Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fRI1wHdpFlB8FJGQpQR58GdQbww.cer
File:                     fRI1wHdpFlB8FJGQpQR58GdQbww.cer (raw, json)
Hash identifier:          +JDPb6kXPZLDBeZl2iJIb2cdPNLWPa+z7F/1Qiv54EY=
Subject key identifier:   7D:12:35:C0:77:69:16:50:7C:14:91:90:A5:04:79:F0:67:50:6F:0C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856E650EEA5B8CB45D1B636953009F632B
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/79/df52a4-e8f8-4740-8a54-eb54b5214bfd/1/fRI1wHdpFlB8FJGQpQR58GdQbww.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/79/df52a4-e8f8-4740-8a54-eb54b5214bfd/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 17:33:14 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 45.12.48.0/22
                          IP: 2a0e:9700::/29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6e:65:0e:ea:5b:8c:b4:5d:1b:63:69:53:00:9f:63:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 17:33:14 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=7d1235c0776916507c149190a50479f067506f0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:bf:f9:0f:7e:7a:fc:8e:49:39:0b:eb:90:ae:
                    ba:9a:8a:11:68:92:6b:71:31:cc:8d:90:71:4f:71:
                    cf:cf:f5:01:a0:f0:a7:55:0a:52:c6:2c:46:5e:60:
                    98:f6:e5:29:7a:06:54:66:65:38:31:85:6e:ad:93:
                    a3:c7:27:5f:5b:25:4e:05:2f:2e:77:eb:c7:19:dd:
                    43:44:7d:36:9b:1b:73:8a:39:7b:97:d1:8f:40:ab:
                    40:52:3b:8b:a3:6e:2f:c0:41:e1:1f:ed:07:93:19:
                    08:fa:93:bb:d6:90:f8:ab:05:b4:49:60:bb:d3:2f:
                    14:46:1c:82:27:45:c4:90:89:8d:03:af:ac:3a:5e:
                    86:0f:45:6e:df:fa:d2:ac:24:38:07:3c:f1:1a:a3:
                    6c:ac:a0:36:87:cb:cb:e7:cb:aa:8d:1f:03:4d:eb:
                    f8:d4:af:4c:e6:2b:0b:2b:08:de:df:76:ca:c7:69:
                    25:04:3e:9f:e1:8c:77:2c:e0:08:68:25:99:fc:e8:
                    f4:69:d6:30:c6:33:08:c1:f4:97:ab:d9:3b:fc:49:
                    31:03:33:d4:0f:1d:8a:f4:38:33:19:e1:12:92:1f:
                    0c:9e:58:e6:84:4f:3e:fa:72:6e:d5:59:6a:88:94:
                    c6:c2:c7:d0:9b:60:6f:07:7a:25:d4:8d:46:47:93:
                    20:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:12:35:C0:77:69:16:50:7C:14:91:90:A5:04:79:F0:67:50:6F:0C
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/df52a4-e8f8-4740-8a54-eb54b5214bfd/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/df52a4-e8f8-4740-8a54-eb54b5214bfd/1/fRI1wHdpFlB8FJGQpQR58GdQbww.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.12.48.0/22
                IPv6:
                  2a0e:9700::/29

    Signature Algorithm: sha256WithRSAEncryption
         33:f7:b7:54:5a:52:44:15:c2:8d:b7:20:97:c0:ef:ea:5a:6e:
         5b:70:fd:62:d1:99:2b:16:cf:e7:6c:71:c6:7a:64:45:59:25:
         6e:42:49:7b:69:fd:58:e5:22:ec:cd:b0:86:83:7b:e3:c7:ee:
         a1:79:5e:0c:94:85:f1:43:5d:5a:16:69:1b:bf:8e:fc:d0:9e:
         41:ff:91:51:97:d8:0f:e6:a0:8e:5b:4d:e5:b2:49:6e:bc:07:
         34:ef:60:0a:1f:74:b9:db:4d:cd:5a:14:af:30:11:60:ac:bc:
         2c:31:fd:39:74:3c:3e:4c:ad:d5:5d:4c:89:57:2a:0e:48:ad:
         3a:5c:d3:c0:e2:e6:7e:b1:f5:97:d3:9e:cb:df:33:6f:a0:38:
         ab:6a:b4:17:94:66:59:45:bf:1f:5e:b6:da:31:86:f7:ac:bd:
         d1:16:2d:89:a9:b3:9e:89:b2:3c:ef:b0:09:6a:0e:63:48:56:
         41:f6:aa:cf:dc:7c:0a:b5:b4:3e:d9:c3:74:4a:bd:cb:ca:35:
         1d:44:cc:fc:36:c6:3d:05:63:71:64:8d:88:59:4d:de:9d:83:
         33:15:0d:e2:fe:8e:ab:a2:ba:52:09:55:31:e8:b2:5f:79:df:
         0a:2b:a1:79:ae:e1:67:e4:ad:ac:c7:2d:af:ee:69:92:b9:24:
         2d:3f:a9:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----