Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/SCW9ns18Fk173C93DfwlfJ0Q_Gs.cer
File:                     SCW9ns18Fk173C93DfwlfJ0Q_Gs.cer (raw, json)
Hash identifier:          pSNMi3muIX39enE1TD/UU5ctXGj5moQEKjGY8zqBmIs=
Subject key identifier:   48:25:BD:9E:CD:7C:16:4D:7B:DC:2F:77:0D:FC:25:7C:9D:10:FC:6B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856E65DD411E45BD96ED224141F2CD2060
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/7f/96889f-ed6d-467c-80e1-ae36f9e381a1/1/SCW9ns18Fk173C93DfwlfJ0Q_Gs.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/7f/96889f-ed6d-467c-80e1-ae36f9e381a1/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 17:34:07 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 188.244.116.0/24

Validation:               Failed, certificate revoked on Wed 06 Dec 2023 14:10:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6e:65:dd:41:1e:45:bd:96:ed:22:41:41:f2:cd:20:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 17:34:07 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=4825bd9ecd7c164d7bdc2f770dfc257c9d10fc6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:99:a9:f7:3a:29:6f:13:67:e1:2e:c6:cb:8e:
                    f2:5a:27:4d:6a:0c:19:ec:26:74:c3:50:f1:32:13:
                    27:3b:54:68:6c:f0:09:3c:c5:63:00:ce:a8:73:e7:
                    c1:07:e9:ea:df:d6:d7:0a:01:29:6b:9d:1f:8d:d9:
                    99:c0:9c:55:b2:db:41:3e:e4:63:24:1a:8f:d7:ef:
                    50:4b:88:87:82:96:e6:bf:70:5b:cb:31:65:ac:a4:
                    51:f6:93:79:29:cb:9e:40:15:f9:a2:20:5b:8c:e1:
                    8d:5b:9f:29:49:41:9a:33:9b:db:e9:05:fa:f1:36:
                    31:b2:24:ec:e4:07:9d:1a:af:aa:c5:0e:3d:4b:9d:
                    fe:04:bc:7b:c2:ee:f4:22:e2:b5:fc:bd:d5:07:04:
                    0b:98:84:64:10:7c:15:8e:58:f6:14:2f:ae:6b:c1:
                    a9:f5:96:3b:31:c1:59:4e:11:a2:8e:66:72:ed:7a:
                    21:6c:28:87:67:85:43:01:06:d5:6c:5c:61:45:60:
                    92:c5:e7:02:3d:0c:7f:e9:e8:48:47:e9:cd:59:77:
                    5a:f1:59:ab:db:27:57:71:c4:91:ba:67:67:c2:ba:
                    75:38:67:f5:35:97:bc:20:9c:d1:bc:99:ff:97:54:
                    9b:af:9c:29:22:d8:41:c9:14:fc:59:6b:ad:fc:b1:
                    d9:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:25:BD:9E:CD:7C:16:4D:7B:DC:2F:77:0D:FC:25:7C:9D:10:FC:6B
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/96889f-ed6d-467c-80e1-ae36f9e381a1/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/96889f-ed6d-467c-80e1-ae36f9e381a1/1/SCW9ns18Fk173C93DfwlfJ0Q_Gs.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  188.244.116.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0c:fa:b4:5c:f5:fb:78:b0:7b:1a:b8:e2:b3:51:2d:b4:5c:24:
         fb:dc:e8:19:ff:ea:99:e1:b3:c6:fc:15:e0:64:a8:f5:9b:c4:
         ca:fa:e6:4c:8a:24:5a:c9:63:c9:5e:7c:c7:84:72:bd:dc:62:
         54:3f:a0:d1:85:d3:d6:19:aa:2d:79:02:95:47:a3:18:b6:68:
         32:a7:4f:3d:9a:1f:22:6a:2b:d9:bb:0d:9f:2b:af:76:65:c0:
         98:97:58:a9:12:27:10:34:8f:78:60:53:30:6e:66:c5:c4:b3:
         95:ad:81:3f:da:be:21:bf:ae:b5:73:4f:98:a7:b8:b6:72:89:
         66:50:4b:c9:e6:fc:e8:4a:5d:14:aa:7b:3a:90:f7:3c:70:a4:
         13:d8:6b:ae:70:1b:2c:6d:68:f5:5f:26:d7:86:ff:3e:4a:21:
         95:c2:d9:85:fc:55:06:6d:a6:63:b4:74:03:94:73:49:cc:d3:
         1f:67:42:aa:b8:51:ec:44:44:79:bb:e3:c7:15:79:59:54:83:
         c0:b1:01:97:00:a3:93:98:b5:b8:dd:c2:05:8b:be:3d:a6:4d:
         ff:82:96:09:b3:95:e4:81:8f:c8:5f:0e:51:f4:5b:b5:5c:52:
         b8:72:7a:ce:15:11:7a:62:e7:f4:e4:41:76:ba:e0:53:10:f9:
         d7:55:c5:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----