Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/_0BQPLIakiiXlxcm9rfuzCU_EZM.cer
File:                     _0BQPLIakiiXlxcm9rfuzCU_EZM.cer (raw, json)
Hash identifier:          0/4GuIMsz1UPe60nANny/+20oVJXNFWf0JQ+OC0tSWs=
Subject key identifier:   FF:40:50:3C:B2:1A:92:28:97:97:17:26:F6:B7:EE:CC:25:3F:11:93
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856ED40E7D09C21514D59A3EB3E1A39A4A
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/41/529414-d7a5-49eb-9bd6-cbf1bbb0fd18/1/_0BQPLIakiiXlxcm9rfuzCU_EZM.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/41/529414-d7a5-49eb-9bd6-cbf1bbb0fd18/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 19:34:29 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    AS: 3221
                          IP: 171.22.244.0/22
                          IP: 193.40.0.0/16
                          IP: 2001:bb8::/32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6e:d4:0e:7d:09:c2:15:14:d5:9a:3e:b3:e1:a3:9a:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 19:34:29 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=ff40503cb21a922897971726f6b7eecc253f1193
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:c2:0d:bc:88:12:21:80:14:59:1c:43:41:49:
                    f2:66:18:69:40:64:02:50:93:6a:a0:fa:06:62:5f:
                    e1:7f:06:83:7f:e5:71:86:d9:03:e4:5c:2b:cc:06:
                    58:6c:80:f1:0d:d5:71:db:86:ee:4d:11:1f:db:92:
                    8c:42:1a:b9:70:2b:08:68:a3:9f:6a:38:ea:9a:c4:
                    38:6d:02:98:36:6e:e0:4f:df:6b:fc:33:ae:02:84:
                    e0:2b:b9:64:22:7f:dc:82:a3:87:6d:96:f4:09:65:
                    b7:b8:90:7e:86:75:00:d9:c4:4a:ba:e3:a9:ad:48:
                    55:a7:4f:24:ef:76:22:e3:81:61:d2:e3:e5:ec:49:
                    0e:e4:b7:c4:94:09:8c:1a:2b:0d:e3:b4:9b:20:a4:
                    6e:79:2e:f6:f7:e1:a5:c9:f7:77:14:5f:ac:aa:be:
                    b3:57:92:c7:34:c2:c3:67:69:8a:f8:3e:18:9f:82:
                    8a:85:0e:01:32:d3:44:f3:d9:18:e0:2b:f6:e8:12:
                    13:35:ec:42:07:87:79:75:0d:38:0a:86:65:8d:7b:
                    85:fe:dd:f0:29:e1:18:21:7c:1a:0d:5c:9f:45:de:
                    19:b0:c5:25:87:49:6e:8b:ff:f7:6b:23:2b:d3:1c:
                    ee:06:35:93:a8:a5:56:88:82:1a:28:f4:85:5f:4f:
                    fe:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:40:50:3C:B2:1A:92:28:97:97:17:26:F6:B7:EE:CC:25:3F:11:93
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/529414-d7a5-49eb-9bd6-cbf1bbb0fd18/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/529414-d7a5-49eb-9bd6-cbf1bbb0fd18/1/_0BQPLIakiiXlxcm9rfuzCU_EZM.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  171.22.244.0/22
                  193.40.0.0/16
                IPv6:
                  2001:bb8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  3221

    Signature Algorithm: sha256WithRSAEncryption
         a9:1a:43:d5:f7:b8:a8:f0:b1:d1:2f:8e:f0:47:fc:32:e1:fc:
         ef:53:bd:63:24:01:53:08:20:cf:02:5e:61:30:aa:87:a9:5d:
         fe:15:5f:58:3e:05:40:69:97:fa:37:64:67:cd:48:79:9b:f3:
         53:45:f3:b2:99:cb:93:aa:eb:69:ec:2e:76:34:4a:ba:bf:08:
         01:71:82:ca:59:27:38:38:97:79:c2:7b:74:eb:ad:75:2c:76:
         2b:cd:cb:0d:90:6d:6f:e5:9a:da:6f:76:be:96:57:51:c0:38:
         49:69:f5:29:fa:7c:61:80:fa:d0:be:d3:c9:85:d1:4b:fc:c4:
         5f:f9:62:b0:6b:8d:92:34:38:eb:44:02:44:1a:b1:ec:d1:af:
         cf:78:d8:b5:df:a6:9d:4c:95:83:94:4b:90:37:c9:67:b6:da:
         66:ea:66:65:b1:b2:20:0b:fd:7c:d2:ee:dc:5e:26:5c:d8:39:
         13:97:c3:14:28:dd:19:a9:7c:b0:3e:31:0a:75:a8:70:7f:db:
         ba:53:73:ab:19:75:c8:72:ea:27:b2:9a:d8:a0:36:2d:35:e2:
         a6:0e:54:8c:83:26:0d:93:98:f8:13:46:53:1b:59:9e:9d:ba:
         c5:60:99:59:8c:f9:7d:76:87:f2:1d:3a:40:eb:f7:51:5d:bd:
         6e:6f:ab:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----