Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5wiFPbRnjUN-xQkc5XfnFPmfKW8.cer
File:                     5wiFPbRnjUN-xQkc5XfnFPmfKW8.cer (raw, json)
Hash identifier:          s+c89suoPlFRiN59mAaXfbIewSOtURgbOG812Uv8udU=
Subject key identifier:   E7:08:85:3D:B4:67:8D:43:7E:C5:09:1C:E5:77:E7:14:F9:9F:29:6F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0185708BF80E7A251E087555E289FC1881DE
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/c5/253d90-418f-4d5c-b78f-ba6e58075c79/1/5wiFPbRnjUN-xQkc5XfnFPmfKW8.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/c5/253d90-418f-4d5c-b78f-ba6e58075c79/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 02 Jan 2023 03:34:59 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    AS: 212109

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:8b:f8:0e:7a:25:1e:08:75:55:e2:89:fc:18:81:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 03:34:59 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=e708853db4678d437ec5091ce577e714f99f296f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:cc:05:9c:20:9a:3f:fe:14:74:46:35:67:06:
                    5e:00:c0:a4:a5:6f:0b:af:59:43:80:65:50:28:a4:
                    ac:30:21:e8:00:fd:06:8c:11:37:7e:bb:1a:4d:f7:
                    09:49:34:6c:58:55:b9:85:1a:31:1d:a7:bc:f4:d1:
                    40:26:48:b5:17:e4:12:d0:ce:db:f7:b8:fe:30:d5:
                    4d:5c:1b:95:c1:b2:99:32:04:64:9b:ec:f2:61:dc:
                    38:2b:1d:6f:00:39:b7:be:2a:bc:77:ac:83:0e:87:
                    b7:1a:7e:99:b8:75:14:e1:b4:62:86:0d:6a:31:40:
                    82:3a:50:f6:e8:91:eb:91:4c:31:dd:31:fc:89:e0:
                    70:85:03:82:d8:26:03:c4:0e:1f:e6:88:62:21:6e:
                    6a:78:08:88:ac:0f:83:50:ef:14:1e:e5:c5:f5:19:
                    8a:c6:1d:30:2c:93:33:67:71:a4:f1:08:0e:ed:04:
                    0f:da:67:90:02:0a:3f:ef:8f:a1:26:78:d3:b5:83:
                    66:b6:10:db:25:95:01:fd:56:6f:c7:04:16:57:10:
                    cb:4e:0d:c4:00:4a:39:18:8c:da:43:c6:7c:21:df:
                    8b:4e:61:e5:18:3e:f5:49:30:40:31:32:06:a2:ca:
                    74:b7:6d:67:85:6a:bb:31:bf:7f:bc:55:2d:a0:96:
                    36:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:08:85:3D:B4:67:8D:43:7E:C5:09:1C:E5:77:E7:14:F9:9F:29:6F
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/253d90-418f-4d5c-b78f-ba6e58075c79/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/253d90-418f-4d5c-b78f-ba6e58075c79/1/5wiFPbRnjUN-xQkc5XfnFPmfKW8.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  212109

    Signature Algorithm: sha256WithRSAEncryption
         62:5a:15:bb:99:aa:f9:a6:e2:5f:7b:39:f8:03:1e:85:7f:14:
         fc:c1:9c:5e:eb:e5:93:aa:93:64:de:d2:4e:2e:4d:65:41:2a:
         b4:aa:2b:35:55:c7:be:f8:f1:30:33:ba:a6:18:67:1c:bb:95:
         77:e1:ba:11:24:f8:d5:27:9d:6a:78:6a:13:17:23:a5:22:d1:
         4f:24:5c:ca:45:59:67:96:21:ba:5d:63:d6:60:61:4c:78:44:
         e1:28:4d:6c:df:14:88:cc:a0:25:e9:9c:72:9f:d5:29:ba:73:
         5e:d3:5d:ec:a6:ca:58:11:39:42:32:c6:e1:ee:66:8d:98:40:
         9d:8e:cb:82:8b:e4:01:3f:32:98:65:3b:35:07:ab:3a:7b:d7:
         8c:be:29:54:a7:c1:d3:80:1f:83:d0:2f:b3:df:c7:b0:48:6e:
         ef:dc:04:cc:86:98:9c:9c:c7:42:57:b5:ea:7a:83:5f:58:42:
         a9:68:b2:25:0c:bc:77:a9:94:6e:d5:81:42:74:fb:a9:13:b9:
         f2:c5:18:2b:90:d1:85:c2:dd:2b:bd:eb:9b:bd:5e:90:93:37:
         d2:79:f6:d5:23:c6:45:f5:cb:43:87:f1:11:78:bb:13:68:88:
         94:65:6f:dd:7a:a7:18:39:bd:94:2c:82:9c:70:6d:e7:3c:c9:
         86:0b:ca:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----