Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/jeHlmZ8TW_wpw1DoGwReee-JnO0.cer
File:                     jeHlmZ8TW_wpw1DoGwReee-JnO0.cer (raw, json)
Hash identifier:          MQexX5+OLv7pIZwkW/c1HWkENOvB9nevqB8i9aVNfhU=
Subject key identifier:   8D:E1:E5:99:9F:13:5B:FC:29:C3:50:E8:1B:04:5E:79:EF:89:9C:ED
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856ED3F4A7A3F22B41DABB3B192CD82EA4
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/80/1221b4-1940-428c-86f8-f5f3a89b1d66/1/jeHlmZ8TW_wpw1DoGwReee-JnO0.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/80/1221b4-1940-428c-86f8-f5f3a89b1d66/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 19:34:22 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 37.72.131.0/24
                          IP: 2a11:2c40::/29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6e:d3:f4:a7:a3:f2:2b:41:da:bb:3b:19:2c:d8:2e:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 19:34:22 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=8de1e5999f135bfc29c350e81b045e79ef899ced
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:3b:52:f6:6c:e2:3d:22:18:9f:b5:ee:e7:79:
                    32:f9:25:9c:fb:76:b7:21:83:28:2a:a1:6f:d1:49:
                    04:9b:62:db:16:d9:2d:e9:d8:fd:51:1e:ce:ac:9a:
                    ee:c8:af:c6:30:8f:6d:f5:4b:1a:5b:83:db:d5:a9:
                    be:92:d4:ce:be:5b:cd:78:f1:01:f0:88:f3:39:dd:
                    68:0c:d8:9a:2e:22:a4:b5:9a:c0:9e:11:0d:12:7e:
                    3b:38:37:5b:f5:4b:58:95:78:c5:94:fe:f7:f4:42:
                    c6:48:34:23:7b:fd:27:b8:fe:9c:f9:cf:55:d9:e4:
                    79:86:f6:df:2f:15:08:8b:57:f6:54:b1:2d:16:b8:
                    05:ba:f1:61:3a:2f:69:ad:08:34:78:09:4c:c6:2f:
                    01:02:51:d2:e3:ac:a0:c8:b9:1b:47:a7:d1:4e:7f:
                    c3:ea:ca:28:e7:12:34:d7:ab:8c:71:84:0d:61:be:
                    8a:84:e0:71:8d:7f:b7:32:f7:69:d8:fd:d9:96:51:
                    fd:4e:0a:aa:99:5a:63:98:da:a5:61:6a:6d:d1:75:
                    c2:e1:94:12:d4:55:b6:b8:fc:1e:bd:4b:bb:fe:5c:
                    fb:71:e0:79:57:cc:ab:7a:52:22:eb:c1:c8:23:a5:
                    f9:85:1e:32:56:a7:c7:7d:b3:21:25:71:6c:37:1a:
                    35:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:E1:E5:99:9F:13:5B:FC:29:C3:50:E8:1B:04:5E:79:EF:89:9C:ED
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/1221b4-1940-428c-86f8-f5f3a89b1d66/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/1221b4-1940-428c-86f8-f5f3a89b1d66/1/jeHlmZ8TW_wpw1DoGwReee-JnO0.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  37.72.131.0/24
                IPv6:
                  2a11:2c40::/29

    Signature Algorithm: sha256WithRSAEncryption
         46:e6:41:88:5f:7d:63:57:12:f5:ce:1c:e4:a0:9d:b0:28:a2:
         ef:83:91:cd:e3:3b:f3:ad:46:d4:3d:66:f4:e9:0e:d1:10:14:
         1e:0e:02:0a:31:1d:16:aa:e6:c5:ab:31:ac:c3:c0:06:28:ca:
         8a:2d:82:d3:b3:5d:dc:7b:a8:8f:d5:7a:db:47:aa:fe:26:d8:
         3d:88:27:26:23:1b:72:e1:2d:38:62:13:9d:1f:06:82:98:0e:
         33:3f:8a:6b:74:26:17:c6:e4:67:ad:0c:67:d4:4c:41:c5:3e:
         68:21:1c:8c:d3:58:19:79:ad:5b:91:eb:99:23:e5:bd:81:9d:
         ce:10:3a:5f:cd:b1:47:51:3d:ff:7f:63:aa:63:d2:c2:7a:21:
         21:28:6a:37:e0:09:82:e1:a6:df:8a:eb:ef:bc:4c:42:5c:82:
         80:0e:c6:51:b6:82:ab:c6:54:0d:dd:71:b8:92:b9:88:4a:e4:
         bf:cb:7b:f0:49:85:37:4d:25:10:08:7e:36:c7:fc:47:2c:68:
         9c:09:a7:57:0d:6a:85:ce:f9:ba:19:89:b1:83:7d:3d:3d:c1:
         b7:6b:e7:f8:65:46:d4:12:84:c7:d0:61:70:0b:7f:fb:55:d2:
         6a:ba:f4:d4:26:73:27:b2:21:4e:a0:83:b9:39:81:75:2a:54:
         91:53:22:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----