Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/M95dyYiHIZJkrE5CHYgOiSkPRWo.cer
File:                     M95dyYiHIZJkrE5CHYgOiSkPRWo.cer (raw, json)
Hash identifier:          pCLMjcrxP5k70z7rB504BiDBwj3tIyUpA4O5TnuuyDA=
Subject key identifier:   33:DE:5D:C9:88:87:21:92:64:AC:4E:42:1D:88:0E:89:29:0F:45:6A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0185708B253E455C0FD0232529426F905CAB
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/d6/5491a2-6222-4ec7-b927-3e6507b2a2b7/1/M95dyYiHIZJkrE5CHYgOiSkPRWo.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/d6/5491a2-6222-4ec7-b927-3e6507b2a2b7/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 02 Jan 2023 03:34:05 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 193.228.125.0/24
                          IP: 2a11:2fc0::/32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:8b:25:3e:45:5c:0f:d0:23:25:29:42:6f:90:5c:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 03:34:05 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=33de5dc98887219264ac4e421d880e89290f456a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:de:41:6a:84:c8:0e:7e:26:b9:dd:57:6c:2b:
                    4c:ca:13:22:bc:e8:49:fe:e8:37:2b:b5:90:8e:9e:
                    97:dd:c7:7c:41:a1:2b:3b:f7:26:aa:8b:21:a5:31:
                    00:fc:94:49:62:cc:59:7b:08:b4:fb:65:43:13:9f:
                    14:bf:36:8f:d1:c6:83:5a:dd:06:31:22:19:6d:a0:
                    7f:1b:c0:9e:a4:bd:1c:cc:f9:2d:58:66:19:80:0b:
                    75:72:f2:39:bc:b0:79:2a:e1:24:4f:cb:f1:e3:70:
                    e8:08:e7:a3:d9:9e:0c:d2:a5:db:3a:3f:49:5c:e2:
                    e4:0b:bb:8c:8c:b0:66:99:87:9f:cf:85:c3:73:40:
                    a1:99:fe:73:c3:d2:80:20:ff:52:44:86:a7:87:20:
                    62:69:ab:07:d5:77:89:1a:27:70:ac:57:67:cf:91:
                    05:c0:98:83:8b:95:f9:fc:ab:7b:85:85:2e:56:db:
                    1f:bd:45:4b:dd:32:c4:ad:15:2a:db:64:e6:8d:c3:
                    eb:fd:de:f0:35:85:83:f4:58:46:40:a1:73:07:46:
                    c9:78:c3:cf:2d:89:16:bb:03:46:40:c7:5a:2e:d8:
                    0f:4e:00:cc:5b:21:a0:f0:c2:e3:70:24:fa:db:f4:
                    a7:bc:3c:76:ee:2b:18:c8:ba:b5:6f:82:d7:bb:79:
                    31:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:DE:5D:C9:88:87:21:92:64:AC:4E:42:1D:88:0E:89:29:0F:45:6A
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/5491a2-6222-4ec7-b927-3e6507b2a2b7/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/5491a2-6222-4ec7-b927-3e6507b2a2b7/1/M95dyYiHIZJkrE5CHYgOiSkPRWo.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.228.125.0/24
                IPv6:
                  2a11:2fc0::/32

    Signature Algorithm: sha256WithRSAEncryption
         11:09:9b:bc:00:fe:5e:47:f9:58:fb:86:50:a4:7f:9d:07:d8:
         49:d2:b8:f5:f4:8f:0e:2c:33:2d:4b:f6:4b:5d:89:23:a5:2c:
         d9:46:fe:a1:42:b8:92:56:9c:7f:32:99:94:51:62:a7:9a:ed:
         1a:78:63:de:1d:76:84:b6:12:ba:c2:4e:c6:3f:5f:b5:35:35:
         0d:77:55:87:66:40:0e:79:7e:52:3c:d8:1f:bf:59:fa:84:47:
         09:0e:01:54:97:c5:e8:15:43:a3:15:f8:c4:70:76:f5:08:b2:
         0a:ef:4d:f5:20:94:bd:f6:19:85:6d:62:35:2c:8b:1a:d0:fc:
         30:4f:10:68:8b:c4:a6:6e:7c:9e:23:70:b4:45:f4:e8:a3:d9:
         5e:d1:2b:df:f8:57:5d:3f:e9:cc:d4:ae:b3:c8:0a:14:9a:6b:
         0c:bf:d7:c3:9f:65:ae:1e:7f:06:b6:bb:f8:6f:fc:79:4d:99:
         5b:a6:c9:fb:d4:a4:bd:57:66:d1:7b:d0:08:12:c1:bf:33:68:
         a5:0f:fc:cd:0a:38:61:d1:2d:5b:e7:fd:93:99:19:05:db:48:
         b3:a8:f5:3e:55:1f:28:48:97:17:90:a7:e7:ab:bf:72:0b:23:
         60:87:fe:5f:0f:20:f2:b6:f2:db:44:95:5c:25:7b:4f:ad:b3:
         dc:82:1b:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----