Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/tx2wYltK6IrGpYSzacz_cNmENq0.cer
File:                     tx2wYltK6IrGpYSzacz_cNmENq0.cer (raw, json)
Hash identifier:          rkUL3G04QG5wSfBLg2kVFgGSJlEnC5cShV9qYemMLw0=
Subject key identifier:   B7:1D:B0:62:5B:4A:E8:8A:C6:A5:84:B3:69:CC:FF:70:D9:84:36:AD
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856ED409B4604050EADE45CDA47811DFDA
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/42/04b923-66f1-4ecd-9c80-1d024eb358a5/1/tx2wYltK6IrGpYSzacz_cNmENq0.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/42/04b923-66f1-4ecd-9c80-1d024eb358a5/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 19:34:28 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 178.212.79.0/24
                          IP: 2a11:eb80::/29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6e:d4:09:b4:60:40:50:ea:de:45:cd:a4:78:11:df:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 19:34:28 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=b71db0625b4ae88ac6a584b369ccff70d98436ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:e7:83:b7:37:b8:54:5b:2f:02:f8:c7:1e:fb:
                    f9:fe:ac:ad:61:c8:66:92:b4:a1:74:59:5d:ce:11:
                    e7:4d:a1:43:d3:3c:4c:48:7e:4e:79:81:ad:f6:2f:
                    d4:56:90:88:b9:43:7c:59:7b:52:c9:e2:07:73:d3:
                    9c:1d:ce:57:a1:8c:56:53:68:29:14:41:d7:40:3f:
                    d5:21:44:66:fd:31:6b:3a:36:44:1a:dc:74:b7:eb:
                    9f:2e:71:93:a0:78:80:5c:18:01:2f:de:73:3c:42:
                    46:b3:bb:29:fd:9b:4c:3d:cc:5f:ad:b8:b8:02:6a:
                    61:0c:07:d7:d8:59:0e:0c:24:00:dc:8f:c1:f4:5f:
                    9d:76:5e:3c:3a:f3:5c:fd:c6:a2:ac:c3:95:db:40:
                    2a:25:b0:ff:cf:e7:c4:d4:1d:bb:aa:e1:91:1a:10:
                    f8:c6:48:7c:06:ef:41:57:4d:3b:73:6a:36:93:ff:
                    dd:af:0e:ad:8a:02:de:6c:2d:7d:de:67:f3:70:42:
                    eb:c5:c8:80:67:b4:0b:80:38:07:ea:ed:4e:8f:22:
                    6f:d3:e5:50:0a:fd:a2:f6:42:3c:d1:2e:0a:0c:c0:
                    62:b2:b8:3d:b6:0f:c2:7c:69:a1:db:af:f6:a8:54:
                    6e:76:79:c4:69:cd:7b:05:5e:d1:0c:7e:40:f4:01:
                    22:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:1D:B0:62:5B:4A:E8:8A:C6:A5:84:B3:69:CC:FF:70:D9:84:36:AD
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/04b923-66f1-4ecd-9c80-1d024eb358a5/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/04b923-66f1-4ecd-9c80-1d024eb358a5/1/tx2wYltK6IrGpYSzacz_cNmENq0.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  178.212.79.0/24
                IPv6:
                  2a11:eb80::/29

    Signature Algorithm: sha256WithRSAEncryption
         73:b7:b4:2b:3f:c6:99:ca:d9:7f:eb:f5:13:3d:83:8d:6d:2d:
         94:2d:26:01:63:9a:34:a0:e7:95:2a:e0:42:2a:25:a3:5a:8f:
         7e:d4:2b:9b:0d:7c:6a:1d:f2:9d:14:09:fc:52:14:80:15:0c:
         d0:00:29:91:c7:6d:61:a5:e8:79:0e:67:66:a4:17:f0:e8:88:
         78:d3:f8:69:af:bd:f0:41:b8:e1:26:c5:12:c4:48:da:b3:09:
         ba:db:38:68:0e:56:d9:07:ed:63:e9:e1:cc:1e:9a:a2:2c:1b:
         06:62:c6:0e:e1:6c:e4:46:fe:c0:eb:ab:ed:14:05:68:27:7a:
         4c:f3:a9:d9:3d:dd:a9:83:2e:49:e0:65:1a:43:f2:e3:c7:4d:
         3f:27:28:7a:a4:3c:26:f2:4c:e1:b0:28:13:e4:14:99:34:f3:
         84:79:3f:68:7c:d4:5a:fa:5f:b9:50:e9:ee:b3:7a:b9:02:f1:
         10:70:a3:06:cf:90:bd:93:3b:99:76:18:45:73:7b:fa:4a:89:
         6a:95:64:0c:c9:ee:ec:f6:90:ca:4f:6e:8b:ee:ee:53:be:b7:
         de:40:59:bb:f6:23:bc:93:ee:7a:86:cf:08:f1:4f:9a:ca:a0:
         b1:75:43:fe:3b:fd:e1:ef:11:5a:68:fa:80:58:bd:76:85:23:
         fc:03:ff:4d
-----BEGIN CERTIFICATE-----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Generated at Thu Sep 21 10:54:06 2023 by rpki-client on console-fra.rpki-client.org