Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/gn120EQnBHH-36UhGFf3jRhU6Gg.cer
File:                     gn120EQnBHH-36UhGFf3jRhU6Gg.cer (raw, json)
Hash identifier:          K9CN9veB9omQwm4n/Uyle78dlX9Af3sQp3af1wRY5fM=
Subject key identifier:   82:7D:76:D0:44:27:04:71:FE:DF:A5:21:18:57:F7:8D:18:54:E8:68
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018571689971E52AA702F27B2AAE675409AB
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/20/34f815-61c1-44eb-b964-4a85593529c8/1/gn120EQnBHH-36UhGFf3jRhU6Gg.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/20/34f815-61c1-44eb-b964-4a85593529c8/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 02 Jan 2023 07:35:58 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    AS: 56867
                          IP: 185.112.24.0/22
                          IP: 188.94.216.0/21
                          IP: 2a01:6f80::/32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:71:68:99:71:e5:2a:a7:02:f2:7b:2a:ae:67:54:09:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 07:35:58 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=827d76d044270471fedfa5211857f78d1854e868
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:b2:00:6a:fe:9c:6e:03:d3:97:b2:ca:8d:f0:
                    fd:56:19:f6:99:91:58:d0:1b:3b:1f:03:1d:a3:0b:
                    a9:fb:3f:76:07:16:2f:24:9a:67:97:68:cf:8a:31:
                    7e:55:52:4a:df:02:ef:74:1b:b7:1c:af:93:26:52:
                    82:ce:a6:d2:fd:15:f7:a3:6d:24:44:43:85:9b:2d:
                    b8:bd:31:3c:1e:12:f3:c1:dd:78:11:b9:f4:71:6a:
                    6b:c5:0a:16:66:8d:c6:af:97:c8:79:72:1e:95:a5:
                    27:2b:87:81:b1:f2:bf:df:b8:fb:69:bd:40:9e:32:
                    56:6d:2e:81:8c:b4:bd:5b:72:e8:d6:91:39:8f:10:
                    f9:cd:d9:ef:36:84:67:23:eb:e1:79:58:7a:f7:c5:
                    8b:97:d8:f2:14:d9:33:42:ff:0e:57:c8:f4:93:b8:
                    63:09:6f:5f:f4:c3:82:c1:16:b0:51:0a:c1:61:c8:
                    f3:14:6a:83:9f:16:63:98:97:4f:dc:35:08:bb:bd:
                    51:92:c7:3f:5a:ed:2e:a9:5c:e6:93:e4:06:cd:d1:
                    6a:6d:4b:1e:fb:20:17:3e:27:78:48:01:7c:16:4b:
                    47:cf:7f:6c:10:b5:29:3d:e3:72:60:32:e3:90:60:
                    98:65:42:01:7c:9e:b7:c5:7b:fe:b2:28:31:c7:93:
                    25:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:7D:76:D0:44:27:04:71:FE:DF:A5:21:18:57:F7:8D:18:54:E8:68
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/34f815-61c1-44eb-b964-4a85593529c8/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/34f815-61c1-44eb-b964-4a85593529c8/1/gn120EQnBHH-36UhGFf3jRhU6Gg.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.112.24.0/22
                  188.94.216.0/21
                IPv6:
                  2a01:6f80::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  56867

    Signature Algorithm: sha256WithRSAEncryption
         18:99:03:71:36:d2:3f:c6:0a:74:61:77:0a:88:17:a2:80:06:
         07:54:07:65:fc:08:49:70:dd:39:58:f4:6b:3d:63:e7:59:e2:
         27:87:59:d9:48:e6:51:b4:dd:c8:ef:5f:8a:8e:6e:67:d5:09:
         85:c4:0f:52:9b:8b:52:72:58:8c:c6:e8:23:92:11:52:73:63:
         0d:f6:c3:72:3c:5d:ef:18:a8:a9:39:b9:d0:ac:bb:b8:3b:65:
         3a:db:be:82:83:ad:61:89:4e:24:a0:80:23:a1:7d:c3:d5:a9:
         da:73:a0:6e:0f:94:31:5e:73:d4:95:0b:c9:b3:f8:00:5a:9c:
         b5:64:3c:f7:e2:92:ae:f3:f3:5a:76:a4:f7:ef:1b:0f:a1:df:
         88:a8:df:4c:11:a7:7f:de:f7:29:e8:86:f0:57:57:78:2f:44:
         7b:cb:11:b5:b4:c8:da:0e:b8:c1:84:d7:44:2d:3d:b0:d0:ec:
         2e:7e:8e:c2:22:b6:64:02:cc:ed:32:c7:d5:f2:2e:87:5f:e4:
         a4:0d:77:45:4c:5c:fe:56:e1:64:78:7f:29:94:74:5e:07:31:
         0e:6a:9d:73:a6:81:4b:d9:8e:1e:bc:62:76:d9:5a:59:82:f4:
         83:1a:81:fc:f9:9b:dd:79:1a:1e:2a:f3:8a:bf:a8:05:1a:9c:
         92:98:48:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----