Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/xjl2tLmyrJALJP9B5k5FXg8c5yU.cer
File:                     xjl2tLmyrJALJP9B5k5FXg8c5yU.cer (raw, json)
Hash identifier:          88R1qWsJIBUT026zu3ttogaOdTQW7G1sNI7HuJGSVDs=
Subject key identifier:   C6:39:76:B4:B9:B2:AC:90:0B:24:FF:41:E6:4E:45:5E:0F:1C:E7:25
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018571D689F3376FC6E64324DBE77736F407
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/38/563b00-4c84-465a-b6f7-e29a252460cd/1/xjl2tLmyrJALJP9B5k5FXg8c5yU.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/38/563b00-4c84-465a-b6f7-e29a252460cd/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 02 Jan 2023 09:36:03 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 109.107.151.0/24
                          IP: 2a11:d240::/29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:71:d6:89:f3:37:6f:c6:e6:43:24:db:e7:77:36:f4:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 09:36:03 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=c63976b4b9b2ac900b24ff41e64e455e0f1ce725
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:cd:86:c8:b4:a1:86:57:13:52:2b:92:fa:b3:
                    16:e6:e2:9e:ff:91:3a:ef:4a:d2:2e:29:65:34:19:
                    f6:86:99:66:b8:8c:c2:b7:df:ab:53:1d:aa:ee:98:
                    d8:a8:f8:dd:35:84:f0:14:f8:6e:10:4b:e3:55:80:
                    e3:2c:61:97:1b:2a:c0:2a:b7:50:21:a3:94:97:c1:
                    18:0c:ad:f6:04:95:42:62:53:c8:58:cc:30:12:ad:
                    68:3a:5b:31:0c:5b:6b:d3:07:6e:8a:a3:97:81:f5:
                    58:05:0d:26:fc:bf:6e:54:16:93:9a:22:93:1c:e6:
                    40:f1:4c:39:42:db:54:9b:42:48:fc:04:8a:86:23:
                    8e:ac:dd:31:f1:b3:3c:ae:1b:9f:08:a6:f8:24:95:
                    96:d4:b3:11:75:21:3e:32:9a:0c:0e:04:8d:5b:d5:
                    2e:52:c4:94:f1:78:a7:e8:30:fc:98:bc:10:9a:99:
                    93:12:a0:e7:31:76:f5:c8:e4:4e:80:fc:e6:5a:62:
                    41:6b:34:54:d8:03:b0:29:46:78:e9:0b:96:74:e6:
                    e7:db:2f:5c:71:d4:e8:89:c2:56:6d:59:74:48:f9:
                    2f:d5:2a:1d:7a:cf:dd:cd:a9:8d:62:48:86:c3:fe:
                    38:c5:10:fc:97:d9:50:39:fd:94:56:80:e9:9a:00:
                    3f:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:39:76:B4:B9:B2:AC:90:0B:24:FF:41:E6:4E:45:5E:0F:1C:E7:25
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/563b00-4c84-465a-b6f7-e29a252460cd/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/563b00-4c84-465a-b6f7-e29a252460cd/1/xjl2tLmyrJALJP9B5k5FXg8c5yU.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  109.107.151.0/24
                IPv6:
                  2a11:d240::/29

    Signature Algorithm: sha256WithRSAEncryption
         51:bd:db:8b:ca:c5:76:e0:7b:28:4d:68:d7:df:65:40:6c:d7:
         ba:cb:7c:79:50:7c:52:09:68:49:34:2d:a2:e2:37:dd:e5:3f:
         2b:f0:94:c8:0b:75:f8:09:35:f6:c7:a5:03:40:64:0d:22:20:
         b4:36:a7:b5:22:b5:11:70:43:9c:5f:d6:56:f8:5b:5c:3b:4f:
         13:9c:04:9c:e2:8a:f5:e3:c4:8e:f8:0f:e0:9e:ae:cb:11:17:
         54:1e:5b:7d:fd:e5:bb:32:2b:b1:52:87:34:b3:a0:57:36:17:
         64:f5:8b:59:d2:c5:b9:5a:e0:a9:cc:0e:fd:b7:17:02:ab:8c:
         dc:96:0f:80:52:ec:b2:60:4e:bc:4e:33:89:6c:0d:53:a5:ca:
         de:76:d3:c2:c7:2c:35:cf:e9:64:7e:e7:a8:50:b4:fe:83:9a:
         a3:ff:c7:d5:b3:02:de:50:9b:1f:46:49:71:39:76:50:72:8d:
         51:9d:42:38:ba:3c:f8:31:b2:a8:3f:e2:e3:a9:40:5c:91:be:
         56:6e:bb:3a:05:22:08:6b:9b:ca:b0:09:fa:c3:bb:2e:67:9a:
         83:ae:81:ac:57:0c:b2:a5:8e:c8:c7:af:bb:50:45:5b:1e:e1:
         79:f6:85:f1:7f:cd:1d:87:fd:ad:21:51:ee:9d:2f:60:5d:a2:
         23:bf:53:14
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgISAYVx1onzN2/G5kMk2+d3NvQHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjMwMTAyMDkzNjAzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNjM5NzZiNGI5YjJhYzkwMGIyNGZmNDFlNjRlNDU1ZTBmMWNlNzI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuM2GyLShhlcTUiuS+rMW5uKe/5E6
70rSLillNBn2hplmuIzCt9+rUx2q7pjYqPjdNYTwFPhuEEvjVYDjLGGXGyrAKrdQ
IaOUl8EYDK32BJVCYlPIWMwwEq1oOlsxDFtr0wduiqOXgfVYBQ0m/L9uVBaTmiKT
HOZA8Uw5QttUm0JI/ASKhiOOrN0x8bM8rhufCKb4JJWW1LMRdSE+MpoMDgSNW9Uu
UsSU8Xin6DD8mLwQmpmTEqDnMXb1yOROgPzmWmJBazRU2AOwKUZ46QuWdObn2y9c
cdToicJWbVl0SPkv1Sodes/dzamNYkiGw/44xRD8l9lQOf2UVoDpmgA/7wIDAQAB
o4ICkzCCAo8wHQYDVR0OBBYEFMY5drS5sqyQCyT/QeZORV4PHOclMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzM4LzU2M2Iw
MC00Yzg0LTQ2NWEtYjZmNy1lMjlhMjUyNDYwY2QvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzgvNTYzYjAw
LTRjODQtNDY1YS1iNmY3LWUyOWEyNTI0NjBjZC8xL3hqbDJ0TG15ckpBTEpQOUI1
azVGWGc4YzV5VS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQAbWuXMA0EAgACMAcDBQMqEdJAMA0GCSqGSIb3
DQEBCwUAA4IBAQBRvduLysV24HsoTWjX32VAbNe6y3x5UHxSCWhJNC2i4jfd5T8r
8JTIC3X4CTX2x6UDQGQNIiC0Nqe1IrURcEOcX9ZW+FtcO08TnASc4or148SO+A/g
nq7LERdUHlt9/eW7MiuxUoc0s6BXNhdk9YtZ0sW5WuCpzA79txcCq4zclg+AUuyy
YE68TjOJbA1TpcredtPCxyw1z+lkfueoULT+g5qj/8fVswLeUJsfRklxOXZQco1R
nUI4ujz4MbKoP+LjqUBckb5Wbrs6BSIIa5vKsAn6w7suZ5qDroGsVwyypY7Ix6+7
UEVbHuF59oXxf80dh/2tIVHunS9gXaIjv1MU