Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/n3QLLYZd2Yn8S1VoVHEsse_F89I.cer
File:                     n3QLLYZd2Yn8S1VoVHEsse_F89I.cer (raw, json)
Hash identifier:          3TDHpomFh+4KNYtFC9ioSML8mGesDLmxThN7bkRoWc0=
Subject key identifier:   9F:74:0B:2D:86:5D:D9:89:FC:4B:55:68:54:71:2C:B1:EF:C5:F3:D2
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856ED286D7D2ACE4B602BC50E846328F96
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/41/1fc53e-78f4-4230-ab19-c75eef8b6e82/1/n3QLLYZd2Yn8S1VoVHEsse_F89I.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/41/1fc53e-78f4-4230-ab19-c75eef8b6e82/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 19:32:48 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 91.224.140.0/24
                          IP: 2a11:6680::/29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6e:d2:86:d7:d2:ac:e4:b6:02:bc:50:e8:46:32:8f:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 19:32:48 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=9f740b2d865dd989fc4b556854712cb1efc5f3d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:4f:d6:5c:67:60:61:16:3e:18:88:b6:f5:bf:
                    a4:5d:c7:f0:89:70:2c:f1:44:c0:e3:b0:27:57:07:
                    ca:d4:bb:de:63:12:cd:b1:58:e4:4a:c9:71:62:19:
                    09:9a:31:b8:91:a0:9b:30:69:dc:98:97:f8:c7:1f:
                    c6:4b:e7:70:33:b9:ab:9d:78:bb:6d:78:0d:fb:d7:
                    ab:e7:d7:1d:9e:0a:b6:c3:ae:c4:1a:2d:e7:1e:8d:
                    ad:67:23:d5:2f:81:9e:8c:fa:28:d5:f3:68:e7:95:
                    91:c8:81:0c:00:19:f5:96:e8:fc:ba:16:67:1f:0d:
                    d8:1c:84:22:ec:8d:e7:c3:70:da:a0:7a:3a:45:ac:
                    2e:01:37:fb:74:b3:34:c8:07:a5:3c:f7:84:5c:fc:
                    1c:7d:47:45:ee:92:c0:8b:6b:6d:e5:80:af:10:d1:
                    d0:5c:cb:60:0d:a3:41:db:d9:cf:9d:f0:93:45:85:
                    eb:8c:9a:18:9c:26:a7:e8:aa:67:d9:19:2d:f1:f4:
                    42:5c:b4:85:c1:be:28:62:f7:5e:ed:6f:95:9d:e7:
                    7f:8d:4b:69:30:89:e2:ec:ca:5b:66:c6:19:34:7b:
                    0a:10:10:58:5d:e3:0c:1a:28:19:ef:e1:45:ea:85:
                    2d:1f:07:2c:76:dc:c7:fe:77:64:40:2a:93:bf:07:
                    37:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:74:0B:2D:86:5D:D9:89:FC:4B:55:68:54:71:2C:B1:EF:C5:F3:D2
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/1fc53e-78f4-4230-ab19-c75eef8b6e82/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/1fc53e-78f4-4230-ab19-c75eef8b6e82/1/n3QLLYZd2Yn8S1VoVHEsse_F89I.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.224.140.0/24
                IPv6:
                  2a11:6680::/29

    Signature Algorithm: sha256WithRSAEncryption
         09:0f:92:fc:0b:41:bd:39:f4:96:ef:c9:27:51:43:94:06:88:
         9d:a5:ac:ac:92:d2:29:06:39:4b:47:ca:16:c7:f1:0d:19:47:
         95:63:0d:c4:bd:7f:25:44:f1:ca:88:07:49:12:89:bf:62:b6:
         13:20:58:3d:44:8b:b0:23:60:80:47:ca:62:fe:ce:72:47:b8:
         4e:0b:05:4e:fe:c3:48:69:e2:28:83:d1:24:f8:ab:71:0e:63:
         9d:65:48:ce:6f:3a:d5:53:03:5b:81:d5:ca:fa:53:2f:38:0f:
         30:58:f1:db:96:79:c3:a0:45:44:e4:a0:a3:da:c0:98:2f:2f:
         39:f0:8d:7a:7d:61:0c:79:a6:72:18:e8:c8:6f:12:28:90:c6:
         d7:14:9d:fb:95:64:08:eb:76:17:1b:76:7e:4d:06:a3:86:00:
         d8:86:56:88:2e:ef:38:8a:a5:4a:0f:ae:b9:d5:50:35:38:e2:
         a9:9f:1c:83:7e:a6:2b:0b:24:5e:2a:84:19:1e:40:0e:1c:be:
         31:ac:b0:b6:48:8f:5e:a4:7a:7e:bb:c9:9c:cf:46:44:38:69:
         98:02:25:9f:2e:4e:da:77:97:4b:34:ef:40:8b:de:56:04:c8:
         a3:6c:2b:b4:4d:06:79:d0:1d:90:36:aa:1c:82:35:57:dd:70:
         25:79:f5:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----