Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0MoVMIDkqZ6oWJURUiCYKe9tO3I.cer
File:                     0MoVMIDkqZ6oWJURUiCYKe9tO3I.cer (raw, json)
Hash identifier:          MFnbCC2/LBSX8/0wIe1tr3LP877Ynx0freYNY0rMjNs=
Subject key identifier:   D0:CA:15:30:80:E4:A9:9E:A8:58:95:11:52:20:98:29:EF:6D:3B:72
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856CAD41E11AB95620447D1804E2C7F04C
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/82/288ee2-c1dd-4d3f-bd7b-09dc3e253df1/1/0MoVMIDkqZ6oWJURUiCYKe9tO3I.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/82/288ee2-c1dd-4d3f-bd7b-09dc3e253df1/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 09:32:52 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 212.52.11.0/24
                          IP: 2a12:4e00::/29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6c:ad:41:e1:1a:b9:56:20:44:7d:18:04:e2:c7:f0:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 09:32:52 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=d0ca153080e4a99ea858951152209829ef6d3b72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:27:f8:3b:95:3e:de:e9:1d:13:ff:f0:80:d4:
                    c2:7e:d5:11:33:89:d1:70:63:f0:44:a1:9c:b1:8d:
                    54:f6:0b:6a:bb:52:36:90:9c:39:97:d3:77:81:fd:
                    22:9b:be:a1:ff:41:80:64:a4:b3:f9:73:cb:21:ea:
                    07:54:b7:01:bc:1d:75:3a:28:bb:ba:0b:c8:56:a1:
                    7b:9d:00:4b:a8:48:ac:51:03:67:43:58:8f:fe:25:
                    ee:52:47:51:c1:52:6b:e3:4f:a8:79:7c:18:ea:ab:
                    f6:c5:b7:b0:d2:c2:10:80:4c:6e:9d:a8:c3:a6:f6:
                    d2:78:69:3b:79:a9:23:0d:8c:38:23:0d:0f:ca:2c:
                    83:b9:09:85:dc:66:e0:b8:f6:28:35:72:34:af:28:
                    f9:03:13:79:64:cd:13:78:84:86:f7:6f:28:7e:45:
                    d6:1e:f5:51:88:1e:4c:7e:ac:3f:9c:79:00:df:ed:
                    e2:f9:e4:5c:b7:37:1a:9f:bb:0d:d9:08:50:1b:fd:
                    a4:90:5a:0a:eb:d4:c6:d4:ce:3c:1a:64:50:07:e0:
                    b6:2e:6c:d0:4c:b1:18:d6:31:98:52:5f:49:54:ad:
                    c0:c9:44:03:5c:bf:8c:e6:35:aa:24:3d:3a:14:5a:
                    d5:c9:00:70:4b:79:02:9b:cf:4c:f3:0f:f5:b2:0c:
                    b1:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:CA:15:30:80:E4:A9:9E:A8:58:95:11:52:20:98:29:EF:6D:3B:72
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/288ee2-c1dd-4d3f-bd7b-09dc3e253df1/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/288ee2-c1dd-4d3f-bd7b-09dc3e253df1/1/0MoVMIDkqZ6oWJURUiCYKe9tO3I.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.52.11.0/24
                IPv6:
                  2a12:4e00::/29

    Signature Algorithm: sha256WithRSAEncryption
         ab:93:5f:08:69:7a:3b:93:0e:2b:9a:c5:49:94:59:91:84:a4:
         23:b1:c9:05:70:38:46:4e:df:92:56:35:e2:a2:73:02:cf:d0:
         03:6c:db:cc:ee:3b:62:ec:69:32:da:03:6d:af:56:71:64:d1:
         99:15:85:8b:94:b1:ca:09:88:73:64:41:65:a3:02:26:a7:4c:
         f2:dc:35:b9:7b:10:24:41:b4:1e:42:cd:2b:2a:e9:1d:80:84:
         99:b3:43:2d:e3:ac:7e:85:18:58:37:02:55:42:9f:e8:27:24:
         da:eb:21:27:4e:6e:aa:7f:2c:dd:55:27:cc:fc:f8:9b:5e:02:
         b2:1a:91:ca:a6:54:62:a1:b9:fc:fa:fa:73:e9:e7:18:aa:39:
         ce:58:aa:d8:2a:35:fe:ba:65:aa:e5:ff:15:ae:08:6f:97:72:
         59:ed:f6:00:58:4b:ba:39:e7:dc:a4:c0:43:09:9f:d3:a5:0f:
         7c:20:a1:20:d3:fe:b3:0f:cb:5d:fa:af:53:dd:1e:71:8f:b2:
         75:e4:6b:52:92:17:d8:60:66:0c:31:5c:0c:2e:43:2b:ad:79:
         02:5c:8d:3b:57:6c:d5:00:35:c6:04:8a:85:c3:07:de:8d:48:
         92:fc:c3:1b:03:bf:ab:41:f6:d2:31:06:e5:56:4c:37:5b:5e:
         54:95:cc:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----