Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/n_c2oYHpVKdwGqMoBW8sSMNmruc.cer
File:                     n_c2oYHpVKdwGqMoBW8sSMNmruc.cer (raw, json)
Hash identifier:          N09h1ZRQdxXSnP99ZVVPQ2KYiGLzy5gTWmBj6A6ailI=
Subject key identifier:   9F:F7:36:A1:81:E9:54:A7:70:1A:A3:28:05:6F:2C:48:C3:66:AE:E7
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856F42227C9C2D994012945BA9B291EE2A
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/be/e40697-7a48-42db-8b66-1bdb07875d12/1/n_c2oYHpVKdwGqMoBW8sSMNmruc.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/be/e40697-7a48-42db-8b66-1bdb07875d12/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 21:34:43 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 176.126.119.0/24
                          IP: 2a11:eec0::/29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:42:22:7c:9c:2d:99:40:12:94:5b:a9:b2:91:ee:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 21:34:43 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=9ff736a181e954a7701aa328056f2c48c366aee7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:f8:9d:8f:6a:01:b2:6e:6d:cf:e3:2c:29:2e:
                    ea:60:0e:8d:f0:a1:2c:82:51:ba:29:ea:a8:93:2f:
                    85:36:98:20:3c:a8:a8:2d:9f:35:e2:14:63:22:e5:
                    3a:c7:72:99:fb:7a:6b:96:0b:c0:58:4e:29:5f:8b:
                    00:8a:77:2f:7c:27:44:a0:b7:30:fc:11:77:4b:07:
                    ed:3e:52:9f:3b:20:4e:40:30:f1:df:2c:be:f6:16:
                    db:a8:dd:61:27:60:68:cd:74:b9:da:10:ee:10:d4:
                    0a:29:8e:12:01:b5:e4:a6:6e:d0:98:d7:c3:02:6b:
                    ca:9b:d3:ad:e3:dd:bf:7b:cc:16:4c:f3:aa:79:bc:
                    d3:8e:71:a1:70:b0:df:d0:04:86:32:f0:ed:0e:e7:
                    c1:4d:c6:9f:4c:65:84:a3:33:a3:44:8e:78:8b:ec:
                    2a:29:ba:9a:4d:3e:28:16:c3:74:9d:e3:1d:95:91:
                    47:97:5f:84:b1:a8:aa:85:98:e8:cd:07:22:74:9b:
                    4e:8b:c0:be:2e:e5:9a:c0:2f:0b:d4:ed:e4:d8:c6:
                    e3:2b:ad:15:ee:c3:a7:06:89:50:d8:20:6b:0c:36:
                    51:a9:47:ee:39:bf:b7:05:77:c6:5e:97:4d:a2:1d:
                    8f:89:77:90:9f:c4:dc:39:6d:46:9b:2f:de:d6:79:
                    ea:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:F7:36:A1:81:E9:54:A7:70:1A:A3:28:05:6F:2C:48:C3:66:AE:E7
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/e40697-7a48-42db-8b66-1bdb07875d12/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/e40697-7a48-42db-8b66-1bdb07875d12/1/n_c2oYHpVKdwGqMoBW8sSMNmruc.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  176.126.119.0/24
                IPv6:
                  2a11:eec0::/29

    Signature Algorithm: sha256WithRSAEncryption
         72:b4:30:1e:ba:89:8d:dd:02:63:72:76:a9:3f:91:57:64:8c:
         47:9d:6e:fb:aa:1f:a4:66:80:f3:98:b7:ae:38:0a:6e:58:01:
         2f:16:4c:dd:94:70:6e:cf:c4:ef:39:6e:c5:19:46:a5:f5:4f:
         3f:e9:bf:15:79:fc:e8:a1:e9:71:1a:03:79:62:f5:c6:24:f8:
         09:20:30:4c:5a:fb:dd:4a:d9:5d:96:a6:87:fc:21:1c:69:8a:
         0a:03:17:e4:91:c9:67:7b:ac:05:23:83:e7:f6:66:89:dc:a3:
         02:d8:b5:9d:00:70:14:78:7c:9a:21:a2:5e:08:7d:03:51:e7:
         aa:c9:cb:70:0b:54:0d:35:dc:75:71:30:33:1a:3f:86:c6:1c:
         c9:a9:57:3b:ee:9d:45:0e:3d:89:42:f2:7c:f7:e1:81:72:b7:
         09:de:84:b1:1f:01:98:3a:f1:cf:f5:2c:a2:3a:bf:23:a0:13:
         18:38:89:65:df:aa:b2:45:75:b0:ec:21:4a:2a:5a:5b:f0:86:
         0a:e0:4f:3a:a1:7b:88:24:aa:ad:16:72:bb:ed:14:8d:23:31:
         87:04:b4:b0:91:32:bd:cd:9c:7e:ef:4d:84:c6:4f:c9:f7:a6:
         db:07:58:fd:d0:a5:fd:a1:34:12:c8:b1:73:5d:6a:a9:e5:53:
         44:89:39:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----