Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9Y8GUakK7PkaQsPMn8uVr5XtkXE.cer
File:                     9Y8GUakK7PkaQsPMn8uVr5XtkXE.cer (raw, json)
Hash identifier:          T/1GQCIMQ8YHj+r3A17TE7neF7Hl2Sr387sFmtFoM9k=
Subject key identifier:   F5:8F:06:51:A9:0A:EC:F9:1A:42:C3:CC:9F:CB:95:AF:95:ED:91:71
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856BD11813A8DDF2CFA2D5A63F1FF52B29
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/ce/42eb36-81a5-49cf-9b46-10c54f95a9d2/1/9Y8GUakK7PkaQsPMn8uVr5XtkXE.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/ce/42eb36-81a5-49cf-9b46-10c54f95a9d2/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 05:32:23 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 188.244.121.0/24
                          IP: 2a11:4dc0::/29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6b:d1:18:13:a8:dd:f2:cf:a2:d5:a6:3f:1f:f5:2b:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 05:32:23 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=f58f0651a90aecf91a42c3cc9fcb95af95ed9171
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:18:f1:77:41:a4:4d:83:a0:95:b3:05:06:44:
                    42:3e:74:d3:c2:b0:47:e7:90:47:f1:a4:3a:fb:d1:
                    f0:f6:d9:6c:b3:b6:ef:87:0b:b6:64:23:45:be:78:
                    4d:1e:c8:29:00:7f:60:65:62:b5:49:97:5c:e5:e3:
                    69:6e:72:38:bc:7b:2e:19:9d:a2:15:da:df:2d:40:
                    63:96:ed:1c:9e:11:a6:1d:60:d5:47:2c:ac:5d:5c:
                    fa:02:c0:6c:b1:9d:8f:de:41:0f:98:89:b4:59:14:
                    3d:6e:b7:03:55:61:aa:69:06:6e:c2:5b:e3:a7:d4:
                    a0:dd:f1:88:91:65:47:01:ce:dd:83:9e:cd:3e:60:
                    f3:a4:51:54:64:9d:39:a0:19:57:06:75:da:52:9f:
                    db:b5:f0:94:ea:b1:75:84:cc:0f:21:81:5f:fa:9e:
                    aa:c1:94:b6:9d:3b:e9:fe:99:d5:b4:45:f0:0c:e5:
                    1b:26:66:aa:41:20:8c:9a:58:f6:23:f9:7b:4c:8c:
                    55:cd:90:e1:81:e0:b9:5f:40:f8:ec:1f:4b:7c:54:
                    7c:4e:84:69:43:19:f9:b6:43:f2:8e:7e:3f:0c:d1:
                    42:b9:3f:66:d2:36:94:06:16:59:39:a5:50:20:bf:
                    19:43:76:40:09:60:14:5a:7a:ff:48:1f:1f:4a:cc:
                    1d:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:8F:06:51:A9:0A:EC:F9:1A:42:C3:CC:9F:CB:95:AF:95:ED:91:71
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/42eb36-81a5-49cf-9b46-10c54f95a9d2/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/42eb36-81a5-49cf-9b46-10c54f95a9d2/1/9Y8GUakK7PkaQsPMn8uVr5XtkXE.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  188.244.121.0/24
                IPv6:
                  2a11:4dc0::/29

    Signature Algorithm: sha256WithRSAEncryption
         24:8e:8e:a9:1c:c2:4a:62:62:a4:c2:7f:f5:2b:d2:c2:92:c8:
         f3:77:0b:e2:fc:25:ee:99:d3:3b:49:c9:fd:42:01:06:35:23:
         d8:60:d9:cc:dc:31:51:b7:c3:86:37:30:e8:e5:75:20:3a:f0:
         f4:ac:22:94:e5:16:5c:6d:44:3f:b3:2f:64:d1:e4:eb:46:03:
         c1:a4:fe:7c:d0:83:93:1a:a4:69:fe:d2:33:0d:2c:02:20:37:
         82:76:eb:75:9d:d9:ad:4b:83:d2:ed:f1:93:f0:85:29:48:7d:
         3b:f8:db:ce:05:0f:1e:ff:8d:11:20:9a:b6:6e:db:f0:a2:44:
         91:38:f6:45:59:75:e5:e9:b4:76:46:14:3b:44:e6:f5:7b:bc:
         7e:8a:d8:a0:98:3c:af:b0:09:57:a9:b9:89:94:54:74:3e:66:
         74:36:16:08:bc:97:1a:c6:93:9b:8a:2c:2b:9b:0b:44:1e:ed:
         67:a1:b5:79:86:5a:36:89:ff:2f:dc:a5:17:6b:3d:97:1e:b6:
         a9:3f:55:fc:a4:8f:68:67:28:ae:3b:80:1a:92:3a:ef:8f:6e:
         5a:1e:4a:a7:4b:4e:f4:33:0a:a7:71:cf:70:92:d4:f0:a9:76:
         a7:b2:a4:49:c6:c0:1d:e2:c0:71:fc:5d:c3:56:b7:f8:ea:f4:
         9b:23:0a:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----