Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3WWZgvsgqwD6WiXKiC1jjn4DIlQ.cer
File:                     3WWZgvsgqwD6WiXKiC1jjn4DIlQ.cer (raw, json)
Hash identifier:          Nj13H6058Wp4FKHLlmlAz6bnvHHN9bxCGNyHXPpautk=
Subject key identifier:   DD:65:99:82:FB:20:AB:00:FA:5A:25:CA:88:2D:63:8E:7E:03:22:54
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856CAC61BDF66585FD77EF541663292A3B
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/4b/b7eb91-1d64-4d74-b092-43bab7ff200a/1/3WWZgvsgqwD6WiXKiC1jjn4DIlQ.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/4b/b7eb91-1d64-4d74-b092-43bab7ff200a/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 09:31:54 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 31.222.245.0/24
                          IP: 2a11:8cc0::/29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6c:ac:61:bd:f6:65:85:fd:77:ef:54:16:63:29:2a:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 09:31:54 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=dd659982fb20ab00fa5a25ca882d638e7e032254
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:88:9b:d1:d2:4d:8f:87:af:98:12:bb:26:07:
                    df:83:05:ac:59:db:fd:12:e8:4c:f5:22:5c:c2:13:
                    0a:5e:ae:08:01:ee:9c:41:c5:5f:7c:bb:4a:72:22:
                    0f:15:49:6b:b9:53:62:1a:d5:a3:fa:e8:ef:ed:73:
                    3a:8e:4a:df:3f:95:fa:80:71:24:8d:67:94:ee:a9:
                    cb:9f:e5:21:69:f1:f4:05:43:a7:69:d8:88:16:c3:
                    a5:cf:00:ba:34:c2:5b:90:bd:a7:b5:22:56:8c:4f:
                    6d:ba:74:68:46:f8:9e:67:5e:7e:29:e9:2f:15:0b:
                    3d:99:7b:40:2c:79:fe:c8:2f:46:97:65:75:36:a3:
                    1b:6e:bf:10:48:78:59:47:98:a8:eb:d5:0d:e1:25:
                    18:9c:e5:1c:7a:01:ed:07:9a:98:a6:44:9c:27:d2:
                    69:2c:6f:1e:00:a4:4f:9d:d5:c2:32:f7:21:b5:5f:
                    c9:b9:6d:6b:e5:f0:c7:c5:7e:88:cf:3c:41:24:f2:
                    44:27:27:2a:66:fb:99:dd:de:95:5a:0d:25:bd:3a:
                    d5:66:25:41:ea:f7:b4:4c:7c:4b:e3:50:ac:2c:dd:
                    72:ca:89:9b:fe:c8:ad:2b:73:3c:93:d6:45:13:33:
                    86:eb:72:77:2e:04:33:dd:65:0c:24:72:2d:43:c4:
                    ad:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:65:99:82:FB:20:AB:00:FA:5A:25:CA:88:2D:63:8E:7E:03:22:54
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/b7eb91-1d64-4d74-b092-43bab7ff200a/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/b7eb91-1d64-4d74-b092-43bab7ff200a/1/3WWZgvsgqwD6WiXKiC1jjn4DIlQ.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.222.245.0/24
                IPv6:
                  2a11:8cc0::/29

    Signature Algorithm: sha256WithRSAEncryption
         8e:9b:a5:cb:55:e6:ce:3f:63:a6:fa:9e:97:36:c0:57:77:d9:
         8c:ef:7b:af:4c:be:9c:2f:d8:0d:94:c4:66:c1:55:5d:37:db:
         47:c8:d8:13:33:e4:46:c6:45:b8:34:02:fa:72:03:d4:f5:83:
         a1:35:0f:16:f2:01:07:3f:7f:49:53:c9:c4:6b:5f:83:23:cb:
         9a:a2:11:dd:75:cc:2e:9a:2b:f1:f0:05:a3:0b:3b:e4:b8:3b:
         e8:b7:9a:2e:3b:88:f5:f4:54:3c:3a:e0:f8:8c:e4:1a:ee:8d:
         b9:3a:75:27:8c:d7:8e:3e:9d:1f:e4:95:72:95:70:9a:fd:04:
         b5:e9:26:33:ad:77:21:e0:62:47:67:01:f1:f0:9a:6e:2c:bf:
         08:f2:cd:a8:d9:01:21:81:7a:a7:68:a4:13:77:52:54:27:41:
         84:6b:26:af:ad:ec:40:c3:4a:8e:2c:61:c2:cc:66:76:cd:de:
         7b:6b:98:c8:83:19:4f:7b:06:60:5f:8d:fc:75:ec:f5:3d:81:
         53:96:4b:c8:a1:b3:91:cd:8d:28:6e:00:be:78:7a:f7:a3:38:
         90:23:3a:ce:5f:73:b9:cf:a1:52:7e:e8:16:74:43:c3:1c:9c:
         67:8b:a4:16:1a:33:5f:2a:20:50:4b:2f:90:e3:f9:a0:57:a0:
         eb:15:5c:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----