Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dzulwBfR2nlR7iE-NqR1B5chPvg.cer
File:                     dzulwBfR2nlR7iE-NqR1B5chPvg.cer (raw, json)
Hash identifier:          9Hy4KjLLxibjxSzkJvdnh3aUoPqhtCtdfMnJQWYpFoo=
Subject key identifier:   77:3B:A5:C0:17:D1:DA:79:51:EE:21:3E:36:A4:75:07:97:21:3E:F8
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0185A50EEE5D26479C5D7C5D17BEFC1BC9DE
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/a3/ce1bf4-c0ac-441a-8592-142bf31b69e1/1/dzulwBfR2nlR7iE-NqR1B5chPvg.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/a3/ce1bf4-c0ac-441a-8592-142bf31b69e1/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 12 Jan 2023 08:18:17 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    AS: 203703
                          IP: 2a06:b4c0::/29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:a5:0e:ee:5d:26:47:9c:5d:7c:5d:17:be:fc:1b:c9:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan 12 08:18:17 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=773ba5c017d1da7951ee213e36a4750797213ef8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:4e:8a:28:a2:dd:31:70:66:ae:d3:40:0f:1f:
                    a3:85:aa:e3:e7:28:21:7f:8a:47:c4:3c:29:84:85:
                    86:38:58:3b:5c:84:8e:9c:c5:c6:3a:9a:e0:64:9d:
                    26:0d:95:4b:7f:28:f2:9f:bf:d5:46:6d:fc:fb:2d:
                    df:10:20:7f:ca:73:8d:50:58:ca:bc:a3:78:2e:a3:
                    2f:a3:e6:b4:cc:59:b7:90:9b:31:69:81:82:55:f3:
                    b3:30:54:8a:55:bc:c5:ee:d5:9d:6d:e2:42:af:7b:
                    be:4a:33:a2:58:38:2e:d2:52:17:09:66:3b:dd:c3:
                    2e:0f:25:5d:ed:e4:0d:f4:b8:3c:5a:c4:59:ef:04:
                    dd:53:4c:ef:5e:5f:09:6f:d7:b2:08:d6:6d:ef:cd:
                    0c:45:15:20:bf:61:e9:aa:5e:35:ad:07:51:15:28:
                    3f:cf:46:32:73:84:d0:56:b3:c1:1e:8c:46:a0:94:
                    4e:67:dd:ef:4e:7a:96:db:28:a5:6e:32:b3:fe:99:
                    22:64:b5:78:76:76:e0:81:02:20:cf:52:30:85:f9:
                    e8:3b:d9:dc:cb:ff:6c:59:58:81:cb:cd:1c:a0:cf:
                    d1:9a:a3:2b:e4:a1:f7:23:14:5a:3d:5b:7a:f7:d1:
                    7e:c7:14:9e:49:b5:cf:a7:0a:84:5b:30:29:cf:dc:
                    8c:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:3B:A5:C0:17:D1:DA:79:51:EE:21:3E:36:A4:75:07:97:21:3E:F8
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/ce1bf4-c0ac-441a-8592-142bf31b69e1/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/ce1bf4-c0ac-441a-8592-142bf31b69e1/1/dzulwBfR2nlR7iE-NqR1B5chPvg.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:b4c0::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  203703

    Signature Algorithm: sha256WithRSAEncryption
         9c:62:4c:ca:e7:52:0e:da:0e:8e:81:65:4a:19:37:9a:0a:d0:
         0d:70:ca:58:e0:08:f6:63:50:3a:5a:61:60:81:90:6d:9c:92:
         24:3e:00:41:b2:6e:b2:89:3d:07:c9:25:12:ca:bc:61:30:19:
         2d:52:14:b9:33:22:17:d8:47:a6:7d:31:2b:53:2a:a8:a6:13:
         bd:e3:30:34:6e:fe:37:98:ce:c7:bb:4a:0c:eb:22:50:84:14:
         9e:b8:22:61:00:ad:44:04:e1:48:62:5c:bf:77:62:84:b5:10:
         d5:67:54:91:0a:bb:62:6e:8c:7f:07:fa:b2:00:ca:e0:55:94:
         43:e2:ce:fd:74:f1:be:9f:e0:6b:c7:e1:da:0a:22:63:2a:1a:
         16:db:1b:79:03:44:ce:a7:20:8a:55:c0:ec:8b:2e:12:6a:91:
         90:92:52:2d:7b:1a:c4:e0:14:f4:98:72:3a:6a:cc:26:e2:bf:
         7b:bb:0e:11:f2:5e:26:b5:1b:5f:16:b1:5d:b9:4b:fc:4e:fd:
         95:d8:32:f0:93:73:84:c6:8d:1f:41:01:4d:05:a7:04:ca:80:
         6b:c8:1e:c7:60:ac:58:b3:40:05:e7:b9:1a:c1:d4:33:55:49:
         05:37:00:fc:e4:fd:71:2c:df:7c:28:4e:a4:a5:52:bd:c3:99:
         6d:eb:8b:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----