Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/q_8fd_OXoagPunG00tHbkXs7pqA.cer
File:                     q_8fd_OXoagPunG00tHbkXs7pqA.cer (raw, json)
Hash identifier:          PIBdbgMlV9Y2LrmY0u5oP1xOneYkt5n3FMG5WrFj7rU=
Subject key identifier:   AB:FF:1F:77:F3:97:A1:A8:0F:BA:71:B4:D2:D1:DB:91:7B:3B:A6:A0
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856EFBECDF6D80DE8D7A45FAFF7F02BAAC
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/04/2b8e3e-e3bc-4635-9397-7d5dfa7d03d3/1/q_8fd_OXoagPunG00tHbkXs7pqA.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/04/2b8e3e-e3bc-4635-9397-7d5dfa7d03d3/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 20:18:02 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 94.154.114.0/24
                          IP: 2a11:46c0::/29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6e:fb:ec:df:6d:80:de:8d:7a:45:fa:ff:7f:02:ba:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 20:18:02 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=abff1f77f397a1a80fba71b4d2d1db917b3ba6a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:64:19:36:7c:35:6a:f4:10:b5:56:90:36:af:
                    4f:72:87:7c:ef:1c:b8:04:0c:5c:75:11:6d:d8:76:
                    34:87:df:48:ed:c1:81:b5:8b:51:2a:45:e5:03:a5:
                    2a:3e:72:5a:09:ef:e3:9b:6b:4e:49:1a:09:03:78:
                    ee:b1:78:e6:31:16:8b:43:af:49:42:06:ea:35:7a:
                    2a:3a:60:3a:b5:77:4d:21:bd:fb:50:97:79:72:15:
                    d3:54:b1:fc:db:2b:78:eb:d4:37:fa:e5:17:19:f9:
                    1e:17:10:c7:26:9a:8c:79:f6:ae:04:6b:02:7c:29:
                    28:35:26:a2:4b:2e:0f:84:20:85:30:4c:4b:51:82:
                    91:d5:f7:71:54:25:a4:45:59:0a:e3:f2:55:00:3d:
                    78:a3:dc:cb:f3:e7:1b:34:86:2a:39:dc:10:c4:ac:
                    9f:d6:9a:5c:b7:d9:53:9c:f7:ca:a6:3f:52:df:c0:
                    6a:2c:f5:1b:f5:58:e8:94:ba:5b:74:24:6e:42:92:
                    d2:43:58:56:4c:ce:8a:90:32:03:fa:0a:ca:94:2e:
                    68:47:ca:68:af:06:57:e7:1b:9d:53:a2:50:ad:82:
                    a5:f3:33:8e:23:62:a7:8d:de:e2:eb:49:be:96:67:
                    01:11:50:42:0a:08:80:8d:3d:19:75:86:2e:32:1c:
                    cf:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:FF:1F:77:F3:97:A1:A8:0F:BA:71:B4:D2:D1:DB:91:7B:3B:A6:A0
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/2b8e3e-e3bc-4635-9397-7d5dfa7d03d3/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/2b8e3e-e3bc-4635-9397-7d5dfa7d03d3/1/q_8fd_OXoagPunG00tHbkXs7pqA.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  94.154.114.0/24
                IPv6:
                  2a11:46c0::/29

    Signature Algorithm: sha256WithRSAEncryption
         87:56:a7:d4:9f:f9:2b:fe:b1:b0:42:cb:11:55:e9:e2:4c:f5:
         a0:ac:2c:4f:c3:59:f6:75:d3:f6:e8:cd:31:ca:07:71:04:30:
         cc:b9:52:c0:fd:ef:c8:76:61:24:b8:d1:f5:29:c9:70:97:bc:
         de:c0:b3:71:c5:82:8e:40:12:fc:6a:43:35:98:1e:6c:20:b6:
         63:5b:c0:62:de:db:d7:a7:fb:cc:d9:06:a5:b8:ec:1d:02:fa:
         03:f1:e8:fd:bb:56:4d:4d:b3:44:30:52:ff:0f:a4:8c:58:30:
         07:79:7b:84:64:76:a7:37:ac:5f:3b:ec:94:b8:23:6c:fa:96:
         a3:7b:dd:91:a7:d0:40:02:88:e8:de:0e:2e:a4:41:3b:54:ad:
         49:9d:76:7e:49:e0:6d:fe:17:f4:c4:bb:14:b1:6b:09:0a:60:
         ea:21:46:77:87:30:88:f5:e0:a4:5b:4c:31:3c:2e:4c:fe:59:
         49:99:6a:01:18:37:5b:e3:b1:98:f0:7f:15:0b:ad:b1:11:95:
         c3:7d:74:f9:c6:39:06:5b:fa:ea:5f:2a:b1:dd:eb:ee:93:46:
         aa:bd:a3:c4:18:05:93:ac:30:84:9e:55:1f:12:4a:79:d7:94:
         fb:eb:af:0b:43:d0:4d:af:59:e7:f8:ee:39:2d:cb:57:c4:37:
         06:ed:9e:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----