Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9baxduldD-RfogCDE30UO3bWdkU.cer
File:                     9baxduldD-RfogCDE30UO3bWdkU.cer (raw, json)
Hash identifier:          e7r1pdQrieM3OQ3iO4L6+HppwZbZ95Q9c+QfhzZshDA=
Subject key identifier:   F5:B6:B1:76:E9:5D:0F:E4:5F:A2:00:83:13:7D:14:3B:76:D6:76:45
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01896478696B7DC1D36412A77EC64DBFB889
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/25/729ad2-ec67-4f95-8b49-40114cdc99da/1/9baxduldD-RfogCDE30UO3bWdkU.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/25/729ad2-ec67-4f95-8b49-40114cdc99da/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 17 Jul 2023 15:29:20 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    AS: 203942
                          IP: 89.107.15.0/24
                          IP: 2a11:5b80::/29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:64:78:69:6b:7d:c1:d3:64:12:a7:7e:c6:4d:bf:b8:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jul 17 15:29:20 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=f5b6b176e95d0fe45fa20083137d143b76d67645
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:b7:4d:16:64:53:3e:1e:8f:cc:9f:eb:e7:7c:
                    44:97:f1:ff:a3:72:28:36:01:1d:db:27:44:81:f2:
                    b5:bb:6a:0b:df:3a:71:41:ae:6b:03:2b:e7:9f:b5:
                    79:30:c5:00:34:2f:7e:cb:84:d0:21:72:42:01:4f:
                    42:85:c3:c5:a4:67:8a:6a:1b:dd:12:4d:44:92:99:
                    d7:b7:3c:72:8d:e8:3b:c9:15:8a:a6:6c:33:00:05:
                    51:ab:78:3b:38:4e:5d:be:0a:c2:91:1d:d8:71:56:
                    cb:15:15:e0:4d:9d:74:b3:44:29:13:76:74:c4:72:
                    ef:63:d4:a1:bc:0a:e9:2d:e5:14:d1:35:b2:0c:09:
                    4e:0c:24:ad:b5:bf:89:e6:fb:87:f1:db:25:41:8a:
                    c9:53:e6:a9:ae:c3:08:c5:db:39:ab:22:e5:45:fb:
                    f7:84:fe:71:70:2b:3a:ef:be:b1:f4:8b:15:47:bd:
                    90:a0:38:0e:48:05:d9:24:10:58:e4:1f:3c:fb:82:
                    a7:20:6f:f5:ea:22:c9:e3:de:56:13:40:4b:ec:f7:
                    84:a1:a6:76:62:4d:c0:e3:d1:3b:74:c7:7b:69:7b:
                    d1:b4:c2:a3:b2:22:c3:6d:64:af:89:99:ea:d6:36:
                    05:46:bb:fa:69:d4:c1:36:50:b3:0f:e1:ee:8f:6f:
                    ed:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:B6:B1:76:E9:5D:0F:E4:5F:A2:00:83:13:7D:14:3B:76:D6:76:45
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/729ad2-ec67-4f95-8b49-40114cdc99da/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/729ad2-ec67-4f95-8b49-40114cdc99da/1/9baxduldD-RfogCDE30UO3bWdkU.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.107.15.0/24
                IPv6:
                  2a11:5b80::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  203942

    Signature Algorithm: sha256WithRSAEncryption
         9e:70:58:08:ca:0b:bd:6a:15:28:25:9c:e9:23:b8:7c:c5:8d:
         11:15:06:cb:d7:f5:30:01:dd:21:76:28:83:e4:b3:f6:04:3e:
         f0:2d:6f:e0:92:44:39:7f:a3:55:b8:a6:1c:4b:b8:4c:4d:fa:
         3a:17:9b:42:b5:0b:cf:a4:09:dd:2a:c7:0c:dc:e4:64:de:86:
         bf:14:32:91:16:3e:e9:ed:4c:e3:c1:b6:d8:38:69:8e:bd:62:
         4f:09:ee:c8:18:41:8f:64:be:76:c4:d1:87:25:d3:ec:05:2c:
         5a:0e:75:c5:22:a1:50:e2:46:16:db:65:ff:2c:e5:d8:a7:07:
         64:93:55:6c:f9:4f:f8:a8:c4:8b:f3:c1:5e:95:72:60:96:53:
         ad:57:27:b7:22:af:9b:ad:d8:26:3c:dd:34:1c:2e:f2:22:87:
         60:f5:a4:f6:88:dc:50:3c:da:6f:2a:e8:bc:35:56:a2:fb:19:
         a9:a5:64:95:6a:5d:9f:25:0e:80:4f:49:e8:3b:fe:9e:f5:d2:
         b4:35:2c:25:a8:90:11:be:26:a7:3c:d9:ad:9d:03:db:52:69:
         bc:3d:86:cc:91:cc:68:dd:f1:2f:e8:05:b0:ca:b2:87:0e:60:
         e8:98:3d:84:1b:8b:00:3d:9e:c1:4d:e2:c7:b1:c4:a2:eb:3c:
         bd:53:1a:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----