Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/lsyccmIsZLdi5NvnZAXL9yp7Hwg.cer
File:                     lsyccmIsZLdi5NvnZAXL9yp7Hwg.cer (raw, json)
Hash identifier:          24aJPliZSlMZnJ3pSHxABAcb17ecUp6BPcovp2wmb5A=
Subject key identifier:   96:CC:9C:72:62:2C:64:B7:62:E4:DB:E7:64:05:CB:F7:2A:7B:1F:08
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018C68724970B32C5C1091BEC0AAC152ACB8
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/ce/395b0b-ea14-419e-b2f3-94eb300a7c9f/1/lsyccmIsZLdi5NvnZAXL9yp7Hwg.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/ce/395b0b-ea14-419e-b2f3-94eb300a7c9f/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 14 Dec 2023 13:09:29 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 91.242.229.0/24
                          IP: 2a14:2f80::/29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:68:72:49:70:b3:2c:5c:10:91:be:c0:aa:c1:52:ac:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Dec 14 13:09:29 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=96cc9c72622c64b762e4dbe76405cbf72a7b1f08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:be:8a:e9:8b:49:b2:e5:af:46:a4:fb:6f:30:
                    f2:12:26:cc:3f:d3:83:ee:62:12:8b:c1:2d:56:70:
                    cb:8e:60:9c:08:32:ca:41:72:2f:bc:04:01:25:24:
                    34:6a:e4:21:3e:e8:81:d3:33:22:c8:37:75:a2:43:
                    71:70:8f:49:9f:b1:b4:60:b6:ba:e7:51:7f:41:d5:
                    67:25:82:5d:42:ef:07:3e:28:81:e3:be:1e:fa:cb:
                    b5:a8:83:45:95:c5:5b:79:34:17:92:0d:ec:e5:04:
                    19:ae:33:4a:9b:61:30:71:a1:10:3d:9d:21:9a:85:
                    17:0c:fd:ea:75:29:70:0b:b0:8c:fb:e8:41:7b:55:
                    16:21:3a:80:80:9a:47:7c:80:81:02:91:81:5d:89:
                    0b:2f:97:b2:c8:b2:26:9b:1c:f8:d3:fa:d4:08:ca:
                    cd:8e:78:e3:ad:b7:82:f0:0d:9b:82:a6:33:8f:bc:
                    09:44:f2:d0:4c:40:7b:57:62:18:c5:26:1f:ca:d8:
                    dc:d8:04:71:bd:31:7c:68:a6:05:49:f6:90:b5:62:
                    4b:a8:ff:98:f8:3b:f8:d7:95:fb:c9:87:56:74:79:
                    72:e9:e1:71:28:52:9b:06:23:b9:d4:a8:1c:3a:b8:
                    40:a2:84:4d:f4:7e:24:e1:bb:34:20:37:67:66:bd:
                    3e:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:CC:9C:72:62:2C:64:B7:62:E4:DB:E7:64:05:CB:F7:2A:7B:1F:08
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/395b0b-ea14-419e-b2f3-94eb300a7c9f/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/395b0b-ea14-419e-b2f3-94eb300a7c9f/1/lsyccmIsZLdi5NvnZAXL9yp7Hwg.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.242.229.0/24
                IPv6:
                  2a14:2f80::/29

    Signature Algorithm: sha256WithRSAEncryption
         05:0f:26:ec:1a:53:dd:d0:55:43:59:1e:7e:4b:e4:01:f8:80:
         02:7e:58:c9:9a:45:54:a3:2c:2a:87:bf:07:0c:73:28:ef:fa:
         fa:b9:ec:e4:b5:7e:b7:a1:a3:12:38:8e:91:a1:c2:67:2e:18:
         85:76:49:a0:3a:86:2d:e6:4c:fb:42:ac:ad:3f:8a:f5:3d:de:
         98:ca:98:33:51:18:80:80:a3:81:c2:ea:1f:7d:95:2b:70:54:
         7b:bf:a5:9b:a1:41:b7:5c:a3:b8:64:9d:ec:e8:00:52:6d:c2:
         70:a3:68:ce:e6:0c:b9:7f:4c:21:fb:c0:7f:be:f4:f6:2b:3e:
         57:87:65:d8:9a:3b:fb:aa:d0:71:3d:60:8d:d0:6c:45:68:99:
         04:04:33:cd:cc:f0:ff:9c:93:a7:ff:38:bf:81:3e:1a:b5:e5:
         95:8f:c5:1b:64:e9:3e:91:bd:c5:f3:6e:9e:bb:26:eb:d5:3b:
         a2:79:39:59:21:11:6d:28:46:2d:d1:14:90:fd:3d:f4:a2:98:
         ec:9f:80:2d:04:e4:30:6e:3e:44:2c:98:d9:b8:85:cd:89:9f:
         97:55:4b:cf:9e:e5:e8:02:63:4a:ae:d2:15:9a:77:9e:6e:cc:
         80:46:62:f9:2a:f3:bf:ec:2e:39:80:a3:a8:b8:8f:2b:66:40:
         da:87:ea:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----