Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6QOFjwq6tSrdKo_KPxSZijUpGno.cer
File:                     6QOFjwq6tSrdKo_KPxSZijUpGno.cer (raw, json)
Hash identifier:          4kqLscQeMUKoaH5XS5jBCIi4VfzOG0P5Jb7qy0Y18js=
Subject key identifier:   E9:03:85:8F:0A:BA:B5:2A:DD:2A:8F:CA:3F:14:99:8A:35:29:1A:7A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0185DE5888CD66DAC050748B5ED0DB240A79
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rsync.paas.rpki.ripe.net/repository/0c8bb446-91c0-4138-a33a-b47865de55c5/0/E903858F0ABAB52ADD2A8FCA3F14998A35291A7A.mft
caRepository:             rsync://rsync.paas.rpki.ripe.net/repository/0c8bb446-91c0-4138-a33a-b47865de55c5/0
Notify URL:               https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before:   Mon 23 Jan 2023 11:17:02 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    AS: 24851
                          IP: 81.27.96.0/20
                          IP: 146.247.48.0/20
                          IP: 2a02:2bb8::/32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:de:58:88:cd:66:da:c0:50:74:8b:5e:d0:db:24:0a:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan 23 11:17:02 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=e903858f0abab52add2a8fca3f14998a35291a7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:0a:a2:7a:30:53:30:de:8b:5d:2c:08:c7:ec:
                    ae:36:6c:7b:af:be:de:81:f7:aa:5a:62:de:e3:10:
                    41:81:02:db:0d:0e:bf:33:f2:06:b1:85:4a:5a:a9:
                    84:e6:16:aa:96:7d:e9:a9:c0:4e:52:63:50:47:0f:
                    42:2b:41:21:c7:50:19:9a:b7:00:e0:f9:58:63:db:
                    ce:70:77:a2:c7:65:2e:3f:a9:5a:ac:39:32:83:b8:
                    1e:db:53:b7:84:39:66:f4:b7:82:c0:06:c3:5f:ba:
                    b6:d0:97:8e:b8:8b:21:bd:37:80:b5:5e:65:82:24:
                    5b:dd:45:bb:de:b0:34:87:e6:4f:0b:fd:27:e7:ca:
                    f4:8b:ac:fd:77:b0:a7:12:ef:2f:a8:0d:1b:cf:c9:
                    95:fe:96:3e:fd:c1:bf:b9:8d:30:d5:76:d6:75:ca:
                    b5:15:46:10:04:b3:43:e0:ae:5a:a9:d4:18:4e:89:
                    b5:32:14:17:c0:f8:d6:49:75:7e:3a:1c:93:1b:1b:
                    09:9d:5e:b8:b4:64:dd:9a:ff:f0:02:ed:3f:a3:e7:
                    b3:28:f8:bb:20:d7:a2:8b:6e:4b:ac:a9:36:ae:33:
                    a0:b2:5d:55:01:5f:d7:aa:e4:82:f1:d4:af:03:42:
                    20:0a:23:d4:34:1d:0f:44:7f:bf:62:93:23:5d:3a:
                    e7:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:03:85:8F:0A:BA:B5:2A:DD:2A:8F:CA:3F:14:99:8A:35:29:1A:7A
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/0c8bb446-91c0-4138-a33a-b47865de55c5/0
                RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/0c8bb446-91c0-4138-a33a-b47865de55c5/0/E903858F0ABAB52ADD2A8FCA3F14998A35291A7A.mft
                RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  81.27.96.0/20
                  146.247.48.0/20
                IPv6:
                  2a02:2bb8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  24851

    Signature Algorithm: sha256WithRSAEncryption
         5c:c2:f3:59:0a:8d:ac:63:52:35:24:21:4f:ce:87:d1:39:b2:
         73:6a:6c:12:50:33:a9:0f:7d:e8:ff:04:0e:e8:91:4e:86:d4:
         88:79:31:f7:aa:d6:df:ce:3a:f6:b7:17:98:57:e4:6b:11:e0:
         c1:e8:5e:bb:60:e3:de:29:76:ff:dc:61:cd:3a:df:c8:27:9f:
         2e:b0:5f:46:2b:28:7e:35:d5:8e:7f:e2:e4:e7:57:e5:ba:5a:
         a9:22:7d:c2:01:39:f4:59:9d:bb:03:94:d8:35:e7:89:17:de:
         d2:93:94:02:a1:43:9e:f1:80:d1:1e:68:78:4d:3a:db:b2:df:
         95:28:27:61:d8:5d:94:3d:2c:6b:f7:6f:68:96:b4:46:e7:be:
         4a:fc:4e:6b:85:20:d0:c9:86:42:32:e7:30:22:a2:02:e8:10:
         cf:1b:93:a1:62:1b:9e:5f:2d:eb:7c:fd:92:fc:b6:1f:cb:cf:
         6e:9b:19:10:fc:95:31:af:df:2a:d4:d9:e6:e0:ec:e4:66:21:
         5b:da:1c:7a:a8:a8:77:c8:58:6d:b1:32:95:ea:b5:ad:12:4b:
         b1:04:4b:92:88:f5:0c:a8:1c:74:f9:2d:37:5b:b4:30:dc:c6:
         33:f9:47:57:a4:2d:07:f4:ad:31:1d:b1:5d:8e:9a:f1:c4:41:
         aa:59:c6:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----