Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/obbH52HZAuO7nUAM3iXmNwo_Dls.cer
File:                     obbH52HZAuO7nUAM3iXmNwo_Dls.cer (raw, json)
Hash identifier:          dNslidBFsQC/RLZwcMNXH5JcmAQUO4qtU95j6x6Bq4U=
Subject key identifier:   A1:B6:C7:E7:61:D9:02:E3:BB:9D:40:0C:DE:25:E6:37:0A:3F:0E:5B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856CAD72B111219C608A27CA4824A3A9D9
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/59/b4db54-1e48-48ad-bff5-d7a939d67ba7/1/obbH52HZAuO7nUAM3iXmNwo_Dls.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/59/b4db54-1e48-48ad-bff5-d7a939d67ba7/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 09:33:04 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    AS: 35184
                          IP: 46.21.128.0/20
                          IP: 87.240.64.0/18
                          IP: 2a03:6c00::/32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6c:ad:72:b1:11:21:9c:60:8a:27:ca:48:24:a3:a9:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 09:33:04 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=a1b6c7e761d902e3bb9d400cde25e6370a3f0e5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:0d:bd:a0:36:c8:78:cd:9f:89:cf:98:06:ec:
                    6d:29:47:ad:36:1d:4d:77:73:6a:47:2e:47:02:31:
                    fd:44:b7:aa:1e:97:63:e6:cf:19:bc:97:a7:38:91:
                    f1:8e:d8:d7:11:bf:c1:f2:34:23:83:1b:12:01:75:
                    9f:f8:75:62:a2:ee:20:b6:e4:25:ac:7a:50:b2:94:
                    be:f0:9c:74:43:cb:15:d6:12:65:29:c2:40:b4:bf:
                    1c:8f:7b:2c:23:0b:d0:d5:b7:fb:da:00:4e:54:3c:
                    cb:2b:48:fc:88:7d:0b:ad:1c:6a:f9:e7:05:63:c1:
                    80:91:10:a6:55:51:cb:a8:7a:c6:15:df:1a:f5:2e:
                    d4:cd:fa:5c:ab:29:5e:63:69:16:b7:b9:37:fa:50:
                    bb:97:c7:ce:42:e7:fe:e6:32:5e:b9:bb:a8:2f:2f:
                    52:de:c2:06:cf:bd:8d:93:84:da:2b:41:7a:ac:5b:
                    0f:df:46:e9:ae:3f:a5:12:57:e6:de:6f:ae:14:9a:
                    63:49:2a:90:c1:73:cd:0b:18:83:7e:53:bb:5d:c2:
                    3e:47:1b:42:74:5e:00:6e:5e:5c:6f:fe:b8:4a:54:
                    95:44:d1:f0:0a:aa:76:89:31:bd:f5:18:45:25:70:
                    e9:ef:0d:f6:d5:3f:2e:a8:23:0d:06:07:f3:6b:d0:
                    71:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:B6:C7:E7:61:D9:02:E3:BB:9D:40:0C:DE:25:E6:37:0A:3F:0E:5B
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/b4db54-1e48-48ad-bff5-d7a939d67ba7/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/b4db54-1e48-48ad-bff5-d7a939d67ba7/1/obbH52HZAuO7nUAM3iXmNwo_Dls.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.21.128.0/20
                  87.240.64.0/18
                IPv6:
                  2a03:6c00::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  35184

    Signature Algorithm: sha256WithRSAEncryption
         9d:7f:26:21:28:a8:95:3d:8a:1b:17:0c:a3:07:87:16:24:47:
         d3:73:82:a3:c1:33:3d:31:05:d1:01:37:7b:5a:64:b9:eb:91:
         a7:56:b8:7d:22:c6:bc:4f:13:43:7b:c1:0c:a5:2d:2d:c6:42:
         d1:37:86:b9:51:99:1f:1d:7c:e2:51:f2:ca:f7:47:22:e4:11:
         dd:74:3a:ea:4a:d3:8b:e0:47:36:aa:18:41:47:7a:8d:71:df:
         7f:a2:e0:81:0a:81:23:a2:8b:24:5b:85:e6:f6:12:fc:8b:aa:
         fd:d8:10:6a:9e:fa:57:f9:10:59:0f:69:3f:e7:b1:35:9b:33:
         3f:e7:5d:4b:b0:35:44:5a:32:6d:ea:9c:3d:2c:6b:21:1e:0f:
         8c:ff:87:53:8e:61:a8:29:24:59:8c:76:b3:94:f6:b8:22:8d:
         b3:6f:20:28:d9:ac:d5:70:a7:84:8c:d5:9a:85:ef:6e:fa:17:
         8c:07:58:cf:c0:00:53:e1:df:41:c9:18:b2:7a:17:43:f3:7c:
         fc:9a:02:db:9b:2c:11:9e:e8:5d:b1:7e:1f:b1:1d:52:d8:59:
         1a:bc:c0:f9:79:44:07:31:64:05:d9:ed:71:a9:d7:d0:6e:de:
         23:5a:43:91:56:8d:73:79:35:9b:27:61:9d:38:cb:91:f7:83:
         00:fd:bc:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----