Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/vi7lz0v8K2y90Iaq44d6v2eX3qg.cer
File:                     vi7lz0v8K2y90Iaq44d6v2eX3qg.cer (raw, json)
Hash identifier:          +y9wpS6CYA+z+4vG3b7q2lpx8s1pT7Von57C7orWm/E=
Subject key identifier:   BE:2E:E5:CF:4B:FC:2B:6C:BD:D0:86:AA:E3:87:7A:BF:67:97:DE:A8
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856BD0E12369377060EEDB32B36716523A
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/9c/fe4f01-6116-4b97-b7a5-dff1f9ee6135/1/vi7lz0v8K2y90Iaq44d6v2eX3qg.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/9c/fe4f01-6116-4b97-b7a5-dff1f9ee6135/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 05:32:09 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 193.163.193.0/24
                          IP: 2a11:5140::/29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6b:d0:e1:23:69:37:70:60:ee:db:32:b3:67:16:52:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 05:32:09 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=be2ee5cf4bfc2b6cbdd086aae3877abf6797dea8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:70:dc:f8:4c:e1:76:49:d6:b1:d5:74:b1:5a:
                    41:23:83:9e:ca:89:99:dd:59:4e:95:0d:9c:4b:34:
                    cc:6d:47:41:5d:ef:72:d3:e3:72:d2:a4:af:ac:fd:
                    a1:b5:96:0a:2d:97:fb:52:ad:74:35:e8:91:cb:14:
                    a9:67:f3:45:b5:65:f8:04:10:1f:31:b7:bd:a7:6e:
                    2f:ea:db:98:d8:7c:02:a2:53:16:0e:fa:46:17:1d:
                    4f:76:27:65:b3:48:8c:bd:11:ef:f5:a5:a2:34:e4:
                    ad:50:45:64:ef:70:4c:77:e7:d1:cb:eb:58:7c:14:
                    b9:a8:3f:82:8d:57:d6:b2:31:44:23:c0:09:6d:35:
                    e2:d3:b4:e1:91:62:27:22:62:f1:f5:41:97:96:df:
                    f6:80:84:39:52:6c:df:2d:cd:29:f5:15:28:27:1c:
                    bc:16:76:1e:a5:80:af:bf:4b:44:a2:db:02:c1:ce:
                    47:e2:59:8a:94:01:81:27:01:b0:b7:d9:28:62:87:
                    3a:ef:38:e4:81:b8:0a:ac:c3:a2:33:ef:7a:37:c9:
                    aa:5f:2b:75:5d:6c:ab:ff:c9:53:73:38:c8:0b:9e:
                    15:89:45:e3:a1:79:ec:09:77:8b:c3:b8:f8:1e:22:
                    d7:79:1b:41:54:05:a5:bd:65:f6:b3:4d:bf:07:59:
                    80:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:2E:E5:CF:4B:FC:2B:6C:BD:D0:86:AA:E3:87:7A:BF:67:97:DE:A8
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/fe4f01-6116-4b97-b7a5-dff1f9ee6135/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/fe4f01-6116-4b97-b7a5-dff1f9ee6135/1/vi7lz0v8K2y90Iaq44d6v2eX3qg.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.163.193.0/24
                IPv6:
                  2a11:5140::/29

    Signature Algorithm: sha256WithRSAEncryption
         6f:d6:53:ee:9e:74:a1:c2:8b:06:90:5c:ab:fd:82:c7:82:70:
         fd:d3:a9:de:eb:57:76:40:41:8b:08:25:71:27:1b:8f:c5:ed:
         b4:12:e6:d7:c4:3b:c1:cc:d0:e8:d1:7c:88:cf:c1:7e:1a:5f:
         15:8d:2f:bd:e7:1a:ce:38:d1:2c:b5:3b:34:0a:50:f7:3d:a3:
         cc:07:8a:ad:56:9e:8c:f7:3d:ae:8e:26:67:5b:f4:32:f8:a9:
         d8:fb:d0:42:73:50:b3:a9:72:6d:bb:26:bd:6f:33:df:0d:a1:
         9f:92:fb:15:08:a5:13:15:37:58:e0:15:7b:cb:c7:14:e2:ab:
         ca:4c:e6:cf:d9:33:5f:69:48:e2:75:f1:12:9b:37:96:71:ff:
         06:e7:4d:8c:e7:a0:e4:e5:7a:e9:a7:2a:f0:df:b0:2f:e1:61:
         9c:77:dd:3d:3c:72:26:d0:42:81:02:d1:fa:a1:be:8e:d9:fd:
         13:8d:ce:f4:86:f4:d0:04:72:a2:6c:f9:63:db:ca:92:b7:4d:
         4c:44:1a:52:56:5f:40:c5:88:b1:77:60:42:bb:69:e8:7c:a3:
         39:f9:91:63:95:13:66:bc:5b:53:33:79:d5:93:4e:b4:78:8c:
         a7:a7:00:d7:49:79:03:cf:31:43:9f:e2:76:5f:00:e7:c9:5c:
         c5:65:96:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----