Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/xjMA8c9R4j99jk2pKfOW1qTpD_g.cer
File:                     xjMA8c9R4j99jk2pKfOW1qTpD_g.cer (raw, json)
Hash identifier:          XPD/ZtvH7NhcMRBu1Il014wbuI9VM8T2lKdDFJJnwTk=
Subject key identifier:   C6:33:00:F1:CF:51:E2:3F:7D:8E:4D:A9:29:F3:96:D6:A4:E9:0F:F8
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856FAF0A4ECFC50DAC7B5C802C9AFFFDAC
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/7b/a3b5a0-89da-4ff8-b0c8-bc2ab2842481/1/xjMA8c9R4j99jk2pKfOW1qTpD_g.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/7b/a3b5a0-89da-4ff8-b0c8-bc2ab2842481/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 23:33:40 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 188.244.125.0/24
                          IP: 2a11:4f40::/29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:af:0a:4e:cf:c5:0d:ac:7b:5c:80:2c:9a:ff:fd:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 23:33:40 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=c63300f1cf51e23f7d8e4da929f396d6a4e90ff8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:9f:55:b5:bc:c1:91:43:a8:69:6e:d1:d6:41:
                    68:30:56:00:a0:c8:29:7d:a2:5c:17:5a:96:a6:81:
                    a0:fa:4a:40:18:a0:64:47:77:5d:ea:73:39:38:94:
                    b7:f5:97:40:12:d3:3d:43:bf:d6:5d:59:fe:67:60:
                    bf:30:6c:e5:37:dc:8f:b5:d0:db:b2:d8:a3:58:24:
                    91:09:41:19:31:d6:ec:ea:e4:61:3b:02:6c:fb:4d:
                    1c:db:d5:f2:dd:15:3d:86:23:45:ab:ef:4d:47:fa:
                    1d:01:d9:9a:a7:20:e3:c6:0a:0b:4a:c2:cd:0d:b3:
                    f1:a7:05:b2:d9:54:19:84:07:f8:e1:df:12:3e:31:
                    ef:95:c7:3a:1c:d7:84:54:65:f6:a4:d7:b7:90:4e:
                    b7:9f:9a:e4:d5:08:aa:d1:9d:ab:30:b9:00:f5:8b:
                    1c:0b:09:df:1c:8a:d1:9f:65:ad:ce:04:5a:42:9c:
                    85:42:3f:8f:b6:14:4b:3e:f2:7d:b4:f4:9e:af:89:
                    97:07:71:dc:28:56:c9:28:2a:2f:65:6d:ea:21:25:
                    b9:73:6e:d5:27:6b:31:80:c3:c5:81:8a:2d:9d:15:
                    03:6c:a7:84:e6:6a:e5:d6:58:11:a1:6b:3c:e3:2f:
                    82:28:b0:96:7d:e4:bc:7b:1a:e0:c1:b1:29:de:49:
                    bf:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:33:00:F1:CF:51:E2:3F:7D:8E:4D:A9:29:F3:96:D6:A4:E9:0F:F8
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/a3b5a0-89da-4ff8-b0c8-bc2ab2842481/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/a3b5a0-89da-4ff8-b0c8-bc2ab2842481/1/xjMA8c9R4j99jk2pKfOW1qTpD_g.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  188.244.125.0/24
                IPv6:
                  2a11:4f40::/29

    Signature Algorithm: sha256WithRSAEncryption
         6c:54:4b:d9:17:b4:6d:47:4f:57:62:a8:07:de:cf:fd:f4:0e:
         60:04:4d:c3:82:55:5f:52:ab:3d:d0:86:8c:e1:33:18:68:e0:
         b0:a9:2b:2c:e5:92:08:10:b8:4d:02:6a:1f:2e:ca:55:8d:34:
         b1:59:19:0f:79:65:8a:67:44:89:80:c1:e7:56:e4:bc:30:90:
         46:cc:96:f9:18:38:7d:d5:04:14:a0:21:be:97:31:cf:61:f7:
         94:1e:a5:23:8e:e4:c9:c0:a5:3c:62:d9:fd:6a:10:a5:8f:71:
         e3:2a:e5:ef:39:19:b4:8d:8a:7a:4e:10:54:5f:76:fc:4e:48:
         7c:8c:e0:e1:41:56:bb:8d:42:20:fb:2e:35:5f:52:6d:9f:ee:
         4b:42:3e:36:2f:c5:0f:38:e6:eb:97:7e:91:d7:be:ff:39:77:
         4d:1b:26:8e:0d:2a:c0:02:d0:ff:5f:93:fe:29:62:e3:07:f1:
         e5:b6:ff:fa:dc:02:f3:dc:33:7b:b1:41:be:43:dc:b4:ec:65:
         66:9b:43:95:2f:b5:74:76:cb:6a:f9:2b:11:9a:fa:88:d4:80:
         5e:30:e9:3e:e8:71:a0:e8:f4:dc:95:be:a1:a7:9a:48:54:55:
         0d:a0:eb:d8:2e:8e:19:18:30:12:24:a1:1b:84:69:9e:b0:f1:
         02:54:4f:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----