Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/obf_-gJ47YZV6-ZIKodt_Hyd4bw.cer
File:                     obf_-gJ47YZV6-ZIKodt_Hyd4bw.cer (raw, json)
Hash identifier:          wm6BFixtftky4rNA153Ud5abGK+sICluSAJ8uelkKPc=
Subject key identifier:   A1:B7:FF:FA:02:78:ED:86:55:EB:E6:48:2A:87:6D:FC:7C:9D:E1:BC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856DF79B61876966D0F5D8AF55FECEE474
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/ed/5d1d57-fdea-4526-ae64-82a48dfe61bd/1/obf_-gJ47YZV6-ZIKodt_Hyd4bw.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/ed/5d1d57-fdea-4526-ae64-82a48dfe61bd/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 15:33:41 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 79.99.24.0/21
                          IP: 185.218.224.0/22
                          IP: 2a02:13b0::/32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6d:f7:9b:61:87:69:66:d0:f5:d8:af:55:fe:ce:e4:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 15:33:41 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=a1b7fffa0278ed8655ebe6482a876dfc7c9de1bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:e9:11:c4:9d:61:df:f9:30:e9:48:d6:20:2d:
                    5a:8a:2f:84:87:3f:5e:e9:75:a8:5e:46:ca:a7:c9:
                    1c:e5:05:f4:dd:c5:53:71:1e:96:48:a0:83:d1:11:
                    a3:f6:42:e5:ea:5f:a6:df:8f:57:8a:a6:7b:78:49:
                    28:26:04:4c:63:f1:a5:18:59:d0:91:6f:f9:d2:10:
                    5a:b7:cb:19:db:71:4f:5f:c5:f2:e6:97:e9:bc:f3:
                    9d:9e:3f:ab:e2:76:74:8a:88:5e:2e:52:5d:39:96:
                    30:2c:bf:3e:86:3f:9d:60:05:b6:73:de:0a:e7:9c:
                    c0:ea:f4:f9:f6:46:8b:ff:8c:11:47:41:42:68:da:
                    c6:c6:86:7e:af:97:dc:b4:79:a8:8a:e3:c9:09:b6:
                    75:b0:0f:0d:6c:4c:78:6f:ac:77:fc:ac:bb:23:f4:
                    e8:63:bc:bd:d9:ae:28:de:a5:a0:63:fc:66:89:2f:
                    16:29:cb:68:74:0c:56:ea:20:c4:30:6b:31:3c:f4:
                    d2:c2:79:ea:a3:76:31:77:cb:67:12:4d:cb:61:be:
                    f9:65:86:db:54:14:81:87:e9:76:d9:14:77:52:1e:
                    44:c3:80:f7:82:bc:b6:7a:cf:c7:8d:18:ad:fa:a6:
                    2c:20:84:94:40:41:57:3d:2a:3b:91:7b:99:e4:be:
                    29:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:B7:FF:FA:02:78:ED:86:55:EB:E6:48:2A:87:6D:FC:7C:9D:E1:BC
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/5d1d57-fdea-4526-ae64-82a48dfe61bd/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/5d1d57-fdea-4526-ae64-82a48dfe61bd/1/obf_-gJ47YZV6-ZIKodt_Hyd4bw.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  79.99.24.0/21
                  185.218.224.0/22
                IPv6:
                  2a02:13b0::/32

    Signature Algorithm: sha256WithRSAEncryption
         93:d1:68:96:73:0f:7f:8e:29:73:08:bf:ac:29:96:f4:07:b4:
         bc:a4:8a:94:a2:f6:57:c0:18:ee:7d:fe:7d:95:2a:c0:62:9d:
         cb:d3:64:6b:cf:89:74:48:c8:4c:e3:04:40:ac:19:e3:eb:74:
         39:48:05:10:cf:32:07:09:86:1b:67:bc:09:ae:8f:10:b6:2a:
         8b:d9:57:7e:e9:26:f2:3e:70:42:28:21:0e:23:26:fb:35:84:
         7e:95:f9:43:cb:2d:6f:55:5c:f0:f6:50:d0:25:e4:5f:6b:7d:
         cf:08:bf:df:e3:4f:aa:27:98:19:0e:64:b4:9c:06:fc:cc:20:
         69:a2:fd:d2:90:5d:9a:16:80:aa:56:ce:6a:20:2a:a9:42:b0:
         36:fa:e5:5b:00:90:8b:08:29:81:8d:69:8c:01:dd:31:dd:6a:
         a9:ba:99:6d:37:47:e7:1e:79:f9:e7:57:fd:a1:d3:9a:e4:76:
         57:78:4e:e8:fb:c9:32:d9:bc:5e:83:8f:97:1f:74:c1:71:fb:
         8f:05:6c:47:77:28:39:71:7c:3a:2b:5c:da:c3:65:1a:36:c7:
         88:5b:fe:43:e5:ef:25:6d:8a:db:dc:5f:8d:8b:9d:c2:82:6c:
         a7:e9:f0:7d:5b:32:6f:21:44:1b:b3:47:10:93:f3:91:de:d8:
         2b:f7:4b:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----