Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/rGkbWzvdEfLZmIn6kD-5Laki07I.cer
File:                     rGkbWzvdEfLZmIn6kD-5Laki07I.cer (raw, json)
Hash identifier:          9+al7rcznSa2atNg/1KdO4us8hEJdIvOeeBv8xoT9u0=
Subject key identifier:   AC:69:1B:5B:3B:DD:11:F2:D9:98:89:FA:90:3F:B9:2D:A9:22:D3:B2
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856AF4E1F3386C89D412B43B88D47613A6
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/3b/c5be83-48dd-4c7b-8445-31a9c59fad28/1/rGkbWzvdEfLZmIn6kD-5Laki07I.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/3b/c5be83-48dd-4c7b-8445-31a9c59fad28/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 01:31:51 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 195.96.144.0/24
                          IP: 2a12:400::/29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6a:f4:e1:f3:38:6c:89:d4:12:b4:3b:88:d4:76:13:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 01:31:51 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=ac691b5b3bdd11f2d99889fa903fb92da922d3b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:17:1b:1a:34:fc:70:97:bb:9d:0c:14:41:94:
                    9a:21:8b:39:10:dd:11:0a:80:09:0e:21:5c:c0:a9:
                    a5:ae:0f:51:fb:5b:41:a1:32:a6:4f:0f:0f:c3:82:
                    dd:3c:07:df:3b:bb:3d:47:11:ca:cd:3a:55:b5:ca:
                    f0:28:6d:ee:1f:44:c0:6b:a6:20:4a:01:59:b1:79:
                    f3:c6:9c:bb:a7:b2:04:d9:cf:21:19:a7:e1:c2:00:
                    70:3f:7e:77:97:eb:71:a2:a4:eb:9c:f2:59:13:c0:
                    87:33:3e:64:bb:1e:0d:e4:87:90:b8:7c:ed:de:d4:
                    31:88:04:be:87:20:7b:d2:4a:e6:53:2f:f1:60:f9:
                    ac:55:fe:a6:f7:cb:a1:21:70:9b:cd:6c:f9:66:4c:
                    0f:f0:db:06:2a:cf:fd:23:35:ff:c7:64:64:d9:ac:
                    69:3e:65:27:90:8a:3e:72:c7:ed:99:ce:53:69:28:
                    12:be:03:f2:c5:9b:90:b1:07:8e:6e:fa:9a:a8:72:
                    4d:d4:fe:4f:24:bb:f7:89:34:ae:8a:22:05:2c:e2:
                    59:0e:34:ac:d6:31:e5:d4:54:de:c4:4e:a3:1a:d9:
                    17:61:11:da:82:57:54:ba:94:9e:a6:7c:7b:57:bd:
                    40:b4:ea:16:2c:b6:e4:8a:37:67:9e:ff:7a:68:9b:
                    14:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:69:1B:5B:3B:DD:11:F2:D9:98:89:FA:90:3F:B9:2D:A9:22:D3:B2
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/c5be83-48dd-4c7b-8445-31a9c59fad28/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/c5be83-48dd-4c7b-8445-31a9c59fad28/1/rGkbWzvdEfLZmIn6kD-5Laki07I.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.96.144.0/24
                IPv6:
                  2a12:400::/29

    Signature Algorithm: sha256WithRSAEncryption
         87:e2:68:0c:9e:a3:06:ba:a9:ad:03:d1:ee:57:09:3c:89:41:
         16:49:43:6f:0d:6b:7a:48:59:67:b5:3d:0d:87:ee:12:80:ba:
         17:91:b5:e8:8f:ab:7e:4c:39:80:32:3b:a3:27:60:e4:e4:93:
         ed:95:d9:23:7d:0b:60:ae:66:40:2b:1c:fd:92:22:0a:05:59:
         b2:09:39:17:de:9a:bd:00:56:0f:4a:a7:29:44:af:d1:dc:1c:
         06:e0:69:9e:70:3f:36:78:19:ec:cb:9a:3f:af:b6:ff:71:10:
         bb:e5:9b:98:2a:2b:c7:16:76:e0:f7:0d:63:f1:20:f9:ad:50:
         3a:40:d0:8b:4d:41:ef:3d:b1:5a:32:7f:11:c4:7c:00:5b:5d:
         4a:9d:1a:b2:f0:d3:ad:3b:3c:8f:3b:39:1e:d6:a6:24:78:9e:
         98:0d:b1:f9:02:ee:2c:c4:e7:72:66:42:9d:50:2b:28:1f:06:
         bb:e0:ce:d5:01:9a:0e:ae:ba:ed:7a:40:28:b8:5a:61:de:fe:
         4c:c3:79:f4:a6:cb:e1:e3:ab:cc:73:7c:38:ad:a0:e5:c6:87:
         50:78:8e:7b:9e:a4:34:88:fd:b7:00:cb:2f:bc:39:ad:07:e5:
         d1:4c:8e:b8:af:d4:d2:5b:a6:87:66:92:97:07:d0:a8:5e:50:
         b2:d0:68:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----