Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/NQ_iDr_HVFgnlXCHzHIcxvO22zU.cer
File:                     NQ_iDr_HVFgnlXCHzHIcxvO22zU.cer (raw, json)
Hash identifier:          QJpOHyNDBFBMz51dzZZWsdQGdcrICYzOTJTm5kCB7DQ=
Subject key identifier:   35:0F:E2:0E:BF:C7:54:58:27:95:70:87:CC:72:1C:C6:F3:B6:DB:35
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856DF730FC252DF29BAA0A54F0B5F3DABD
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/c1/d9afe7-cada-44b6-a5e7-0015ccc12cc7/1/NQ_iDr_HVFgnlXCHzHIcxvO22zU.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/c1/d9afe7-cada-44b6-a5e7-0015ccc12cc7/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 15:33:14 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 176.97.203.0/24
                          IP: 2a11:da40::/29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6d:f7:30:fc:25:2d:f2:9b:aa:0a:54:f0:b5:f3:da:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 15:33:14 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=350fe20ebfc7545827957087cc721cc6f3b6db35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:87:2a:30:20:f2:c6:cf:59:f5:e0:60:bb:3d:
                    e9:f7:a9:b4:60:a0:68:53:36:ac:14:a5:bf:72:42:
                    fb:a5:17:8a:f5:c2:37:01:e8:65:33:1e:6a:f0:89:
                    64:af:e4:40:aa:bb:3c:a3:b1:cb:78:e8:38:26:11:
                    55:95:39:f6:11:10:63:c0:10:36:ae:b0:7e:39:e5:
                    ad:08:a9:15:dd:06:ca:f0:88:84:89:47:73:2d:cd:
                    e3:de:2c:43:6c:67:93:6b:48:34:be:d0:fb:c5:2c:
                    5c:e4:f3:ab:3f:e5:e3:6b:80:40:4f:85:33:40:10:
                    22:61:3d:15:2c:12:54:09:4a:3c:1c:3d:c0:9a:27:
                    5c:f5:df:7a:ae:06:7e:36:23:ac:78:5c:54:d3:b5:
                    ac:92:0b:2a:96:db:4a:7f:19:4e:d3:eb:a9:34:09:
                    19:f7:62:a8:86:f7:36:66:07:c4:fd:35:16:1c:ca:
                    4d:db:ab:ab:c7:1f:f3:71:d0:8e:11:63:b1:82:35:
                    0e:78:2d:44:7c:85:19:10:5c:e0:93:16:69:af:8d:
                    17:34:52:ba:69:dc:7b:b9:a1:ad:ff:85:a3:d6:31:
                    20:f2:c5:0f:be:f3:24:e1:0c:93:c0:55:6f:82:07:
                    cb:f7:e3:af:ce:40:85:b1:9e:72:f7:56:85:d4:23:
                    15:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:0F:E2:0E:BF:C7:54:58:27:95:70:87:CC:72:1C:C6:F3:B6:DB:35
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/d9afe7-cada-44b6-a5e7-0015ccc12cc7/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/d9afe7-cada-44b6-a5e7-0015ccc12cc7/1/NQ_iDr_HVFgnlXCHzHIcxvO22zU.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  176.97.203.0/24
                IPv6:
                  2a11:da40::/29

    Signature Algorithm: sha256WithRSAEncryption
         57:30:68:23:17:26:aa:d3:c5:19:d0:23:2b:1a:34:ee:bd:44:
         ff:56:b8:d9:df:69:2d:01:f9:f8:d3:a8:07:89:8a:fd:7e:40:
         4f:6e:9a:fa:aa:35:a4:66:3e:49:83:aa:ab:ba:ce:79:0b:74:
         fc:7a:2b:59:38:06:4f:4f:eb:78:88:7f:94:a0:bd:2c:e8:bb:
         50:50:54:07:5d:74:35:b1:bf:10:f4:b8:5f:f5:4a:78:ed:e6:
         15:e7:c2:42:16:15:10:b9:9d:cc:f9:08:7f:8c:28:f9:96:a6:
         21:9d:e4:42:82:da:f3:5c:50:8b:4d:59:11:52:cb:cf:d1:bc:
         bd:47:32:c1:ed:f5:92:e8:e6:05:96:7a:0e:2a:14:d5:15:4d:
         58:1c:de:4c:83:12:2f:da:fc:ff:92:fd:65:86:e7:1a:e5:d8:
         ce:3e:f7:7a:d4:66:f9:b9:6b:16:e5:52:12:2b:3d:ab:f6:cc:
         75:94:e0:26:58:9a:9f:30:bd:ae:9a:ba:3e:27:31:c6:69:90:
         fc:26:1f:57:9c:04:02:2e:e4:bf:fa:52:c3:fb:07:a6:1f:ef:
         6f:0d:f8:0c:bb:f3:70:44:13:2a:f1:c8:11:ae:0d:b0:cc:aa:
         ac:b3:a8:eb:e0:99:22:72:82:bf:e8:9c:7e:c0:c2:ce:bf:b3:
         e7:f4:c6:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----