Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/o-YzLMOX0zjh1qH7hsK3HJLLJVk.cer
File:                     o-YzLMOX0zjh1qH7hsK3HJLLJVk.cer (raw, json)
Hash identifier:          z4wFksWwL4qIGgeTF/ygZsJff6ixX3A2quhZAV+yn2o=
Subject key identifier:   A3:E6:33:2C:C3:97:D3:38:E1:D6:A1:FB:86:C2:B7:1C:92:CB:25:59
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856D8928A7577753E16DFBCD9913C5589F
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/9a/5ec55a-7461-408e-b45c-e5f26bc4d46e/1/o-YzLMOX0zjh1qH7hsK3HJLLJVk.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/9a/5ec55a-7461-408e-b45c-e5f26bc4d46e/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 13:33:03 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 94.247.138.0/24
                          IP: 2a11:8380::/29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6d:89:28:a7:57:77:53:e1:6d:fb:cd:99:13:c5:58:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 13:33:03 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=a3e6332cc397d338e1d6a1fb86c2b71c92cb2559
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:18:bc:cf:73:63:63:0d:a2:62:2d:4f:a4:93:
                    89:18:d1:61:4e:23:57:ca:1e:74:c5:0b:9d:28:0a:
                    79:a1:11:0e:48:b0:52:7b:7e:ca:54:e4:c6:13:a5:
                    ab:a0:06:5a:81:75:8d:d8:49:5a:9f:75:5f:10:5f:
                    27:9a:f0:69:36:bd:02:56:63:72:a7:d8:32:c0:1a:
                    f9:9f:1b:51:f9:7c:74:24:2d:1e:d9:d5:dc:f8:29:
                    5c:46:df:10:9b:9b:80:d3:68:87:6f:d7:e4:23:20:
                    cf:03:06:58:a8:3f:7c:62:0a:46:e1:38:ec:32:98:
                    84:8f:1d:a7:5b:58:69:0c:df:18:2b:93:2f:c4:43:
                    6c:2f:6b:ba:5f:8d:1b:c7:35:7a:60:a4:d7:5a:44:
                    8c:08:4e:c5:d9:91:e5:1a:8c:41:fd:17:c2:2e:b5:
                    4e:25:da:95:6f:c0:3c:60:bc:58:2a:4b:15:4b:32:
                    10:15:09:df:fa:ca:fa:7c:b3:15:6b:cf:16:40:9e:
                    4a:92:ff:7d:ad:fe:9c:e7:ef:5a:45:7b:f8:ce:72:
                    5e:ff:cc:ea:ee:8d:75:87:8b:00:21:38:83:24:d8:
                    97:05:d3:df:c6:17:9b:03:3a:90:59:29:57:f0:26:
                    a9:72:d9:d0:17:ae:e3:32:86:39:18:aa:0b:a6:41:
                    4c:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:E6:33:2C:C3:97:D3:38:E1:D6:A1:FB:86:C2:B7:1C:92:CB:25:59
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/5ec55a-7461-408e-b45c-e5f26bc4d46e/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/5ec55a-7461-408e-b45c-e5f26bc4d46e/1/o-YzLMOX0zjh1qH7hsK3HJLLJVk.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  94.247.138.0/24
                IPv6:
                  2a11:8380::/29

    Signature Algorithm: sha256WithRSAEncryption
         ac:c8:2a:1e:eb:3d:23:52:0b:09:4b:33:03:09:a4:3b:db:e4:
         fb:87:46:f4:2a:a8:7b:55:ca:c0:0a:c4:20:d0:fb:c3:04:24:
         d6:65:77:97:e2:94:48:90:43:1d:cf:0b:4f:8e:c5:fe:7b:58:
         09:96:12:6d:ed:fb:26:f2:d1:aa:b7:ef:05:52:f5:b9:54:1c:
         95:55:20:ac:b7:1f:be:d2:33:8c:a8:c5:b8:bd:a3:2b:71:ff:
         21:01:fb:6c:8e:63:79:7c:a0:ac:19:d0:b5:e3:e1:61:ab:07:
         1d:cc:b5:07:5d:05:0d:cd:25:e5:fa:be:2e:f1:03:e2:34:8e:
         fb:d6:9d:77:d4:72:87:0a:cb:d2:50:38:90:2f:21:55:07:bf:
         13:da:2c:8f:25:f0:9e:0c:89:52:ec:c5:bf:79:a6:0a:bf:c8:
         51:8b:ff:8c:71:9c:31:22:03:6d:3b:37:38:23:13:de:61:1e:
         fb:e6:1f:d6:bd:97:93:36:2e:79:a6:f9:c9:f3:95:19:ec:b6:
         8f:2a:ba:05:51:f7:53:81:5e:cd:86:bc:59:07:bc:2d:c6:2f:
         03:87:a1:b5:ab:3d:5e:56:e1:f4:0f:03:75:ad:31:5f:33:89:
         54:ba:41:44:97:0a:2d:d6:dc:7d:27:27:e6:13:b5:5d:b3:ea:
         3c:63:10:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----