Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/iANpwB4PYlcHEPe3AjApKCUPZdo.cer
File:                     iANpwB4PYlcHEPe3AjApKCUPZdo.cer (raw, json)
Hash identifier:          83ffHEtEjRbRi8sn1PspshTATKqsAaFYO8PZHkvh+Vk=
Subject key identifier:   88:03:69:C0:1E:0F:62:57:07:10:F7:B7:02:30:29:28:25:0F:65:DA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856FB05AF06CB9EE0B2C7670D202E0966F
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/29/8cbefb-42a8-47e4-b484-bcede3bea77e/1/iANpwB4PYlcHEPe3AjApKCUPZdo.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/29/8cbefb-42a8-47e4-b484-bcede3bea77e/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 23:35:06 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 146.19.67.0/24
                          IP: 2a12:7500::/29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:b0:5a:f0:6c:b9:ee:0b:2c:76:70:d2:02:e0:96:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 23:35:06 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=880369c01e0f62570710f7b702302928250f65da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:ff:e8:c6:f1:b8:86:f1:0a:e8:9f:0f:2b:b5:
                    bd:a3:c7:2b:3d:4f:23:14:6b:91:fe:5b:6a:d6:2a:
                    56:b2:5e:95:02:b6:30:b9:cf:8c:28:49:7a:ac:a2:
                    4e:78:f3:7d:dd:5c:c9:c2:3e:44:32:e7:fd:ec:66:
                    b6:cf:d4:f4:ea:37:35:1f:47:3b:15:2e:ab:93:50:
                    5a:90:f9:65:7b:ec:d2:8a:ae:09:00:f9:9a:1d:59:
                    58:d5:1a:1e:92:d3:c4:81:d3:b2:af:8d:bd:05:c3:
                    a3:b7:0a:49:db:ce:e0:1c:be:2e:13:58:04:aa:51:
                    62:4b:d4:ff:0d:d2:91:3b:b2:7c:59:9e:58:86:b4:
                    f2:c3:b7:ee:76:b9:c3:0c:64:29:75:af:f0:7b:69:
                    f3:d4:d1:d7:79:b2:e6:cd:36:e5:27:7d:4c:36:57:
                    3f:dd:87:24:36:47:e0:b9:bd:1c:2c:6c:f2:2c:c4:
                    55:44:3f:06:c7:88:02:cd:92:88:98:25:95:2e:ed:
                    4d:73:f9:26:7c:ea:84:8d:dd:b9:13:d0:9b:86:f3:
                    da:00:a6:c6:29:f9:30:ba:64:ad:04:2f:d9:4a:df:
                    cf:30:d1:da:0a:0d:58:85:fe:1f:e4:9f:56:b7:c4:
                    51:0b:d5:17:62:62:a6:60:54:36:35:be:12:78:9c:
                    b7:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:03:69:C0:1E:0F:62:57:07:10:F7:B7:02:30:29:28:25:0F:65:DA
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/8cbefb-42a8-47e4-b484-bcede3bea77e/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/8cbefb-42a8-47e4-b484-bcede3bea77e/1/iANpwB4PYlcHEPe3AjApKCUPZdo.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.19.67.0/24
                IPv6:
                  2a12:7500::/29

    Signature Algorithm: sha256WithRSAEncryption
         7e:c4:7b:f1:d2:c1:92:b0:cf:c7:2e:be:7b:b9:52:25:23:56:
         00:4f:8f:cb:7f:af:da:b9:14:52:df:25:68:3d:9a:62:63:7d:
         d2:86:2f:75:f4:07:65:3a:b6:de:24:13:5a:7e:e0:73:8b:09:
         55:8b:87:66:5c:b4:75:7b:9c:82:4c:bd:c0:7a:00:34:41:6f:
         4c:af:e5:54:78:15:9d:8a:69:1e:93:d5:2e:11:89:83:31:0e:
         32:8b:02:01:09:2d:6a:af:66:fe:cc:03:f7:db:18:fb:9b:97:
         e7:62:9e:df:b2:96:16:66:65:e6:37:2b:11:f9:23:f6:38:c6:
         b8:1d:c6:39:85:42:8f:53:e6:a6:5b:b9:8d:f8:c8:e0:3b:f1:
         4b:37:cd:4f:12:06:b8:50:df:e3:b4:dd:a1:85:56:93:92:42:
         e9:a5:67:1c:01:dd:c9:11:bf:fb:8f:74:a8:27:32:2d:42:14:
         59:fd:dd:b9:de:e0:d0:1d:60:42:32:99:ae:0d:a2:b1:4e:5f:
         a7:3e:b6:32:5f:16:7b:21:4f:91:49:f8:29:b9:29:00:be:3a:
         af:ca:76:0e:b0:16:57:ff:09:7c:e7:4f:c7:b3:b3:84:3a:23:
         12:e1:87:6c:d0:df:2d:ac:3e:01:24:97:34:cb:b5:f6:60:d2:
         35:09:90:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----