Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/CwJi65tDeBr0e_2DPXsqjtW9acA.cer
File:                     CwJi65tDeBr0e_2DPXsqjtW9acA.cer (raw, json)
Hash identifier:          9JVS9d00W8WgbTqZU69eOLt1RrL2ATafqpJPRaytN/U=
Subject key identifier:   0B:02:62:EB:9B:43:78:1A:F4:7B:FD:83:3D:7B:2A:8E:D5:BD:69:C0
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018571D558D89477864D034204B266A3CB19
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/67/a04b28-3918-4259-bd25-73d8df5eb288/1/CwJi65tDeBr0e_2DPXsqjtW9acA.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/67/a04b28-3918-4259-bd25-73d8df5eb288/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 02 Jan 2023 09:34:45 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 31.41.249.0/24

Validation:               Failed, certificate revoked on Tue 22 Aug 2023 11:56:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:71:d5:58:d8:94:77:86:4d:03:42:04:b2:66:a3:cb:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 09:34:45 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=0b0262eb9b43781af47bfd833d7b2a8ed5bd69c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:aa:be:81:cf:a4:d3:b6:66:b9:ae:b5:24:9b:
                    35:4c:99:0d:3c:04:13:55:26:70:16:00:91:35:21:
                    cc:2c:59:03:c1:8d:14:5d:3b:fe:4e:fa:47:7a:e4:
                    9b:d1:92:66:1d:37:0b:f3:b8:5d:d7:4a:a7:4b:cc:
                    a8:2c:1a:fa:95:db:b5:a8:99:49:1e:a2:2d:ed:61:
                    9a:e5:0f:95:52:33:6a:47:2d:ed:47:3b:b8:83:67:
                    1d:c3:f1:85:8b:a3:eb:57:2c:62:8b:cc:69:78:fd:
                    25:07:4d:19:a7:83:87:82:5f:b0:6f:08:06:d3:c6:
                    68:c9:84:b7:21:26:f5:ed:49:ca:49:52:42:5d:84:
                    4b:0c:93:19:d2:de:4c:43:d9:48:55:43:07:6a:d5:
                    a8:ac:8c:05:be:8f:76:82:19:54:3c:76:74:c5:00:
                    6e:51:ae:bb:ee:71:5b:f5:bd:1a:54:8c:20:01:b4:
                    93:20:ca:1b:73:f6:a4:f9:e2:b3:b1:73:20:c9:d1:
                    5f:a1:3b:6c:b8:82:79:39:48:92:87:36:71:9a:67:
                    68:0b:a0:38:9e:f8:02:e9:88:7d:ea:35:02:3e:bb:
                    33:5a:21:d8:44:f6:f7:e8:ad:46:e1:6e:36:a5:50:
                    6e:00:16:4a:2a:ba:32:78:db:cf:00:30:40:3f:69:
                    51:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:02:62:EB:9B:43:78:1A:F4:7B:FD:83:3D:7B:2A:8E:D5:BD:69:C0
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/a04b28-3918-4259-bd25-73d8df5eb288/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/a04b28-3918-4259-bd25-73d8df5eb288/1/CwJi65tDeBr0e_2DPXsqjtW9acA.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.41.249.0/24

    Signature Algorithm: sha256WithRSAEncryption
         91:d0:f2:2a:79:30:47:28:7b:8a:22:3e:05:e0:0d:73:47:63:
         12:6b:42:2e:74:e0:b1:1b:7d:0e:0e:b7:9e:06:7e:10:39:e4:
         bf:0b:61:58:c6:6c:c3:bd:46:f7:71:e4:33:d6:20:53:25:c9:
         2b:5f:26:29:ca:20:73:91:da:bf:c7:c6:d1:0c:1b:85:7f:ee:
         e9:a6:a5:0c:02:ce:6e:4e:28:78:50:eb:d2:57:94:a7:25:37:
         b8:ad:38:90:b1:4f:aa:a1:ad:c1:e9:b8:99:0b:79:22:11:04:
         43:9c:7a:c0:b8:55:2a:c4:e0:a7:6a:05:38:ca:71:17:18:cc:
         58:39:21:a4:b7:15:ff:e5:b1:d4:2b:3f:0a:c8:50:7b:50:dc:
         c7:27:5f:39:27:f6:9f:78:24:95:cb:fb:f5:0e:e1:55:16:07:
         5a:41:24:e4:8c:88:83:4d:49:b4:7b:f4:fb:63:32:a6:62:c5:
         53:85:71:58:56:8b:78:a1:11:08:9a:6c:3c:59:1f:8e:23:65:
         d7:bc:a5:91:d9:09:92:ed:fd:b4:51:d1:53:fb:92:c2:f9:36:
         73:44:0a:96:44:e8:19:3a:55:a8:09:f7:71:a9:62:70:30:87:
         d6:e9:f4:79:3d:3c:42:45:05:a6:7e:ae:d1:bb:5e:77:45:89:
         74:45:44:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----