:c7:84:64:1f:4e:ab:
                    ae:3b:e3:a6:48:51:8f:66:25:84:7a:43:9f:c9:26:
                    f8:69:34:c9:7a:4e:b5:0b:55:7d:ec:e3:0e:71:9a:
                    0d:a6:98:7e:17:29:3d:cd:18:e8:ca:3d:7f:36:dd:
                    5c:70:26:f0:75:b9:4d:a4:14:e3:69:d2:ce:a0:d2:
                    85:47:f5:cc:a1:a1:63:9a:8f:35:41:7a:04:4f:74:
                    f9:dc:49:7b:ba:92:69:5d:56:c0:89:a2:91:1a:3a:
                    70:ba:28:ab:4e:3b:30:4f:95:f2:73:be:5a:83:3e:
                    0d:60:97:e4:90:4f:2e:ee:13:36:a0:e9:a4:f9:13:
                    99:64:10:0f:7e:fd:8f:54:af:e3:58:10:e0:81:61:
                    a8:fb:cb:9b:be:57:fb:24:b4:10:79:dc:3c:96:0e:
                    f9:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:48:78:86:3C:61:5F:1B:03:C6:C8:0E:57:1E:C1:70:AE:34:8A:25
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/4c747e-26a2-4c36-a242-098c13d8e86d/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/4c747e-26a2-4c36-a242-098c13d8e86d/1/m0h4hjxhXxsDxsgOVx7BcK40iiU.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  92.119.36.0/24
                IPv6:
                  2a11:9e00::/29

    Signature Algorithm: sha256WithRSAEncryption
         a1:36:f5:97:4d:32:63:d4:be:2a:58:fe:a2:89:b1:94:fd:1c:
         cc:38:53:b1:50:62:91:f1:46:d3:5f:61:c6:33:bd:b0:10:6f:
         54:26:0a:d7:bb:de:47:8d:9f:4c:7e:23:66:94:20:0e:95:7a:
         b6:9f:06:0b:65:56:fa:5a:0a:c6:20:aa:59:73:62:b3:aa:13:
         9b:25:f1:b0:6d:2d:ce:1f:cf:58:b2:73:3f:6d:f5:e2:0e:8a:
         4c:ad:71:7b:75:78:77:35:77:82:75:26:8a:72:a9:d0:db:b8:
         0e:80:a0:49:d6:8c:3e:be:f5:33:ae:0e:9f:fb:54:7a:f4:6e:
         97:3c:2c:cb:fc:fd:9c:c6:6e:9b:51:dd:31:85:df:9e:e6:d6:
         6f:0e:e5:6a:14:d2:b8:8a:24:ff:18:6c:38:df:8f:d6:b8:c4:
         68:ea:8b:26:f4:19:be:70:6c:cc:81:68:46:0d:fa:0b:b2:db:
         91:64:ae:10:53:b9:fd:9f:3e:7b:f7:13:76:19:6e:79:c2:99:
         c6:eb:c3:a6:4d:79:f7:a0:72:9c:1d:0f:6e:cd:04:f7:bd:14:
         36:33:85:6a:2e:76:27:e7:28:a4:d3:6d:81:d6:89:30:d4:8f:
         49:4e:0a:be:4e:d7:8f:4c:7e:99:01:d6:22:cd:fa:04:e3:d3:
         ec:e6:fe:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----