Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/V4beIsMGa59a2aiP0CTcG67McKs.cer
File:                     V4beIsMGa59a2aiP0CTcG67McKs.cer (raw, json)
Hash identifier:          DaAKjQv3+EwM747iUx+6PADCN5kVWBT5hRmqggJAXRM=
Subject key identifier:   57:86:DE:22:C3:06:6B:9F:5A:D9:A8:8F:D0:24:DC:1B:AE:CC:70:AB
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856E65EF459E9BECCFE8AFAF7A142F57A7
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/f9/acd6f7-793b-40a5-ba1a-3ae11bb2dd98/1/V4beIsMGa59a2aiP0CTcG67McKs.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/f9/acd6f7-793b-40a5-ba1a-3ae11bb2dd98/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 17:34:12 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 37.77.148.0/24
                          IP: 2a11:6b00::/29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6e:65:ef:45:9e:9b:ec:cf:e8:af:af:7a:14:2f:57:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 17:34:12 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=5786de22c3066b9f5ad9a88fd024dc1baecc70ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:b5:a7:be:d6:59:23:5e:3b:47:db:be:9a:2f:
                    1c:b0:19:54:a6:31:64:6d:ab:0a:db:cc:86:03:b6:
                    6f:44:f3:eb:b1:c0:a9:d7:3b:d5:d0:17:b8:d9:b9:
                    3f:76:88:e1:2e:1a:89:f8:2c:d1:d6:19:15:a2:9c:
                    d3:95:63:1c:52:7f:b7:af:c6:b8:a0:ca:a5:1b:65:
                    77:94:5c:a8:48:6b:f5:f5:58:b6:af:e5:b8:d5:8f:
                    b4:b2:96:59:e8:ea:87:26:02:46:14:6f:a9:18:e9:
                    67:2b:37:0c:5f:d0:25:aa:33:15:40:c1:64:2d:d3:
                    60:46:ba:4d:6e:10:6d:10:ad:ca:3a:3a:6a:1b:69:
                    76:b2:23:74:6b:b1:28:99:ca:7c:0d:d5:e3:62:cb:
                    dc:ad:43:9e:c8:3a:7f:01:75:7c:35:58:d3:b6:0c:
                    f5:05:27:a5:49:2d:ba:0d:58:ad:b7:aa:cc:50:0b:
                    29:03:6c:e7:a0:d4:20:10:d2:34:25:ed:3a:2f:a7:
                    ef:1d:e3:d3:01:72:ef:87:91:93:0b:74:d2:5a:97:
                    44:df:78:67:91:5c:35:37:3a:36:22:61:13:20:d5:
                    27:b4:aa:d2:8b:14:7f:c2:15:6f:09:b5:68:cf:0b:
                    bc:d5:a0:6d:ab:af:48:c7:28:32:d6:9c:98:b5:bc:
                    03:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:86:DE:22:C3:06:6B:9F:5A:D9:A8:8F:D0:24:DC:1B:AE:CC:70:AB
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/acd6f7-793b-40a5-ba1a-3ae11bb2dd98/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/acd6f7-793b-40a5-ba1a-3ae11bb2dd98/1/V4beIsMGa59a2aiP0CTcG67McKs.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  37.77.148.0/24
                IPv6:
                  2a11:6b00::/29

    Signature Algorithm: sha256WithRSAEncryption
         8c:dd:19:9f:97:7a:74:2a:7e:9a:06:40:7a:59:b3:45:e6:2e:
         a8:56:10:15:2c:83:2a:37:35:b3:2a:e3:5c:9f:c6:58:4b:f1:
         cf:8c:db:3a:2f:3e:86:5a:76:3f:42:38:a3:4b:04:70:73:3e:
         80:02:6d:91:1d:f4:ac:bd:88:cb:b6:8e:25:f9:8d:b6:4b:3f:
         aa:19:42:b1:bb:0f:07:75:3b:d9:a6:41:86:95:6e:5d:fa:0b:
         57:10:71:f7:86:96:9d:c5:12:e7:c4:54:c4:20:4e:46:16:b8:
         ee:32:75:f2:10:01:ee:84:7a:cf:a6:9c:eb:95:1c:aa:27:8a:
         02:cd:7f:d3:40:17:eb:ac:9c:c2:32:73:5f:69:2e:5f:83:19:
         a8:f8:2f:c8:b8:36:5e:21:6e:0f:cd:9e:c1:b7:b7:28:96:a4:
         83:6b:fc:73:db:ad:c8:93:86:7b:1b:ff:bb:4e:5f:27:40:20:
         36:df:ac:25:e9:8a:cf:eb:6b:77:dc:93:ba:1d:9b:7e:f4:cd:
         d7:41:c7:ad:b5:a2:f6:cd:7e:6e:70:3a:44:4b:84:68:8b:35:
         8b:a9:68:ec:02:1b:62:b5:58:c4:ac:bd:f8:66:e3:eb:e4:0b:
         35:49:aa:5e:b1:73:cb:7c:2b:f4:33:1c:3f:86:3d:8e:67:7e:
         d5:30:bb:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----