Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fQv-pokBa-z4mjY4ZnzOfd9w2dc.cer
File:                     fQv-pokBa-z4mjY4ZnzOfd9w2dc.cer (raw, json)
Hash identifier:          aVzSzrcWQeNTz7R2wt3WCbWkCpYvFUAP+h7wj2zfFBs=
Subject key identifier:   7D:0B:FE:A6:89:01:6B:EC:F8:9A:36:38:66:7C:CE:7D:DF:70:D9:D7
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01882538671BB9FB9A506E69C29BD4EAB3A8
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/ab/b9c561-756c-4963-bba5-c5d9c6ab043f/1/fQv-pokBa-z4mjY4ZnzOfd9w2dc.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/ab/b9c561-756c-4963-bba5-c5d9c6ab043f/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Tue 16 May 2023 15:40:33 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 176.116.2.0/24
                          IP: 2a11:e2c0::/29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:25:38:67:1b:b9:fb:9a:50:6e:69:c2:9b:d4:ea:b3:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: May 16 15:40:33 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=7d0bfea689016becf89a3638667cce7ddf70d9d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:30:aa:5c:a0:f7:a5:ea:68:f7:e0:ac:48:ee:
                    90:4f:79:bf:6b:5a:e6:47:e8:5f:34:f4:9f:73:3a:
                    93:f1:0a:6f:86:45:28:9c:71:ac:09:80:a5:1a:56:
                    2a:e2:3a:2a:49:99:38:08:e3:77:60:98:04:dd:1f:
                    63:94:ea:14:0c:4d:f6:ae:6d:c2:97:e8:6c:af:d1:
                    e4:2c:82:7b:a7:9a:50:5f:3d:a8:dd:3c:19:23:71:
                    1d:71:df:49:7c:b1:d1:04:39:e1:dc:f0:c6:f3:27:
                    0c:b8:23:a9:b2:19:8f:53:fe:0b:4a:cb:c7:33:d1:
                    e1:ec:7d:4e:3c:a8:32:db:20:3e:40:40:42:77:a0:
                    fe:36:ec:b8:c6:8b:4c:23:f5:9d:82:0c:f9:6d:b0:
                    ac:d3:3f:cd:e7:7e:97:19:97:fa:bf:45:09:f4:11:
                    64:31:95:1e:e3:f1:bc:b6:da:66:de:87:20:1d:06:
                    73:49:d8:a4:32:44:6a:05:f8:90:78:8c:1d:9c:ee:
                    31:cf:c1:b7:74:c9:fe:2f:6d:60:99:26:f2:63:44:
                    ca:df:7a:9a:cd:e6:44:03:3b:16:23:5e:5c:2a:31:
                    a4:89:94:c4:f4:27:bc:a6:8f:56:bd:e4:6d:06:c1:
                    5b:8f:4b:05:7b:1c:94:dd:20:1a:84:dd:b0:73:9d:
                    b4:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:0B:FE:A6:89:01:6B:EC:F8:9A:36:38:66:7C:CE:7D:DF:70:D9:D7
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/b9c561-756c-4963-bba5-c5d9c6ab043f/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/b9c561-756c-4963-bba5-c5d9c6ab043f/1/fQv-pokBa-z4mjY4ZnzOfd9w2dc.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  176.116.2.0/24
                IPv6:
                  2a11:e2c0::/29

    Signature Algorithm: sha256WithRSAEncryption
         69:37:53:e5:ed:8f:4e:f6:31:43:b6:59:e4:e3:b8:d6:01:22:
         a0:cb:13:ed:95:dc:20:82:72:0e:68:8e:90:25:05:37:77:4e:
         07:52:d1:b9:ef:7f:3d:e3:c4:dc:f3:e6:05:9d:81:82:27:bf:
         58:3b:a0:2e:d8:df:90:4b:5f:50:81:4a:06:50:17:84:6c:a8:
         9e:4a:35:2d:1f:ec:31:5c:6d:16:4d:fb:ed:36:28:60:e8:d3:
         a9:0d:89:00:02:56:f4:ff:28:0f:1a:9a:26:d3:7d:75:3b:19:
         e7:59:a4:55:39:5e:2e:4b:21:9e:bf:c7:d0:ae:dc:15:99:d8:
         28:b7:4f:70:d6:6a:ad:d7:21:aa:88:20:fb:ec:ca:a2:c3:d3:
         f9:77:a0:a4:56:98:ea:92:8d:58:f8:fb:d8:43:66:85:5e:be:
         97:71:3c:64:ac:bf:6d:b4:e2:80:ee:92:9e:27:97:d8:25:02:
         ba:05:10:58:e7:90:cb:c3:30:83:4e:e2:4a:16:53:43:4e:e1:
         f8:32:21:62:b0:20:a4:56:81:07:b9:98:0a:32:29:4f:a8:b5:
         a5:9b:7d:d4:1a:16:6e:11:85:c8:2b:e5:b9:45:01:33:22:58:
         02:1e:01:e1:00:d6:7d:71:df:61:0a:d8:d6:c3:5a:ed:7d:f5:
         ae:d4:88:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----