Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/xUg0UwQVkwdQOIgbjV3zFJXZQrQ.cer
File:                     xUg0UwQVkwdQOIgbjV3zFJXZQrQ.cer (raw, json)
Hash identifier:          T+ZMZGB4JgS7dR0egvzY38XaHx9HlRnsnGYvm1Ib2K8=
Subject key identifier:   C5:48:34:53:04:15:93:07:50:38:88:1B:8D:5D:F3:14:95:D9:42:B4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856F4077B730C7967DE9DAF9E6CF33B680
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/3e/9ecbd1-1982-4049-8cc3-38b11362f68e/1/xUg0UwQVkwdQOIgbjV3zFJXZQrQ.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/3e/9ecbd1-1982-4049-8cc3-38b11362f68e/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 21:32:54 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 178.22.29.0/24
                          IP: 2a11:d780::/29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:40:77:b7:30:c7:96:7d:e9:da:f9:e6:cf:33:b6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 21:32:54 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=c5483453041593075038881b8d5df31495d942b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:b4:5b:01:1a:15:71:92:f1:8f:66:cc:66:5d:
                    9a:70:96:63:f1:e3:49:b3:4c:0b:23:9b:33:d5:ac:
                    3d:19:b8:dc:12:a8:55:61:75:05:9c:04:02:34:39:
                    d6:c1:ea:50:43:b8:a7:14:28:61:b6:36:ab:fb:8b:
                    90:df:dc:40:c9:be:56:9e:ee:95:7b:9d:dc:58:e3:
                    e8:64:3d:66:39:d6:27:5f:be:94:87:8b:d9:f4:21:
                    61:a1:ec:7e:7d:58:a0:f9:48:c5:f0:ce:0a:f8:d8:
                    f1:48:17:f2:a7:1f:6c:b4:96:f5:b4:00:b4:fb:2b:
                    86:51:c0:a0:c5:d6:69:75:88:15:13:58:f8:7c:9a:
                    67:e6:de:43:27:91:b8:22:88:d6:af:37:dd:4c:4a:
                    9f:09:11:a6:bc:c6:a6:0d:b6:a8:1e:89:e3:84:35:
                    81:bf:dc:df:b7:b3:e2:04:2d:ce:b9:f6:39:26:c0:
                    f7:a7:69:ba:e5:e4:11:c7:2d:fa:6c:41:3a:32:97:
                    78:c3:1f:a9:db:d7:35:80:60:ea:e9:38:16:d9:90:
                    3f:89:ad:7a:97:43:80:8a:e1:56:c5:81:3a:62:18:
                    4a:9d:cc:0e:f8:78:83:46:9b:81:78:64:56:0c:dd:
                    99:e9:b4:ec:75:7a:9f:3a:d9:39:6b:a9:12:64:75:
                    c1:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:48:34:53:04:15:93:07:50:38:88:1B:8D:5D:F3:14:95:D9:42:B4
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/9ecbd1-1982-4049-8cc3-38b11362f68e/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/9ecbd1-1982-4049-8cc3-38b11362f68e/1/xUg0UwQVkwdQOIgbjV3zFJXZQrQ.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  178.22.29.0/24
                IPv6:
                  2a11:d780::/29

    Signature Algorithm: sha256WithRSAEncryption
         9b:85:ee:46:6b:49:45:9e:6b:a4:19:40:8f:0f:33:29:15:8c:
         b4:b8:e2:2b:cc:fc:df:c3:07:95:51:87:83:97:9c:28:34:d6:
         c9:c9:cd:35:ff:ca:b3:bc:76:c3:1f:37:e5:ca:46:ce:c8:88:
         0e:75:bf:bd:5a:4a:05:b6:9f:29:e9:85:83:5f:91:62:dc:d1:
         96:e2:79:dc:33:8a:09:8c:03:8b:bf:da:83:d2:a7:ce:23:24:
         1b:2e:05:05:e1:65:b4:4b:98:45:54:f7:4c:13:5a:ab:c3:61:
         9c:4f:6b:a4:1b:8a:27:85:65:cd:be:af:ce:f2:42:3f:d6:1a:
         fc:e1:95:1e:9c:fc:fa:4e:fc:2d:34:e5:e4:69:f8:e6:38:b4:
         16:f6:f5:83:f7:aa:0a:fe:e7:ba:03:60:52:0e:a5:a1:45:58:
         7f:dc:21:ea:04:02:18:a5:00:27:4c:29:e2:82:7e:a0:b5:21:
         ae:7b:e0:40:cd:dd:2b:9d:d1:6b:22:b0:b8:9c:f4:ce:7b:eb:
         d2:e1:db:6b:00:f7:c9:be:81:e1:77:94:36:b7:aa:4f:d8:5f:
         e5:04:a2:b6:d3:74:2d:98:9a:b1:ff:b6:1c:f5:d5:27:90:cc:
         39:29:9f:a4:f8:35:a2:f1:e5:09:f1:54:3c:76:ad:aa:76:d5:
         fd:e9:27:e8
-----BEGIN CERTIFICATE-----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