Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/SSnCDXq0i2Dz2P4SdeyAywEolAQ.cer
File:                     SSnCDXq0i2Dz2P4SdeyAywEolAQ.cer (raw, json)
Hash identifier:          nA1Mqm1jLV7i163NLGFVeMOO46ZAp27Aa2jHFhPbDNc=
Subject key identifier:   49:29:C2:0D:7A:B4:8B:60:F3:D8:FE:12:75:EC:80:CB:01:28:94:04
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0185708948AA26D0F09BFE05210827FA387F
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/45/e64400-09c9-4135-8a80-187e99dcd66b/1/SSnCDXq0i2Dz2P4SdeyAywEolAQ.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/45/e64400-09c9-4135-8a80-187e99dcd66b/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 02 Jan 2023 03:32:03 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    AS: 204790
                          IP: 185.240.24.0/22
                          IP: 2a0c:6b80::/29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:89:48:aa:26:d0:f0:9b:fe:05:21:08:27:fa:38:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 03:32:03 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=4929c20d7ab48b60f3d8fe1275ec80cb01289404
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:24:29:99:2b:5c:68:05:62:88:b1:1c:7a:78:
                    c9:01:f8:81:85:4d:a9:bf:85:ec:42:d7:a0:82:88:
                    9e:56:ff:d6:72:13:dc:dd:65:8e:ba:25:a0:2e:ce:
                    6d:4b:1b:c9:52:be:81:80:cc:0e:15:15:4b:34:5d:
                    22:f3:7d:94:d3:69:54:a6:2e:ff:f9:92:04:dd:7a:
                    e0:9c:9c:3e:9a:51:65:a4:01:6b:25:75:b8:c1:b9:
                    db:47:ae:b1:da:d1:94:e1:32:63:3d:6f:35:42:7b:
                    d2:5c:69:1a:8d:9c:f6:98:ef:ea:5e:19:da:f1:cc:
                    60:39:1f:57:48:6b:b4:c7:2c:8c:39:6b:97:21:25:
                    3d:a6:28:c0:e3:bb:ad:50:5a:c0:87:f7:45:90:62:
                    67:55:97:ac:18:82:60:57:75:7c:19:66:7d:a3:8a:
                    b2:50:44:2a:26:cd:61:9a:84:66:c5:05:6f:b7:18:
                    58:1d:40:dc:13:3f:37:1d:49:72:1d:00:68:ec:6f:
                    e6:9f:22:dc:54:80:20:2d:48:27:83:84:9c:88:5b:
                    3b:a3:d2:bb:4e:c2:27:3f:42:43:e7:40:3a:62:f9:
                    d9:97:a3:a2:08:d7:06:d1:2a:33:5d:3f:29:09:49:
                    67:cd:27:3d:08:9e:26:e9:ab:4c:49:4f:3b:11:f7:
                    92:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:29:C2:0D:7A:B4:8B:60:F3:D8:FE:12:75:EC:80:CB:01:28:94:04
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/e64400-09c9-4135-8a80-187e99dcd66b/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/e64400-09c9-4135-8a80-187e99dcd66b/1/SSnCDXq0i2Dz2P4SdeyAywEolAQ.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.240.24.0/22
                IPv6:
                  2a0c:6b80::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  204790

    Signature Algorithm: sha256WithRSAEncryption
         8c:a5:94:38:b7:33:c2:02:f1:d9:aa:69:05:97:be:da:18:77:
         d4:78:50:6f:b9:e0:eb:5d:d8:25:e2:c1:2c:f8:91:b9:3c:59:
         e0:25:5b:b5:e8:44:1b:72:65:ff:68:e5:5c:3d:6d:3f:92:75:
         3f:ce:0f:9f:bf:66:79:b1:81:e0:89:ca:f7:7b:77:48:81:e3:
         de:9c:1b:b7:b9:fa:ad:42:88:57:b3:0d:bd:a6:a1:2c:3b:1f:
         55:28:15:c3:e5:f3:d3:41:85:4c:b9:08:2c:af:f4:ec:76:15:
         21:40:3f:63:ca:70:08:2b:82:27:1b:01:24:ac:d2:e2:01:aa:
         d3:e8:6d:2b:09:22:9a:e7:a6:6d:f7:59:cf:ee:9a:6f:5b:60:
         f6:7e:46:3e:ae:b7:22:c0:cd:fb:2e:0b:ed:c6:7c:e9:49:ac:
         1e:fa:bf:09:53:7d:fc:6c:6b:b7:c9:87:b1:23:98:fc:ca:a0:
         75:77:f4:67:ae:9d:40:eb:88:d9:7b:74:e1:0a:e3:2b:fe:cf:
         e4:3a:19:b4:8b:de:42:d2:1e:da:11:13:d1:c4:db:6b:bd:a9:
         a7:c7:f6:16:81:49:9b:86:43:d8:62:53:a2:c1:48:0d:9f:39:
         f7:01:60:01:22:64:bb:95:45:a1:0e:e3:95:b3:ba:e2:e3:7d:
         f5:40:6d:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----