Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/IPWBNotkujLywt5X94TzhGvRM7g.cer
File:                     IPWBNotkujLywt5X94TzhGvRM7g.cer (raw, json)
Hash identifier:          plJD/3DVkOiJYOtO7oyz8CLCv51W20UGqXDNvPrbAjI=
Subject key identifier:   20:F5:81:36:8B:64:BA:32:F2:C2:DE:57:F7:84:F3:84:6B:D1:33:B8
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856C3F62C0EB3B094D9107C68167B709EE
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/3a/25356b-74a8-4484-b4e4-ffaf249c4d2f/1/IPWBNotkujLywt5X94TzhGvRM7g.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/3a/25356b-74a8-4484-b4e4-ffaf249c4d2f/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 07:32:51 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 193.163.94.0/24
                          IP: 2a11:1fc0::/29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6c:3f:62:c0:eb:3b:09:4d:91:07:c6:81:67:b7:09:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 07:32:51 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=20f581368b64ba32f2c2de57f784f3846bd133b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:61:10:fe:2c:70:d5:eb:60:47:88:2d:20:7a:
                    33:ae:24:34:e5:d8:b8:f5:97:6e:de:16:ec:5d:fe:
                    28:18:50:f7:81:54:f1:12:5b:e6:f9:88:ce:af:1d:
                    a4:f9:2e:33:59:e0:8f:8c:32:54:df:14:fc:d1:42:
                    b5:a1:71:7b:d2:47:ea:4e:c9:0f:8e:d6:53:2c:75:
                    b3:91:22:0d:7d:11:b2:97:ed:fb:79:05:a0:39:cd:
                    9a:73:f4:c8:71:cb:9c:b5:93:f8:9f:d6:66:8f:f8:
                    d4:a7:05:15:f6:62:e1:32:aa:4e:52:f3:18:83:56:
                    08:b5:91:8f:7f:b6:ec:0e:8b:ce:c8:b7:9b:2f:dd:
                    e0:fe:4c:58:8b:4f:72:c7:22:af:0d:cf:ba:f2:5c:
                    c5:a0:aa:89:b9:b6:b0:72:e8:be:a4:5e:c2:5a:37:
                    91:2d:8f:4b:eb:ac:b1:57:28:56:b5:76:80:a9:dc:
                    60:65:5b:44:35:a4:19:80:88:aa:b5:c5:35:ea:51:
                    07:c4:79:0e:b4:50:66:a7:be:53:50:ac:5d:54:31:
                    9c:85:2d:b1:ef:78:0a:60:99:15:38:8d:ab:28:cb:
                    25:69:6a:50:4d:38:fa:8f:66:03:d9:6d:b4:9e:98:
                    31:0e:64:7c:7f:a3:99:10:cf:37:75:37:37:0d:48:
                    a3:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:F5:81:36:8B:64:BA:32:F2:C2:DE:57:F7:84:F3:84:6B:D1:33:B8
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/25356b-74a8-4484-b4e4-ffaf249c4d2f/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/25356b-74a8-4484-b4e4-ffaf249c4d2f/1/IPWBNotkujLywt5X94TzhGvRM7g.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.163.94.0/24
                IPv6:
                  2a11:1fc0::/29

    Signature Algorithm: sha256WithRSAEncryption
         5a:e4:64:4f:eb:dc:68:71:42:50:5e:f4:49:b0:71:80:3d:7b:
         29:2e:e3:f8:3c:5f:59:c1:03:d8:0e:90:62:f6:06:62:d4:cb:
         fc:93:fc:b7:8f:56:34:d8:8b:60:bd:1d:c3:2f:10:47:d3:38:
         ec:c1:44:14:12:4b:15:3e:b5:e5:8a:17:46:c8:cb:28:f9:53:
         c8:4b:83:81:65:7f:d1:b2:8e:a0:57:74:b9:48:7f:75:f0:a2:
         ae:13:42:2c:e4:fe:6f:3f:81:53:be:9a:45:70:5d:66:0c:d8:
         1e:57:b1:54:fb:9c:36:f6:69:18:0f:ce:0f:04:24:ac:db:81:
         be:62:02:eb:a1:da:d7:31:eb:10:8e:0c:f4:5a:51:bf:e8:02:
         a4:77:24:89:38:91:2c:a5:bc:6a:79:57:2d:e7:95:f0:c9:b8:
         61:2f:69:0b:4e:ca:e8:da:5e:95:6d:6d:52:27:32:f3:7f:2b:
         b3:a5:a3:14:46:91:c6:ff:dd:47:5e:10:fa:95:21:f8:cc:31:
         fe:5f:e0:17:33:70:2d:00:10:74:77:c7:08:97:e2:fd:ba:fb:
         06:dc:32:52:31:79:fe:ed:71:fc:7a:e0:7e:c2:9b:8b:1d:a6:
         c7:92:e4:cd:5e:3e:f7:5d:0d:33:9b:b5:9f:37:c8:ba:37:cb:
         49:7e:42:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----