Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/W8lpASN89hqtC3k7cl74vQ5ek3s.cer
File:                     W8lpASN89hqtC3k7cl74vQ5ek3s.cer (raw, json)
Hash identifier:          hlT1vvoJ2N6RUBEYx5xQjtOXZfBGuTNSXnJ/XuYtkgs=
Subject key identifier:   5B:C9:69:01:23:7C:F6:1A:AD:0B:79:3B:72:5E:F8:BD:0E:5E:93:7B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0185701D60B4CAA2F327723FF0E64C83D14E
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/9e/3aed9d-4a04-40a8-824d-248d2050e039/1/W8lpASN89hqtC3k7cl74vQ5ek3s.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/9e/3aed9d-4a04-40a8-824d-248d2050e039/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 02 Jan 2023 01:34:11 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 62.106.81.0/24
                          IP: 2a11:8dc0::/29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:1d:60:b4:ca:a2:f3:27:72:3f:f0:e6:4c:83:d1:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 01:34:11 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=5bc96901237cf61aad0b793b725ef8bd0e5e937b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:fb:5d:a9:e8:41:58:4c:46:d2:e1:69:5e:58:
                    a2:92:d9:f3:ba:bf:d1:d0:93:c7:d3:79:de:8f:2d:
                    ea:d2:d4:81:a6:d5:8f:24:d9:f6:b2:38:f6:15:41:
                    cd:0c:83:e2:c3:12:02:64:24:cb:31:84:9c:ba:3b:
                    84:9b:2c:c3:ef:37:d7:34:ee:c5:f9:b1:bf:a4:27:
                    90:a1:dd:da:89:bd:38:83:e6:64:10:a7:fe:57:8f:
                    a3:1d:59:80:e4:3b:57:e9:54:24:63:91:2d:3b:39:
                    04:eb:78:95:4f:eb:8f:bf:c7:a4:7a:85:da:27:2b:
                    c1:cd:45:33:64:59:70:9c:d2:af:1a:a6:9a:17:e8:
                    ec:f3:21:dc:24:52:8a:bd:9a:75:98:f1:b2:e5:cf:
                    b7:60:82:45:17:8e:db:17:b4:d4:b8:f7:c2:c2:7c:
                    93:d3:e4:38:df:82:12:1f:d0:35:63:76:71:70:8f:
                    6e:3b:54:ca:af:61:9d:b2:86:72:82:b7:7b:7c:05:
                    68:1f:38:bc:8f:34:18:c0:37:98:2a:24:ec:e0:0c:
                    a6:20:34:de:db:39:ff:98:04:cf:1b:ab:7a:6c:af:
                    cd:55:e9:1d:e1:84:b8:ff:41:5d:a0:05:5e:e4:22:
                    43:b5:6a:0b:34:3a:d7:f7:64:e1:7a:88:a6:57:75:
                    6f:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:C9:69:01:23:7C:F6:1A:AD:0B:79:3B:72:5E:F8:BD:0E:5E:93:7B
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/3aed9d-4a04-40a8-824d-248d2050e039/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/3aed9d-4a04-40a8-824d-248d2050e039/1/W8lpASN89hqtC3k7cl74vQ5ek3s.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.106.81.0/24
                IPv6:
                  2a11:8dc0::/29

    Signature Algorithm: sha256WithRSAEncryption
         74:76:2a:86:0c:fa:5e:44:dc:86:24:6b:9d:37:dc:da:0e:eb:
         eb:e2:aa:2b:1e:b1:94:06:42:6b:1a:b4:89:8b:59:57:b6:8e:
         8a:c7:80:21:62:40:c5:5e:d8:2b:4d:b7:78:92:d9:21:a4:08:
         48:a6:e5:d9:e1:75:32:76:0b:c7:8c:d5:45:b1:bd:e9:43:cd:
         10:48:36:da:3c:7d:67:9d:1a:74:d9:dd:2b:53:27:6e:83:0f:
         ec:94:13:34:4a:f9:4b:d2:e3:5b:47:d1:48:86:20:6c:f8:a2:
         12:9a:6e:1c:b1:ae:f7:ab:40:ee:63:ca:78:05:10:83:a3:66:
         58:bc:f4:4e:65:09:0b:d1:14:2e:51:3a:71:9f:55:60:a0:d0:
         a7:86:98:18:74:c5:34:f5:e5:4a:f8:18:f0:6e:0f:38:61:d9:
         a7:42:a4:e2:d1:71:27:da:27:b3:99:99:4b:6c:27:de:72:94:
         d9:20:70:f0:d1:2d:87:6c:cb:81:98:8b:01:ef:72:85:86:01:
         b6:9f:9b:7e:75:fc:96:2e:91:c9:4b:24:07:d5:31:eb:52:28:
         7b:8c:99:d2:f7:23:19:50:68:1f:30:98:a0:c4:98:51:09:4d:
         36:28:ec:64:9b:69:ae:a9:d4:36:99:45:e1:20:6e:10:a9:31:
         ad:03:02:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----