Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/GuXC_ZcWcY9CYgKDR5HZQanIRqc.cer
File:                     GuXC_ZcWcY9CYgKDR5HZQanIRqc.cer (raw, json)
Hash identifier:          zQzta1x8K6XcxhuCjXQadH23OWnoHOQYEw/ATJUyUvc=
Subject key identifier:   1A:E5:C2:FD:97:16:71:8F:42:62:02:83:47:91:D9:41:A9:C8:46:A7
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856CAC8180963251B68869BA1EE81E88A2
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/12/aa576f-9aab-4cc8-a738-56f52b0ae04a/1/GuXC_ZcWcY9CYgKDR5HZQanIRqc.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/12/aa576f-9aab-4cc8-a738-56f52b0ae04a/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 09:32:02 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 176.116.10.0/24
                          IP: 2a11:f5c0::/29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6c:ac:81:80:96:32:51:b6:88:69:ba:1e:e8:1e:88:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 09:32:02 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=1ae5c2fd9716718f426202834791d941a9c846a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:51:48:e7:2b:34:b1:fd:92:55:55:68:68:94:
                    2e:51:06:b4:de:26:bb:0a:d1:ca:61:27:41:48:a8:
                    66:dd:49:35:9a:1a:dd:33:62:da:05:2e:86:f9:61:
                    69:bf:7a:10:59:f2:3b:87:72:c5:98:76:a8:bf:a9:
                    0d:bf:2d:82:e1:8c:3d:f2:60:64:4b:95:58:d1:1d:
                    2a:23:8f:d9:7a:69:8b:c0:e6:9e:3b:88:41:ff:ce:
                    1f:6d:a4:7e:9a:13:a4:a9:a9:35:da:f1:3e:38:e5:
                    83:75:eb:fc:4e:e6:1f:47:93:42:b4:f5:92:32:21:
                    f2:01:49:16:87:e4:b2:84:17:2e:25:4f:1e:8e:0c:
                    cd:71:01:04:4c:ba:07:91:85:72:ca:ef:83:b5:5d:
                    56:0d:ba:ca:0b:03:bd:fa:32:9a:96:ea:2a:9a:c5:
                    c3:f7:e8:9b:e1:9c:a7:d8:2a:3b:03:cf:66:97:96:
                    7b:5d:0a:13:89:31:f1:71:7c:c4:9b:fa:89:c5:d5:
                    35:54:8f:b5:14:e0:90:11:70:64:c9:f6:3c:33:a6:
                    d3:cc:f5:9d:da:b4:57:ba:6f:1e:34:48:85:db:b1:
                    1a:dd:62:50:02:ba:b0:01:52:b6:5c:13:84:4c:9f:
                    86:7a:47:68:7d:c2:65:96:59:cd:92:cb:56:f7:3a:
                    46:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:E5:C2:FD:97:16:71:8F:42:62:02:83:47:91:D9:41:A9:C8:46:A7
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/aa576f-9aab-4cc8-a738-56f52b0ae04a/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/aa576f-9aab-4cc8-a738-56f52b0ae04a/1/GuXC_ZcWcY9CYgKDR5HZQanIRqc.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  176.116.10.0/24
                IPv6:
                  2a11:f5c0::/29

    Signature Algorithm: sha256WithRSAEncryption
         41:2c:e3:8f:56:6d:0f:78:15:d2:71:d6:24:52:61:63:74:f2:
         c4:99:73:37:28:36:87:65:29:d0:a0:ab:dc:9d:74:2a:15:f5:
         77:2e:7e:87:32:96:a9:26:da:73:05:87:0b:4f:fe:c0:86:3f:
         27:18:97:b5:06:67:c3:24:33:c4:c4:a4:fb:91:65:5f:bf:7b:
         fe:d9:e9:5a:e7:0b:96:90:ff:e4:39:97:18:ea:12:4b:81:7b:
         6a:d4:5e:21:73:c5:91:e3:d4:b3:87:f9:15:11:a8:74:46:8f:
         8b:c0:63:3d:c5:2e:60:f3:8e:d6:c4:b7:49:db:8e:d9:b0:52:
         1f:89:68:b8:91:71:15:73:17:61:09:32:8c:6c:a8:f1:e9:cc:
         77:a8:7e:93:eb:05:f6:f7:11:c8:c8:93:b7:be:6f:b4:9a:69:
         94:2e:12:13:b0:f1:be:89:fe:85:2f:22:0d:06:68:8e:49:80:
         8d:37:f9:52:03:8b:5b:d8:48:24:b8:53:2b:16:c0:03:cd:a9:
         4f:65:b9:00:9c:6a:fa:d0:46:3f:dc:b0:9e:ab:4b:6a:45:be:
         a0:b4:98:26:7a:f5:45:36:34:40:28:00:c6:1c:5b:84:9c:d5:
         c2:d6:fa:10:c8:5f:3e:0d:ce:15:2e:d7:41:f2:6f:ba:94:ce:
         fb:5c:2e:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----