Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6Sf9xj0xDT0jG0p1U65OQVgCXp8.cer
File:                     6Sf9xj0xDT0jG0p1U65OQVgCXp8.cer (raw, json)
Hash identifier:          Ks+5mFgHGYXJHPsWC9Ej1+0+6ps2EbjRAvbFpSV3quM=
Subject key identifier:   E9:27:FD:C6:3D:31:0D:3D:23:1B:4A:75:53:AE:4E:41:58:02:5E:9F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018571D72362170AAB4DB7A35AA30447EB4B
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/8c/4a11ef-764f-4283-81ff-05acfacac844/1/6Sf9xj0xDT0jG0p1U65OQVgCXp8.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/8c/4a11ef-764f-4283-81ff-05acfacac844/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 02 Jan 2023 09:36:42 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 195.20.20.0/22
                          IP: 2a07:f580::/29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:71:d7:23:62:17:0a:ab:4d:b7:a3:5a:a3:04:47:eb:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 09:36:42 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=e927fdc63d310d3d231b4a7553ae4e4158025e9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:70:7d:0b:d3:18:b5:38:6a:d4:98:7c:9b:69:
                    06:25:66:f3:f0:76:1c:ea:c7:bb:73:09:6b:a9:3f:
                    4a:91:b3:19:59:0b:a6:7c:77:fc:ec:66:9a:ad:13:
                    2e:5f:84:7a:cb:a9:b9:8a:6e:b8:85:a8:e6:27:b4:
                    c9:e9:c0:63:79:9a:96:f5:ce:97:c6:cb:13:cb:c0:
                    15:da:72:36:89:f5:b0:c3:41:55:c2:ff:4c:15:5e:
                    ba:57:58:c1:65:a9:2b:e2:ae:9a:d6:05:02:a2:bf:
                    23:db:48:72:40:7a:fc:5b:1c:38:89:17:af:ed:71:
                    36:ba:5a:bd:f7:e7:80:aa:e2:a4:5b:9d:c1:14:33:
                    9d:79:ca:41:37:15:16:c3:1f:0d:12:f3:62:39:7c:
                    16:36:bf:8a:79:9a:ed:eb:eb:f6:c6:8a:d9:fb:7d:
                    43:b3:7a:1f:42:6c:7d:f2:5c:8d:87:e3:91:a4:60:
                    77:33:9d:5f:01:67:8d:49:c4:12:f4:17:1b:e0:cd:
                    60:6d:1e:2e:b2:59:86:be:98:3a:19:7e:2d:9a:cb:
                    73:36:f1:ff:61:a0:c0:38:c5:aa:56:cf:64:10:47:
                    07:c2:82:6a:fc:4d:ff:44:b7:4c:a6:7b:f9:9d:20:
                    91:42:ac:98:28:ec:a8:9d:ae:2c:63:f0:24:d8:27:
                    d3:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:27:FD:C6:3D:31:0D:3D:23:1B:4A:75:53:AE:4E:41:58:02:5E:9F
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/4a11ef-764f-4283-81ff-05acfacac844/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/4a11ef-764f-4283-81ff-05acfacac844/1/6Sf9xj0xDT0jG0p1U65OQVgCXp8.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.20.20.0/22
                IPv6:
                  2a07:f580::/29

    Signature Algorithm: sha256WithRSAEncryption
         a2:dd:46:31:6c:eb:3c:c6:56:1f:2a:37:5e:f8:2e:4b:f5:32:
         8b:aa:a5:42:60:0e:cc:95:58:e9:3e:89:9f:21:bf:52:8b:6c:
         26:f1:7d:eb:a2:cd:5d:22:de:c9:1a:a3:50:b8:75:f8:e7:5a:
         92:f9:6f:3f:eb:8a:6f:0c:55:9b:2d:b5:e1:11:9b:24:2e:da:
         b7:85:a6:55:d1:01:f2:0c:c4:27:96:6e:de:51:3f:ce:cf:22:
         a1:63:59:0c:9d:ab:e4:73:6a:38:e0:0a:55:81:7b:c1:0c:9f:
         54:32:c2:15:bc:31:30:33:bc:1f:09:a6:0e:dc:5c:8e:ab:ac:
         08:11:1a:c0:7f:d7:09:ad:35:9d:79:cc:8e:64:54:1f:be:bb:
         fd:71:04:31:b9:ea:ae:83:90:cb:59:ea:5e:96:fb:85:e1:c1:
         d7:11:4f:b0:63:b6:45:2f:76:dc:d7:17:4b:3c:b3:13:f6:1b:
         89:f5:09:ab:e3:81:98:93:3d:db:7e:e2:19:2a:1d:ba:96:bd:
         9a:be:09:5e:40:05:d5:b3:6a:97:a2:74:ed:eb:9f:3c:bc:70:
         dd:35:84:4f:bd:24:ee:15:8a:0f:c3:64:35:28:a9:45:e0:39:
         15:c2:d2:ed:ae:80:39:30:88:83:d6:ae:96:0b:db:d4:47:ed:
         b3:65:f3:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----