Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/or9t5YmAH-48IdrbfkgPxcWPzo8.cer
File:                     or9t5YmAH-48IdrbfkgPxcWPzo8.cer (raw, json)
Hash identifier:          Atr+UxaUFALvz4CQ8kds46w+sVfZ1UcA7jA5En/A63k=
Subject key identifier:   A2:BF:6D:E5:89:80:1F:EE:3C:21:DA:DB:7E:48:0F:C5:C5:8F:CE:8F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018572462650E76E781F4FC093D2EF11586B
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/b4/2be87f-282c-4127-bf68-561407a83e35/1/or9t5YmAH-48IdrbfkgPxcWPzo8.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/b4/2be87f-282c-4127-bf68-561407a83e35/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 02 Jan 2023 11:37:58 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 185.202.108.0/24
                          IP: 2a11:fbc0::/29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:72:46:26:50:e7:6e:78:1f:4f:c0:93:d2:ef:11:58:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 11:37:58 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=a2bf6de589801fee3c21dadb7e480fc5c58fce8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:66:e2:14:a4:ff:72:30:c5:2a:23:cc:8a:e2:
                    c7:8f:4c:7d:ac:89:77:fb:95:e8:ff:99:d1:c5:06:
                    2c:ff:b5:c3:bf:2b:00:ea:35:5e:64:89:c6:6a:f4:
                    a6:c6:f6:ef:b0:67:19:93:8e:c3:37:43:ea:33:3d:
                    d2:d5:6d:4f:9d:4d:7b:b9:d4:33:e6:60:75:ba:e1:
                    60:79:ef:9e:69:38:e9:15:c5:17:4c:d6:a0:c4:35:
                    fe:3d:b1:02:ba:f0:b9:39:0c:c6:41:ad:d1:fb:ab:
                    92:08:58:fb:b0:95:0a:a9:02:d5:52:9c:2b:28:c4:
                    2d:60:cc:12:32:80:7b:1a:e4:31:00:80:3a:7b:ed:
                    d5:ef:1c:34:28:17:a6:42:02:5f:88:14:f2:f1:5f:
                    32:32:6a:ea:f2:fd:75:e4:f8:c4:58:81:bd:51:c9:
                    fd:56:27:3b:3a:3d:4a:40:dd:4e:c9:dd:89:f3:c7:
                    63:12:c1:fc:82:e5:1e:49:6f:03:3a:c0:e5:1f:b8:
                    c2:dd:1d:44:3b:4d:fb:35:67:c5:33:c4:d8:bc:22:
                    9f:ec:a9:66:9d:e2:20:88:d1:6e:78:d0:58:9f:0a:
                    82:f1:ad:89:0e:e0:fa:cc:df:11:46:62:df:88:1c:
                    ca:d8:ce:5d:df:6f:90:1d:67:4f:96:ed:07:c0:8d:
                    ce:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:BF:6D:E5:89:80:1F:EE:3C:21:DA:DB:7E:48:0F:C5:C5:8F:CE:8F
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/2be87f-282c-4127-bf68-561407a83e35/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/2be87f-282c-4127-bf68-561407a83e35/1/or9t5YmAH-48IdrbfkgPxcWPzo8.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.202.108.0/24
                IPv6:
                  2a11:fbc0::/29

    Signature Algorithm: sha256WithRSAEncryption
         4c:6c:ec:7e:37:a0:40:2a:e2:a8:72:43:7e:07:17:94:ec:78:
         9c:fc:8f:ad:35:74:91:59:99:a6:70:99:56:99:e1:5c:c3:d9:
         31:e2:21:4a:a6:eb:49:07:a2:66:d3:be:51:d8:27:2e:1d:4e:
         88:74:6c:82:83:67:67:91:d2:79:ff:b4:d0:4f:7e:8e:d7:89:
         bc:b8:0d:4e:dc:95:3a:d0:fa:71:0b:88:08:7a:71:62:bc:7c:
         a4:78:34:6e:1f:8a:68:bf:1d:5f:0d:ec:a9:5b:8c:4b:f8:1f:
         05:c4:22:ea:0f:c2:b6:5c:b3:8a:5f:79:87:0a:1e:c1:a7:0d:
         14:47:e0:4a:9b:d3:4d:1b:63:31:94:b9:ae:76:36:f3:53:bc:
         0f:fe:69:ba:97:85:21:53:6e:07:44:ba:13:4f:9b:a5:dc:fe:
         e8:5b:91:08:72:cc:1b:ce:fb:87:4c:b7:48:78:42:e0:8c:d7:
         64:c1:00:91:bd:ac:b2:4e:76:5b:1d:c5:cd:d9:8b:a5:0c:74:
         5c:f8:b4:eb:c7:75:58:8c:0b:2c:3f:39:3d:d1:18:8c:3d:bf:
         cc:c8:ab:a2:a3:65:8f:5e:1f:50:91:72:c4:8a:bf:6a:45:b0:
         a3:39:3a:88:6e:d9:cf:d4:29:d4:a2:19:16:a4:3c:68:ae:55:
         fb:10:c8:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----