Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/WwFrAHEUKca8MbA4M_L14U2NMEk.cer
File:                     WwFrAHEUKca8MbA4M_L14U2NMEk.cer (raw, json)
Hash identifier:          FO8xqkR083Iv3u+ivoJfJZvpfXbW5HEjC2qOEKQZX20=
Subject key identifier:   5B:01:6B:00:71:14:29:C6:BC:31:B0:38:33:F2:F5:E1:4D:8D:30:49
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856CAC393CC30E1EF399383DB709853C29
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/2e/d0de72-ebc2-4dce-8af8-4ab3350709e9/1/WwFrAHEUKca8MbA4M_L14U2NMEk.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/2e/d0de72-ebc2-4dce-8af8-4ab3350709e9/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 09:31:44 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 45.153.212.0/22

Validation:               Failed, certificate revoked on Mon 18 Dec 2023 13:09:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6c:ac:39:3c:c3:0e:1e:f3:99:38:3d:b7:09:85:3c:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 09:31:44 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=5b016b00711429c6bc31b03833f2f5e14d8d3049
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:ae:0b:e7:45:e6:53:f5:97:e2:f1:ac:bf:6d:
                    b5:69:b5:50:11:10:0b:5a:5d:78:4a:c6:cf:76:26:
                    9b:a5:0e:e6:85:cb:ae:a3:bf:75:84:b0:a7:ed:a4:
                    e5:34:16:aa:fb:ea:af:ed:de:bb:f4:7d:fa:bc:c2:
                    f3:59:5d:a7:26:b8:a3:f6:0d:ba:c5:97:8e:6f:69:
                    8b:eb:0d:d0:5e:c8:16:25:bd:86:4b:7f:bf:d0:63:
                    b2:f6:d9:b8:67:8c:da:75:ff:11:f3:b5:05:86:8d:
                    67:5c:21:d6:90:59:4e:c2:f7:38:5b:2b:e0:f1:03:
                    3f:d4:6a:47:cb:ff:22:2a:66:2a:c6:6d:b5:e9:96:
                    9a:c5:dc:f1:3d:dc:8d:82:52:43:6e:7a:6a:40:af:
                    15:04:c9:09:e9:a0:59:12:06:d8:15:e7:a6:42:d2:
                    01:f9:19:ed:23:59:65:fa:41:43:6c:e7:63:ce:d3:
                    16:5c:9e:08:3d:8a:8d:a0:39:b1:b1:91:12:c3:16:
                    81:fd:34:59:63:51:40:5a:c0:57:e6:20:f9:b8:04:
                    33:ff:85:b9:27:14:9c:8e:f3:aa:c7:df:1c:54:ea:
                    e9:86:35:77:3e:70:a8:1a:92:c1:fa:a5:1f:cd:cb:
                    a6:c7:34:99:7f:2b:f6:f9:73:9a:28:b6:bf:c5:f3:
                    ef:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:01:6B:00:71:14:29:C6:BC:31:B0:38:33:F2:F5:E1:4D:8D:30:49
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d0de72-ebc2-4dce-8af8-4ab3350709e9/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d0de72-ebc2-4dce-8af8-4ab3350709e9/1/WwFrAHEUKca8MbA4M_L14U2NMEk.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.153.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         27:4f:f8:92:ed:9d:9d:8d:03:b4:59:4b:bd:05:3b:a1:9e:a5:
         7d:7a:c3:b4:fa:ab:e0:17:64:e0:94:8f:15:53:b8:ab:a3:a9:
         1d:a4:c3:5d:c6:70:48:24:c8:37:6e:73:0c:fb:71:24:32:b8:
         74:65:17:02:67:74:51:ef:75:8e:9d:46:29:90:30:b9:19:3a:
         fc:e8:7e:e4:1a:dc:3b:f0:bb:90:db:9d:14:2a:cc:40:c9:e7:
         fe:73:4f:6b:77:47:13:46:32:f6:d9:4f:6b:a9:03:e5:a3:47:
         01:0f:17:0f:f7:5d:11:88:ba:c6:44:4e:3f:94:37:91:7e:42:
         3e:54:01:c0:96:21:7e:59:c1:30:df:34:d2:3f:d6:1f:ab:10:
         ea:4a:34:3f:07:9d:78:7d:5a:c2:ef:d3:16:c6:b7:08:04:ee:
         53:71:59:98:c9:eb:57:8f:25:4c:ec:b9:7b:d2:7e:42:5e:c6:
         b3:4e:0d:73:ea:79:86:28:4f:f3:eb:0f:ba:4a:c1:36:73:43:
         90:61:2f:39:a6:1f:88:22:13:3a:88:68:a4:e0:8c:26:a5:e2:
         97:3d:86:0a:4e:63:4a:52:99:b3:13:35:26:2e:67:7b:bf:72:
         67:96:60:78:18:6f:8a:92:76:7e:b6:8c:53:40:f2:da:ba:4f:
         b7:97:df:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----