Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/zVrKKZ01Wq3-Hvk5VGKA5YjSSaM.cer
File:                     zVrKKZ01Wq3-Hvk5VGKA5YjSSaM.cer (raw, json)
Hash identifier:          I89WiReEpqWsavawkKHTnzvKqx0e/QEL06ezGEzwaZc=
Subject key identifier:   CD:5A:CA:29:9D:35:5A:AD:FE:1E:F9:39:54:62:80:E5:88:D2:49:A3
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856DF76CE5EAF3CA3944824CCD85140DFF
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/6a/f7f8e9-a9ef-406d-a593-9cc4805e6777/1/zVrKKZ01Wq3-Hvk5VGKA5YjSSaM.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/6a/f7f8e9-a9ef-406d-a593-9cc4805e6777/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 15:33:29 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 5.172.176.0/24
                          IP: 2a11:4500::/29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6d:f7:6c:e5:ea:f3:ca:39:44:82:4c:cd:85:14:0d:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 15:33:29 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=cd5aca299d355aadfe1ef939546280e588d249a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:d7:a1:4c:de:0f:5e:c9:14:94:21:f1:f6:3d:
                    09:81:89:c3:26:98:47:f0:27:ee:d9:97:b1:61:25:
                    1d:9e:0f:24:20:99:0d:15:46:99:8f:85:13:e0:53:
                    2d:11:e0:96:91:b7:b6:47:eb:4e:6e:1b:4b:4e:69:
                    fd:79:1c:00:36:a4:96:d0:6b:d0:fc:55:f2:7c:7c:
                    64:c9:2c:b5:88:51:57:e4:8c:b2:31:79:ad:87:ba:
                    20:f1:34:52:67:0b:5a:1e:d6:91:09:ae:48:a4:d6:
                    31:6a:57:f3:27:92:a3:d2:1f:e1:e7:f0:51:88:a2:
                    03:84:f3:3c:94:6f:78:ec:72:7f:f2:6e:14:b0:62:
                    69:65:f7:e0:4f:e9:02:ba:bd:02:e4:dd:08:d6:fc:
                    64:8b:34:8d:d2:d7:7f:21:ec:a4:6f:93:5b:57:df:
                    53:61:ee:9f:08:4f:88:e8:4e:1f:ad:a1:59:ff:2e:
                    51:10:40:00:d8:9c:2f:55:31:74:11:92:4d:86:3b:
                    3d:62:6d:eb:22:70:85:e4:2c:3f:c2:87:f4:f3:8a:
                    e5:e5:0d:a0:59:87:ea:58:3f:7d:dc:6d:28:44:da:
                    d3:96:c9:c9:5b:8d:85:bf:4a:94:e1:d7:13:e3:e0:
                    6e:01:9a:6a:48:ee:1d:14:21:b7:62:ac:16:54:08:
                    2c:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:5A:CA:29:9D:35:5A:AD:FE:1E:F9:39:54:62:80:E5:88:D2:49:A3
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/f7f8e9-a9ef-406d-a593-9cc4805e6777/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/f7f8e9-a9ef-406d-a593-9cc4805e6777/1/zVrKKZ01Wq3-Hvk5VGKA5YjSSaM.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.172.176.0/24
                IPv6:
                  2a11:4500::/29

    Signature Algorithm: sha256WithRSAEncryption
         62:ec:7a:2c:bb:bb:8a:38:b8:6c:96:9c:72:66:c1:3e:48:3b:
         90:71:97:13:59:07:cf:c4:bc:b3:3f:b8:86:d9:c7:84:9c:2a:
         41:71:e5:45:e6:c9:d6:17:b7:31:b5:a1:a2:e1:39:37:46:dd:
         bb:82:b8:ac:04:31:c2:1f:ce:d9:08:90:ee:09:0d:0d:d0:0a:
         4a:08:ee:1e:e3:52:1d:65:98:50:2d:62:04:8a:19:2e:4b:52:
         a2:d4:8a:b2:71:03:1d:c3:69:9c:3a:18:cb:cf:91:06:cf:28:
         37:0e:7d:ef:93:d0:55:63:72:0b:09:be:2a:85:e7:e6:f1:15:
         be:06:f5:5f:bc:a7:16:8c:f7:f1:00:bf:78:97:33:7e:b7:69:
         ff:c1:e2:69:86:4e:d6:2e:b3:44:98:9c:d2:bd:e7:a7:a0:fd:
         d4:f2:01:2e:9b:10:04:ea:48:34:73:1d:64:ad:a0:24:69:87:
         fd:43:b4:82:cd:06:3c:24:9d:25:7b:fc:2c:15:a0:a7:25:45:
         0e:ab:85:d1:1a:49:f0:40:3f:29:da:a4:3a:aa:c1:87:0a:ac:
         0f:a6:9a:79:12:e1:bc:11:95:f7:d0:9f:b3:43:2d:1d:d8:d2:
         4e:fe:b4:8e:e1:0c:ee:3b:ce:ad:35:35:5b:fe:a8:2a:47:61:
         35:d5:c8:8c
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgISAYVt92zl6vPKOUSCTM2FFA3/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjMwMTAxMTUzMzI5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZDVhY2EyOTlkMzU1YWFkZmUxZWY5Mzk1NDYyODBlNTg4ZDI0OWEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1dehTN4PXskUlCHx9j0JgYnDJphH
8Cfu2ZexYSUdng8kIJkNFUaZj4UT4FMtEeCWkbe2R+tObhtLTmn9eRwANqSW0GvQ
/FXyfHxkySy1iFFX5IyyMXmth7og8TRSZwtaHtaRCa5IpNYxalfzJ5Kj0h/h5/BR
iKIDhPM8lG947HJ/8m4UsGJpZffgT+kCur0C5N0I1vxkizSN0td/Ieykb5NbV99T
Ye6fCE+I6E4fraFZ/y5REEAA2JwvVTF0EZJNhjs9Ym3rInCF5Cw/wof084rl5Q2g
WYfqWD993G0oRNrTlsnJW42Fv0qU4dcT4+BuAZpqSO4dFCG3YqwWVAgsMwIDAQAB
o4ICkzCCAo8wHQYDVR0OBBYEFM1ayimdNVqt/h75OVRigOWI0kmjMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzZhL2Y3Zjhl
OS1hOWVmLTQwNmQtYTU5My05Y2M0ODA1ZTY3NzcvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNmEvZjdmOGU5
LWE5ZWYtNDA2ZC1hNTkzLTljYzQ4MDVlNjc3Ny8xL3pWcktLWjAxV3EzLUh2azVW
R0tBNVlqU1NhTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQABaywMA0EAgACMAcDBQMqEUUAMA0GCSqGSIb3
DQEBCwUAA4IBAQBi7Hosu7uKOLhslpxyZsE+SDuQcZcTWQfPxLyzP7iG2ceEnCpB
ceVF5snWF7cxtaGi4Tk3Rt27grisBDHCH87ZCJDuCQ0N0ApKCO4e41IdZZhQLWIE
ihkuS1Ki1IqycQMdw2mcOhjLz5EGzyg3Dn3vk9BVY3ILCb4qhefm8RW+BvVfvKcW
jPfxAL94lzN+t2n/weJphk7WLrNEmJzSveenoP3U8gEumxAE6kg0cx1kraAkaYf9
Q7SCzQY8JJ0le/wsFaCnJUUOq4XRGknwQD8p2qQ6qsGHCqwPppp5EuG8EZX30J+z
Qy0d2NJO/rSO4QzuO86tNTVb/qgqR2E11ciM