Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Iwfnl0-4MSouaqqZb174R0pTEHw.cer
File:                     Iwfnl0-4MSouaqqZb174R0pTEHw.cer (raw, json)
Hash identifier:          PrQyGlvpW/JFW+M04+hudNzfOZUm1MWKYE1ZCADlmC4=
Subject key identifier:   23:07:E7:97:4F:B8:31:2A:2E:6A:AA:99:6F:5E:F8:47:4A:53:10:7C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0185701DD6F9FA696232A70E873B00AB36E9
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/5b/37cde7-e98c-4f26-9dd3-434f74d499d7/1/Iwfnl0-4MSouaqqZb174R0pTEHw.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/5b/37cde7-e98c-4f26-9dd3-434f74d499d7/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 02 Jan 2023 01:34:41 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 146.19.189.0/24
                          IP: 2a12:f700::/29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:1d:d6:f9:fa:69:62:32:a7:0e:87:3b:00:ab:36:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 01:34:41 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=2307e7974fb8312a2e6aaa996f5ef8474a53107c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:c0:f3:a2:67:7d:1a:9d:98:7c:f7:13:6a:93:
                    23:bf:c0:f4:88:54:f9:60:8c:36:27:9d:9d:74:d9:
                    e3:b6:2c:86:04:9f:e4:39:38:31:ed:07:04:65:f5:
                    36:04:3a:e6:07:bc:a5:39:7b:98:50:44:b4:ad:46:
                    2a:e4:ef:b2:9f:a6:13:c4:63:ee:e2:2b:67:ce:bd:
                    75:7e:5c:17:1e:2b:ca:32:08:24:2d:50:79:56:e2:
                    e8:10:dd:1f:97:bf:28:f2:b7:cb:ff:ed:db:09:39:
                    bb:cb:15:9a:f8:d4:07:8c:8d:5e:ec:9f:71:62:a7:
                    41:91:41:23:23:1d:d8:7f:56:0a:33:21:0b:94:57:
                    20:a0:a8:17:46:7b:75:ec:55:5d:99:31:9e:7b:d8:
                    69:b1:fd:d4:77:c5:fd:6e:48:a5:81:2a:0f:a4:07:
                    7d:ae:26:bd:86:82:35:79:08:58:7b:52:b6:66:51:
                    a3:46:ba:5e:7a:31:e9:15:4b:aa:4b:41:bc:20:1f:
                    c2:6e:df:99:51:9c:41:51:fa:86:78:19:da:70:8c:
                    e4:aa:76:c2:c9:34:4a:5f:a3:94:aa:b5:b2:95:3c:
                    00:1b:0c:ce:5f:e9:00:18:fc:e1:35:ea:20:2d:fa:
                    f2:5b:c0:b0:32:dd:9f:18:fe:85:8f:7d:2f:52:f5:
                    7d:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:07:E7:97:4F:B8:31:2A:2E:6A:AA:99:6F:5E:F8:47:4A:53:10:7C
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/37cde7-e98c-4f26-9dd3-434f74d499d7/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/37cde7-e98c-4f26-9dd3-434f74d499d7/1/Iwfnl0-4MSouaqqZb174R0pTEHw.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.19.189.0/24
                IPv6:
                  2a12:f700::/29

    Signature Algorithm: sha256WithRSAEncryption
         69:e2:61:0f:1c:80:cc:6f:5b:cf:56:16:ee:79:ea:17:5c:3f:
         61:a4:a7:42:3b:57:54:e6:63:d1:57:63:f0:e6:04:f4:e1:ed:
         43:b3:95:8f:36:5b:f4:47:26:64:13:ef:c9:e8:79:d4:13:59:
         ee:8e:0a:6a:06:a0:60:bb:a2:bc:10:ff:ee:ed:fa:05:e6:4d:
         de:01:45:da:86:05:1e:cc:11:f6:41:74:40:f3:18:15:68:ee:
         7c:f7:80:2e:0d:f6:91:02:85:b9:93:a0:59:e2:08:d1:0d:ff:
         fe:a0:f2:b9:5f:a4:5f:9e:45:41:f3:d2:d7:66:16:61:2e:8f:
         09:c8:85:ba:e7:40:92:a9:ca:8d:c4:b1:84:61:29:35:8f:1b:
         9d:65:83:2e:fd:35:b7:e1:a6:82:8c:ff:3b:b8:61:68:15:dc:
         b5:42:c7:a3:94:57:d6:54:5c:96:f8:84:95:ce:7c:18:68:60:
         2d:f9:f2:0c:9f:6d:0f:e7:e4:99:fa:77:a6:b0:6b:7d:21:17:
         40:41:48:45:be:04:53:3c:10:74:8d:67:b5:f7:25:fb:02:46:
         02:1d:a0:73:8c:c3:c6:c6:d8:49:f3:07:e8:25:63:2c:db:c3:
         ff:5c:b4:51:26:83:49:89:c0:4a:8c:a2:14:a7:f2:a4:2d:70:
         b4:e8:f6:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----