Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2bWU8wV9-2JD9pwARuI7__kSF-4.cer
File:                     2bWU8wV9-2JD9pwARuI7__kSF-4.cer (raw, json)
Hash identifier:          Q8S7bZlmJ9aXlaNmEhL1pJm1YYxeh0flkka0TcC4o1E=
Subject key identifier:   D9:B5:94:F3:05:7D:FB:62:43:F6:9C:00:46:E2:3B:FF:F9:12:17:EE
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856ED3E29960B3C74609F3532E9819344B
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/0f/40c2db-05d7-4c43-95c6-03a8eaaf8433/1/2bWU8wV9-2JD9pwARuI7__kSF-4.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/0f/40c2db-05d7-4c43-95c6-03a8eaaf8433/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 19:34:18 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 193.163.23.0/24
                          IP: 2a12:ee00::/29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6e:d3:e2:99:60:b3:c7:46:09:f3:53:2e:98:19:34:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 19:34:18 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=d9b594f3057dfb6243f69c0046e23bfff91217ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:ae:3c:18:9e:a3:41:34:5a:69:1f:0f:e9:25:
                    db:06:d6:31:c9:e9:23:23:7b:20:1b:c2:ce:44:40:
                    4f:be:ce:e5:00:5b:43:26:30:d5:07:ce:88:27:e1:
                    63:72:2f:ec:89:92:f3:2a:4a:f0:d7:fe:a2:d6:82:
                    ea:64:66:c9:a1:64:9a:a7:49:42:da:cc:f1:43:0b:
                    b2:e1:46:17:74:bf:cf:76:e7:22:d0:a5:f0:8a:5a:
                    c0:4c:bf:d0:c0:0a:21:3f:f5:59:db:b9:a7:f4:91:
                    ed:8f:99:99:69:0d:4e:e4:63:7b:94:6b:80:a8:b8:
                    84:5f:9f:91:e4:c8:4f:ec:56:07:08:b4:4e:be:19:
                    f8:31:cc:8b:e4:8c:fa:84:ff:c5:ee:c4:2c:b8:90:
                    20:92:34:80:08:56:e5:2a:79:bc:2b:37:f0:5d:e5:
                    85:33:cc:98:ba:29:76:a8:32:8e:92:47:db:b9:67:
                    dd:99:1f:54:5b:28:ae:28:9d:2e:6c:a3:2e:df:d0:
                    89:54:76:cd:a7:2d:f3:0c:1b:d8:70:2e:82:6c:e9:
                    27:e5:1a:f9:2c:ab:fb:bd:89:d9:70:ec:69:45:27:
                    5f:cc:9f:75:97:09:f8:7c:cf:2b:5b:a2:4e:7e:b6:
                    4c:18:70:dd:9a:85:53:5d:44:c8:a9:df:0c:a4:7e:
                    c2:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:B5:94:F3:05:7D:FB:62:43:F6:9C:00:46:E2:3B:FF:F9:12:17:EE
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/40c2db-05d7-4c43-95c6-03a8eaaf8433/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/40c2db-05d7-4c43-95c6-03a8eaaf8433/1/2bWU8wV9-2JD9pwARuI7__kSF-4.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.163.23.0/24
                IPv6:
                  2a12:ee00::/29

    Signature Algorithm: sha256WithRSAEncryption
         4a:2b:9c:79:bc:c6:7c:af:fe:dc:5c:82:19:b3:50:2c:97:a4:
         87:71:92:21:02:2f:4a:78:a9:00:82:01:46:19:a3:cd:90:2c:
         d9:88:6c:d1:8f:43:4c:c6:4a:7e:7c:ae:a9:db:8c:3c:66:91:
         63:16:8b:fc:a1:c4:a3:40:f7:a2:33:55:47:2b:78:99:73:69:
         7f:78:bc:dd:f0:58:0f:11:e9:6a:ed:fc:6a:c1:c6:56:e7:af:
         7c:72:79:2e:ea:8d:a4:61:d1:1b:02:27:09:32:20:a8:f3:f2:
         36:69:ec:b2:77:c8:44:4c:e0:6c:ce:2e:75:fb:f1:c1:30:e5:
         2e:d1:54:3f:87:e7:8c:9f:77:28:18:89:85:5d:32:85:05:c3:
         3e:a4:4a:78:a9:93:d2:9e:c9:af:e0:d6:58:67:99:da:f1:ce:
         83:54:bf:14:a0:13:65:39:d5:60:14:e6:1d:50:aa:ca:3b:d7:
         2f:ec:58:47:28:0f:85:42:70:4e:8f:e9:df:f4:09:13:75:42:
         d0:4b:49:14:0d:86:23:f2:2d:f2:3a:2f:9a:f8:75:61:98:0d:
         d8:f8:87:15:3c:32:fd:54:bd:21:95:c5:f6:8f:7b:c4:b7:23:
         50:45:94:17:92:4b:e3:c3:24:f4:0d:0a:f8:19:56:e3:c6:b0:
         2a:34:0b:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----