Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/xCPROyob2ozAf6tVyqZKNB4x9AM.cer
File:                     xCPROyob2ozAf6tVyqZKNB4x9AM.cer (raw, json)
Hash identifier:          5XI7Gurr5cHamN2dCPhNMxJkglIZX/yf8Flx59aRt8E=
Subject key identifier:   C4:23:D1:3B:2A:1B:DA:8C:C0:7F:AB:55:CA:A6:4A:34:1E:31:F4:03
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856DF71E4A94DD0BC308BE03FA900FB877
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/cd/26f604-7f39-4c95-90b7-1f5f98402ffb/1/xCPROyob2ozAf6tVyqZKNB4x9AM.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/cd/26f604-7f39-4c95-90b7-1f5f98402ffb/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 15:33:09 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 62.204.49.0/24
                          IP: 2a12:6e80::/29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6d:f7:1e:4a:94:dd:0b:c3:08:be:03:fa:90:0f:b8:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 15:33:09 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=c423d13b2a1bda8cc07fab55caa64a341e31f403
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:e8:35:70:a7:49:91:68:9f:d1:ff:3a:7a:28:
                    9c:6c:ab:78:aa:44:33:bd:ed:18:c8:44:f1:af:35:
                    ea:7b:b1:31:90:de:dc:5f:77:1c:bf:7f:43:7c:b0:
                    b1:dd:29:3c:93:64:2c:98:de:41:79:43:a4:e0:8c:
                    88:54:09:4b:11:35:84:2f:9b:db:78:4d:25:11:a6:
                    92:9e:65:be:c2:cc:22:78:4e:a8:0b:f2:81:ec:a4:
                    c0:b7:c5:74:1b:36:9f:9a:37:55:84:07:b2:d5:96:
                    a8:55:db:be:8e:f7:8d:05:0c:46:af:55:29:da:12:
                    37:b9:3a:07:9e:68:b2:63:e3:5e:a9:ea:50:72:82:
                    92:d0:f6:d6:dc:c3:d1:7c:e5:09:23:de:fd:77:c1:
                    e5:3e:2d:25:15:59:ae:a9:b8:17:3e:2a:82:a3:41:
                    d6:56:6c:aa:35:83:73:ed:f3:a2:7e:82:f8:26:61:
                    a6:ef:fa:61:12:0c:2a:7c:1d:dd:4d:09:36:6b:eb:
                    14:de:25:95:0e:9c:a7:fc:3c:6e:13:70:e7:ac:3d:
                    21:f5:b6:84:2e:49:d2:58:bb:b1:31:37:89:6c:75:
                    d0:ed:c6:0f:2c:9e:74:68:f4:55:bf:55:4f:9e:a1:
                    36:8b:01:93:f0:2a:22:e6:da:3b:66:e4:d7:09:08:
                    06:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:23:D1:3B:2A:1B:DA:8C:C0:7F:AB:55:CA:A6:4A:34:1E:31:F4:03
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/26f604-7f39-4c95-90b7-1f5f98402ffb/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/26f604-7f39-4c95-90b7-1f5f98402ffb/1/xCPROyob2ozAf6tVyqZKNB4x9AM.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.204.49.0/24
                IPv6:
                  2a12:6e80::/29

    Signature Algorithm: sha256WithRSAEncryption
         0c:17:9f:bf:2f:63:59:b5:20:59:20:3d:12:a8:9c:8a:55:bd:
         b0:13:a9:6c:11:b3:8e:3c:bf:18:6d:18:26:62:b2:bb:33:dd:
         2f:9e:f8:15:53:56:a1:7c:83:92:81:34:cb:0b:a4:c2:ea:d6:
         44:ba:50:d2:dd:5f:07:a8:ed:55:f5:18:db:3c:3f:4d:de:4d:
         c6:f0:36:72:0a:b4:80:d7:b1:f2:62:7a:30:8b:cd:53:73:41:
         16:dd:60:40:9e:14:4c:9c:56:ca:05:d7:19:c2:b4:c5:3f:a3:
         45:a8:59:38:9e:12:02:f0:70:a6:e7:7d:57:64:1f:d7:40:69:
         b8:24:c7:23:26:e4:5a:f4:42:2e:ab:91:66:7e:62:49:75:96:
         08:10:4c:8d:98:49:1a:67:a2:0c:07:14:0c:ff:c6:5d:db:d3:
         21:3d:4a:df:e3:5d:78:6c:4e:6f:71:5f:62:94:06:7a:1d:e1:
         15:83:f0:bb:95:f4:f1:a9:d4:49:fe:0a:05:2e:34:e5:3f:45:
         b0:07:a4:3c:b6:ad:bc:70:79:09:96:f4:93:92:6b:24:06:07:
         fb:6d:4c:89:7b:88:5f:2d:41:38:49:6a:4a:14:44:12:7e:24:
         05:8a:06:7a:3e:79:6f:b0:1d:1b:17:3b:da:33:6d:84:5a:8d:
         55:4c:f4:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----