Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/xDJWqBkR0TzYDFNnPgUX_yJcbQg.cer
File:                     xDJWqBkR0TzYDFNnPgUX_yJcbQg.cer (raw, json)
Hash identifier:          hET/y6CpUfNoc6cK9AqIWSU3KTnpGxg/2WalJ4gy+NY=
Subject key identifier:   C4:32:56:A8:19:11:D1:3C:D8:0C:53:67:3E:05:17:FF:22:5C:6D:08
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856BD0F7F9C4511BE6691BE2ECA4288EEF
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/3e/f5d3fb-c8c7-42e4-9ff8-6018faf464fb/1/xDJWqBkR0TzYDFNnPgUX_yJcbQg.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/3e/f5d3fb-c8c7-42e4-9ff8-6018faf464fb/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 05:32:15 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 193.228.224.0/23
                          IP: 193.239.146.0/23
                          IP: 2a07:3380::/29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6b:d0:f7:f9:c4:51:1b:e6:69:1b:e2:ec:a4:28:8e:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 05:32:15 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=c43256a81911d13cd80c53673e0517ff225c6d08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:d0:e8:ac:09:9f:39:4e:82:9d:19:de:66:74:
                    79:a6:0a:82:d4:54:1f:ab:f0:a9:8b:46:80:2c:81:
                    31:27:93:a1:fc:18:ed:d5:06:11:cb:78:ae:4b:f4:
                    ad:67:87:a3:3f:19:d1:97:58:7f:7d:7c:ef:2c:04:
                    9b:19:44:6f:11:b7:d6:3f:b8:81:a8:29:4f:f0:56:
                    a8:02:c8:40:b0:ec:86:6a:dd:d9:c5:b6:9f:7f:4d:
                    82:ca:86:d6:ef:4d:a3:69:d5:dd:9d:ed:30:3d:7e:
                    2d:97:50:35:7c:12:fa:d4:40:8c:40:22:6a:ca:f6:
                    be:d9:b4:1e:25:94:84:a8:7e:75:00:5e:b4:d8:ea:
                    34:b9:85:32:4d:61:1d:fa:2b:e8:af:11:2d:93:ba:
                    b6:8c:5c:1d:e6:4f:f1:37:5d:f7:12:bc:d0:b9:1b:
                    f6:af:7f:c2:cd:4f:a3:8f:19:81:fa:ed:46:1d:f9:
                    08:eb:1e:85:a6:ce:46:c3:14:68:3c:b7:aa:6f:6d:
                    1a:dc:af:5d:3b:04:0b:50:07:f7:44:8a:ae:df:97:
                    f8:cf:46:1a:13:38:e9:81:21:59:16:7a:ab:39:5b:
                    cf:c0:f6:4f:4f:2e:67:76:44:cd:b4:1a:62:38:34:
                    8a:84:8c:83:fb:be:5d:34:db:0f:4f:5a:49:b4:01:
                    e3:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:32:56:A8:19:11:D1:3C:D8:0C:53:67:3E:05:17:FF:22:5C:6D:08
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/f5d3fb-c8c7-42e4-9ff8-6018faf464fb/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/f5d3fb-c8c7-42e4-9ff8-6018faf464fb/1/xDJWqBkR0TzYDFNnPgUX_yJcbQg.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.228.224.0/23
                  193.239.146.0/23
                IPv6:
                  2a07:3380::/29

    Signature Algorithm: sha256WithRSAEncryption
         9b:3b:f1:da:4b:b5:d0:27:45:0b:1b:f4:84:34:13:09:0c:ac:
         6c:c3:59:03:36:e8:35:72:3d:07:b6:d0:87:e5:02:b4:dd:9f:
         9b:d9:8c:74:8c:c5:1b:68:73:25:88:10:b6:63:bc:b6:a5:a2:
         2b:77:6c:c1:69:eb:b2:03:7d:34:a0:a8:00:39:89:67:74:27:
         21:d8:67:fa:9c:28:7e:84:b3:8a:76:1d:47:f0:45:a3:6f:ae:
         e8:77:fe:de:57:b4:80:ff:91:5a:eb:70:8c:5c:e2:86:02:8a:
         76:eb:97:59:8c:36:44:de:88:68:59:8f:f3:af:5a:c6:6e:8d:
         fb:3f:38:3b:2c:e9:b9:ef:b4:e2:00:03:f8:d6:af:aa:c2:19:
         a9:9c:03:fd:d5:3c:9a:76:4c:20:bf:f9:41:f8:a8:79:1e:1b:
         3f:bd:e2:02:4e:29:8b:98:d9:28:13:64:fd:bd:85:c1:26:6d:
         f2:41:da:eb:b4:bc:c4:41:95:59:86:cc:88:4b:07:f7:ec:e7:
         d9:4d:90:4b:14:77:ff:b9:66:16:4a:e0:0d:1f:33:a4:87:0a:
         02:e1:b4:c5:bf:7e:40:85:05:22:c7:d1:35:ce:b9:f5:9e:eb:
         18:c1:ce:5c:8f:0b:44:11:5d:ba:01:b6:b9:cd:b6:f4:bc:ce:
         aa:70:50:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----