Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/GPXRK1j3CNBUv8eB_5zgq7JOw0M.cer
File:                     GPXRK1j3CNBUv8eB_5zgq7JOw0M.cer (raw, json)
Hash identifier:          xUFQ0KQHmftRlQs13nsyPrDUZ1UUfaKuUu+LNIlngYk=
Subject key identifier:   18:F5:D1:2B:58:F7:08:D0:54:BF:C7:81:FF:9C:E0:AB:B2:4E:C3:43
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018571D6A493F2F1AA96EB64436BE746E1F0
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/25/d3cc0e-03c2-4eda-8766-a4344e79c999/1/GPXRK1j3CNBUv8eB_5zgq7JOw0M.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/25/d3cc0e-03c2-4eda-8766-a4344e79c999/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 02 Jan 2023 09:36:10 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 31.222.255.0/24
                          IP: 2a11:8ac0::/29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:71:d6:a4:93:f2:f1:aa:96:eb:64:43:6b:e7:46:e1:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 09:36:10 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=18f5d12b58f708d054bfc781ff9ce0abb24ec343
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:b0:8f:3d:cd:b7:56:be:ba:29:1d:de:34:c9:
                    f4:50:2b:aa:61:6b:22:bf:10:0e:1b:85:98:6c:e2:
                    2a:83:a4:b1:29:9b:2a:bf:52:b1:6c:67:4e:c5:63:
                    8c:1d:19:70:db:b6:65:92:e0:5d:9f:9d:cb:e1:27:
                    30:e9:7d:b6:0e:2f:86:5e:2b:41:e3:0c:19:3c:89:
                    ae:5f:38:99:94:b0:86:cc:cf:57:8b:ac:75:d6:fe:
                    f9:9a:86:f9:2e:bf:c3:80:7e:bd:2d:39:7f:ff:95:
                    d4:6d:b2:fa:18:fe:bf:d2:99:f0:3c:70:51:5b:42:
                    5d:35:f8:d6:72:bd:23:6e:9a:9c:4e:35:8a:b4:23:
                    64:e6:5c:6c:2e:c3:1d:25:9e:86:e0:fe:da:5c:44:
                    b0:8b:c1:3a:ff:dd:9b:4a:91:3e:6d:d6:c0:8c:2c:
                    d5:37:c0:fe:c2:f7:59:39:c3:18:8c:71:f7:58:d0:
                    12:f3:45:51:cd:92:60:95:d3:71:1c:e9:f4:9c:58:
                    ab:82:bc:97:50:08:bc:9c:b8:83:f5:08:f4:2a:32:
                    02:06:79:3b:c4:15:0c:af:c5:45:9f:0a:b6:04:33:
                    07:8f:5c:12:c6:1b:21:a0:b1:30:aa:9f:e5:5e:9c:
                    b8:06:d9:db:7b:43:c8:f3:97:d4:12:f4:43:26:09:
                    55:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:F5:D1:2B:58:F7:08:D0:54:BF:C7:81:FF:9C:E0:AB:B2:4E:C3:43
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/d3cc0e-03c2-4eda-8766-a4344e79c999/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/d3cc0e-03c2-4eda-8766-a4344e79c999/1/GPXRK1j3CNBUv8eB_5zgq7JOw0M.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.222.255.0/24
                IPv6:
                  2a11:8ac0::/29

    Signature Algorithm: sha256WithRSAEncryption
         68:de:20:6e:8b:9d:28:53:53:25:ef:06:47:cc:a0:6d:b9:c9:
         59:24:ec:7f:74:c5:e0:78:3b:11:30:c7:8b:3c:f3:bc:4d:6b:
         76:81:ce:c7:b1:26:56:23:ca:2d:ff:33:65:10:fe:27:e8:75:
         48:bf:9e:4b:75:f8:4a:32:2a:69:4e:d8:da:91:5e:c1:80:bc:
         e8:6c:4b:e4:5e:72:69:f6:50:89:77:96:e3:af:d1:b6:4c:40:
         7c:3f:ac:da:69:3b:8f:f3:7c:81:e2:8b:fe:c8:d7:8d:66:72:
         02:14:b7:da:57:81:c1:0b:c1:1b:d4:3f:d0:56:e4:51:56:b0:
         d8:d6:46:96:d0:d0:20:43:34:28:eb:ae:72:1b:bb:44:4b:40:
         57:49:94:40:bb:e7:70:4e:1e:3c:71:28:06:cf:57:ab:cc:70:
         50:62:a1:0e:23:b5:56:af:af:55:39:dc:28:b3:60:62:50:a8:
         0c:15:5f:8c:19:62:7a:ba:f8:14:ea:97:2d:1d:1b:4c:81:a3:
         17:cb:e0:4c:2b:05:18:48:97:7e:45:5a:61:42:63:ff:71:31:
         af:a3:ea:93:62:1e:80:94:0f:dc:fb:56:9b:23:53:2c:67:e8:
         75:f2:90:aa:8e:a8:99:fb:70:54:4c:53:bb:2a:9f:77:e3:d9:
         67:da:87:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----