Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/PjBjBS2uRspR0oohgDb7_VozpF8.cer
File:                     PjBjBS2uRspR0oohgDb7_VozpF8.cer (raw, json)
Hash identifier:          4VB1hlzdj52p4JeWeuGl1DBw1Kk6C0ZJ6xO6isCcA/I=
Subject key identifier:   3E:30:63:05:2D:AE:46:CA:51:D2:8A:21:80:36:FB:FD:5A:33:A4:5F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856B6309DC92C444EBAD9D5DF89C24C48B
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/4c/c1cf28-85f8-4c9e-b77a-45d39e12f5f5/1/PjBjBS2uRspR0oohgDb7_VozpF8.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/4c/c1cf28-85f8-4c9e-b77a-45d39e12f5f5/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 03:32:10 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 185.27.32.0/22
                          IP: 185.42.196.0/22
                          IP: 2a04:8b80::/29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6b:63:09:dc:92:c4:44:eb:ad:9d:5d:f8:9c:24:c4:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 03:32:10 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=3e3063052dae46ca51d28a218036fbfd5a33a45f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:9e:7c:b3:4b:9f:78:9c:5a:dd:f5:c9:ed:18:
                    3f:3b:ac:ec:81:bc:2a:38:a1:c4:43:1e:85:42:3c:
                    0a:25:4c:bd:6b:bb:27:b2:3b:2a:0c:84:9e:c6:7b:
                    d9:ff:7d:35:90:51:07:3e:d1:bb:8b:cd:8b:9d:3b:
                    47:06:cf:25:55:88:29:4a:73:1b:e0:d3:68:8b:af:
                    2d:7a:3a:56:d8:a9:86:83:1d:72:0c:38:47:db:0e:
                    f6:77:c2:e0:41:aa:0f:84:96:7d:b1:3b:72:ff:46:
                    9b:b8:31:09:21:4e:9a:b6:db:ed:bd:cb:24:00:22:
                    bd:8f:58:f4:63:43:46:5a:36:90:76:bf:60:4d:d3:
                    41:0f:cc:f2:1d:8b:96:d9:8b:83:52:3c:2f:98:86:
                    ed:01:98:70:01:65:f8:40:7e:d2:ec:db:0d:0d:04:
                    65:87:16:f7:07:11:f6:b7:1c:fc:57:5b:98:94:77:
                    ea:af:97:a3:a6:7a:1f:27:5a:9f:24:a3:cb:56:4f:
                    aa:54:67:86:05:fc:4b:89:d4:53:0c:2f:5a:cc:39:
                    ba:b0:ab:d4:82:a7:f1:0f:91:64:63:c3:91:68:ce:
                    e1:c6:c2:9f:6f:04:d2:e6:51:5e:5d:71:76:7e:b5:
                    3e:92:77:e3:ea:c6:97:71:c7:b4:51:9e:e4:bc:20:
                    dc:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:30:63:05:2D:AE:46:CA:51:D2:8A:21:80:36:FB:FD:5A:33:A4:5F
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/c1cf28-85f8-4c9e-b77a-45d39e12f5f5/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/c1cf28-85f8-4c9e-b77a-45d39e12f5f5/1/PjBjBS2uRspR0oohgDb7_VozpF8.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.27.32.0/22
                  185.42.196.0/22
                IPv6:
                  2a04:8b80::/29

    Signature Algorithm: sha256WithRSAEncryption
         6b:cd:02:7b:cc:23:da:28:ea:93:64:05:0c:29:cc:5a:6b:17:
         0a:31:82:61:b8:f7:b7:7d:6f:87:07:b8:77:2d:2c:fb:01:8f:
         8d:86:20:d5:74:2c:29:97:74:8e:a1:3a:76:85:39:25:32:63:
         40:7f:6d:bc:b9:82:1d:8d:51:b1:fa:f4:8b:89:cc:e2:48:7d:
         6e:bc:3a:9d:81:5d:b8:be:9b:ad:a1:9a:a9:3c:f1:09:ed:29:
         eb:cf:b9:48:11:66:dd:e0:80:77:86:79:da:97:8f:18:54:33:
         8b:49:12:46:0a:09:f8:0b:16:78:a4:2a:7a:18:7c:da:bc:fd:
         e8:c2:c5:12:a5:cc:9a:06:6c:4a:fa:72:c7:9b:dc:b3:46:27:
         f0:de:e6:dc:a4:03:e5:5f:ae:dd:84:af:b5:f7:71:2d:89:3b:
         a0:3e:49:25:7d:3b:33:39:7c:0d:82:70:16:8e:01:7c:d8:2a:
         20:ca:aa:28:6c:2b:69:f3:4d:e2:9f:a2:34:cc:ca:d4:2a:21:
         9a:2d:f8:3b:15:36:da:b5:43:33:88:5b:7e:09:92:00:00:62:
         a2:cd:73:e3:ee:70:68:e6:90:d0:d9:84:46:65:a2:27:15:f9:
         03:e7:3f:ad:1d:26:bb:22:33:35:2e:b1:c5:5c:1e:cf:67:04:
         74:c4:d5:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----