Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/TJVUyECy-tJl7NeTMEo25WMmjio.cer
File:                     TJVUyECy-tJl7NeTMEo25WMmjio.cer (raw, json)
Hash identifier:          3SAFsZEzeKJR6bRGN2fpwpQRdQg9Z17SlNdtzsyEY9Q=
Subject key identifier:   4C:95:54:C8:40:B2:FA:D2:65:EC:D7:93:30:4A:36:E5:63:26:8E:2A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0185708BEAC205EEEACFA7D06351E53309B0
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/a6/1d8824-545a-4b05-8daf-7d87c1940fe9/1/TJVUyECy-tJl7NeTMEo25WMmjio.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/a6/1d8824-545a-4b05-8daf-7d87c1940fe9/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 02 Jan 2023 03:34:55 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 45.86.37.0/24
                          IP: 2a0d:83c0::/29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:8b:ea:c2:05:ee:ea:cf:a7:d0:63:51:e5:33:09:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 03:34:55 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=4c9554c840b2fad265ecd793304a36e563268e2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:bb:8d:84:48:eb:e2:1e:ec:27:1c:4c:eb:5a:
                    ce:fd:66:d3:12:bd:05:62:02:3a:58:b7:82:1b:b1:
                    6b:a0:39:8f:43:98:c0:0c:d5:b3:37:16:a8:08:5a:
                    b1:65:d1:d6:5b:2a:ed:0c:41:0d:59:00:e5:d3:cc:
                    36:63:3b:79:6d:9e:25:a0:d3:21:a1:fa:c1:e5:51:
                    d0:ad:a8:a8:8e:21:3c:ab:f4:2d:19:f8:47:8e:3a:
                    eb:e9:bc:56:a7:4c:34:be:e4:29:f6:76:e7:30:85:
                    08:79:bb:ef:e3:e3:6b:9a:f8:09:46:41:20:38:b1:
                    b7:24:18:38:f0:4c:03:b1:ec:ab:09:6d:79:ca:83:
                    02:8f:cb:5d:fa:92:a1:c6:66:04:21:ea:5b:ef:20:
                    3f:cc:be:b1:78:e1:74:a2:2d:2a:5e:a2:da:0a:79:
                    c3:9b:9e:6a:11:dc:44:f3:85:aa:a5:29:5f:f9:f8:
                    40:6c:8d:5b:df:8c:47:04:71:a4:46:86:40:5e:30:
                    15:e7:d2:7e:c6:1d:b2:dc:18:e9:f7:bb:ab:cc:20:
                    0e:ee:30:9b:68:c2:07:47:c1:10:b0:4f:11:58:b9:
                    b3:1f:1e:7c:a0:e8:a7:b4:a1:7a:91:af:cb:08:33:
                    d0:a6:8a:c8:a1:e8:43:b8:be:ce:3b:d5:2d:4d:c0:
                    1c:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:95:54:C8:40:B2:FA:D2:65:EC:D7:93:30:4A:36:E5:63:26:8E:2A
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/1d8824-545a-4b05-8daf-7d87c1940fe9/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/1d8824-545a-4b05-8daf-7d87c1940fe9/1/TJVUyECy-tJl7NeTMEo25WMmjio.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.86.37.0/24
                IPv6:
                  2a0d:83c0::/29

    Signature Algorithm: sha256WithRSAEncryption
         4d:7a:82:cc:e7:0b:88:53:9c:cf:df:c0:01:16:d3:8a:d4:50:
         28:f6:9e:68:17:db:1d:53:08:f6:d4:09:48:78:51:24:f9:53:
         33:89:f5:e0:7f:46:95:77:a5:b2:4d:1e:87:eb:fd:1e:29:ba:
         74:a5:b2:6e:52:b7:8d:47:36:0e:1b:21:2d:fb:0b:d5:a3:d1:
         25:56:5c:88:6f:57:f6:82:19:dc:c2:40:56:42:e2:ac:9d:18:
         e0:bc:84:b2:1e:61:11:0c:fd:96:59:91:1f:85:38:05:b5:5b:
         a8:b0:c0:49:18:c7:4d:16:7a:cb:7a:17:cd:c5:69:0a:70:ae:
         1e:40:a5:6a:eb:57:45:b5:24:58:87:c6:db:9a:9a:35:0a:c5:
         ae:d8:96:07:1f:31:44:31:0b:36:94:b6:e9:d9:ce:5b:e0:a3:
         ee:13:6a:b3:1f:69:4c:82:dd:b6:2d:45:f6:5a:47:63:4b:58:
         44:a9:4b:14:1a:98:d9:dd:d6:95:38:df:45:96:7c:8b:2d:b0:
         8f:7c:55:b6:22:ab:f8:55:26:74:0f:9f:0f:82:5f:d2:6b:d0:
         b4:b2:11:56:a7:16:b3:56:c4:5d:79:a9:f4:39:15:52:22:0d:
         ea:0c:ff:d2:f2:49:e9:e3:d5:32:2a:83:1d:1c:cb:d0:53:e2:
         f8:9a:f2:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----