Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Go7rg7Wh7X1cqt6O8QBKW6wZ8w8.cer
File:                     Go7rg7Wh7X1cqt6O8QBKW6wZ8w8.cer (raw, json)
Hash identifier:          PYpZJ/77aIg7Oj1+VDuvpaChpTJbiwr3cxoA5LXXBz8=
Subject key identifier:   1A:8E:EB:83:B5:A1:ED:7D:5C:AA:DE:8E:F1:00:4A:5B:AC:19:F3:0F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0186270F97003E2E7E47C1424B1BF9DA3AE6
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/b4/e9a262-3896-4b91-87e4-bd7379a9d043/1/Go7rg7Wh7X1cqt6O8QBKW6wZ8w8.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/b4/e9a262-3896-4b91-87e4-bd7379a9d043/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 06 Feb 2023 14:09:38 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 188.244.113.0/24
                          IP: 2a13:fe00::/29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:27:0f:97:00:3e:2e:7e:47:c1:42:4b:1b:f9:da:3a:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Feb  6 14:09:38 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=1a8eeb83b5a1ed7d5caade8ef1004a5bac19f30f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:df:57:0a:66:3d:af:ac:21:c3:b7:aa:dc:42:
                    01:45:39:ea:7d:16:ab:5a:c9:e1:16:79:01:ac:2a:
                    ef:d5:fd:1e:18:d1:a2:dd:f0:a2:71:7a:10:87:93:
                    cb:2e:56:ca:25:5f:e4:bb:ef:4b:c4:d7:3b:2d:6e:
                    64:d1:5f:6b:58:bc:c5:f6:19:6b:46:df:22:51:b0:
                    cb:44:ca:23:ca:e4:f5:9e:fa:95:54:a0:4e:4f:ee:
                    02:62:93:66:36:2d:33:9d:31:c6:25:3c:b8:ed:0f:
                    b3:30:fa:f7:3a:2a:09:9d:18:66:72:47:73:25:00:
                    8e:7d:60:44:8d:38:02:2e:c1:7b:b4:e9:03:72:d3:
                    54:b7:c6:b6:85:e4:6c:59:e8:d7:e8:95:f1:09:3c:
                    bb:62:49:7d:27:fa:14:a8:64:b0:5f:d0:96:11:1c:
                    20:d7:4b:18:72:35:59:75:02:69:11:de:c2:93:5d:
                    b2:92:0f:6a:af:0e:eb:0e:1b:31:05:92:28:e2:c4:
                    17:86:bf:da:65:ab:83:15:a0:33:d6:56:a9:f7:87:
                    f5:8b:ec:f3:d9:a2:6d:45:5d:16:e6:bc:18:b7:55:
                    6c:8a:07:b2:a2:70:b9:fd:6e:03:7d:41:45:9f:48:
                    51:21:7b:65:2d:91:b2:7f:b2:40:ba:fc:61:23:d8:
                    ad:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:8E:EB:83:B5:A1:ED:7D:5C:AA:DE:8E:F1:00:4A:5B:AC:19:F3:0F
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/e9a262-3896-4b91-87e4-bd7379a9d043/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/e9a262-3896-4b91-87e4-bd7379a9d043/1/Go7rg7Wh7X1cqt6O8QBKW6wZ8w8.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  188.244.113.0/24
                IPv6:
                  2a13:fe00::/29

    Signature Algorithm: sha256WithRSAEncryption
         b0:d4:e7:7c:58:0c:5e:13:a2:f6:2e:d9:8e:97:c1:94:19:4b:
         e1:ce:84:ac:8d:ad:9b:5d:c4:8e:28:40:67:f9:c2:f3:01:46:
         7d:e5:13:74:ab:66:ec:93:c3:f7:e1:f0:0e:b2:e3:e2:d6:62:
         d1:d6:13:11:dc:2f:c3:45:cb:10:a9:61:40:89:c8:07:9d:ae:
         f5:d2:ba:ff:ca:9d:72:79:8c:41:15:6c:58:63:02:4f:f6:89:
         94:ff:ba:f4:f5:0d:9f:a1:4d:cd:6c:b1:70:21:09:9d:99:e7:
         d5:bf:5f:67:97:3b:52:e1:4a:25:cb:53:08:15:38:4c:63:ba:
         af:8e:fc:ed:f3:e6:e3:f2:4b:fd:c8:5e:a6:98:03:73:07:71:
         d6:57:45:26:b3:ce:eb:8d:9b:6b:e2:07:88:d6:e0:ed:09:27:
         79:cd:d5:2f:e8:6f:d4:da:1f:60:04:49:8c:73:41:6a:43:c9:
         87:83:d0:e1:0c:8a:10:f5:9e:95:0b:dc:13:6a:9f:9f:1e:24:
         ba:47:87:12:c2:35:87:fe:ea:43:e5:ef:e5:ac:41:e0:48:3e:
         d1:53:61:a5:c1:30:98:84:28:e2:17:96:d8:a0:2e:65:60:27:
         d8:fc:8d:12:68:3b:66:36:a6:24:87:f3:80:6e:94:7f:f7:d3:
         f0:47:5b:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----