Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Wws-T78jbPFlG6c02htH9i9KukQ.cer
File:                     Wws-T78jbPFlG6c02htH9i9KukQ.cer (raw, json)
Hash identifier:          P23fPTRjGFXjqO6VKG6SMd6Ke4woGr5f8/50vSA3qD4=
Subject key identifier:   5B:0B:3E:4F:BF:23:6C:F1:65:1B:A7:34:DA:1B:47:F6:2F:4A:BA:44
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856F41AAA60AE18F66D444D6DAACE3EF2E
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/1a/327687-a356-49e1-8f8e-e4f625842d21/1/Wws-T78jbPFlG6c02htH9i9KukQ.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/1a/327687-a356-49e1-8f8e-e4f625842d21/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 21:34:12 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 46.226.125.0/24
                          IP: 2a11:a900::/29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:41:aa:a6:0a:e1:8f:66:d4:44:d6:da:ac:e3:ef:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 21:34:12 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=5b0b3e4fbf236cf1651ba734da1b47f62f4aba44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:2f:6f:dc:bd:eb:18:be:ed:e3:48:2b:b2:7e:
                    18:c5:59:3b:40:37:e8:d9:23:5a:94:11:72:31:ad:
                    4b:7d:0a:24:a4:96:a5:ae:c5:c4:7e:e9:6c:55:f9:
                    0f:33:be:a9:a7:6d:ba:93:75:08:ce:13:2f:5c:48:
                    90:5f:67:6f:1e:8f:99:e9:88:cd:31:dd:b2:1f:b5:
                    f5:fb:01:f0:fd:28:64:e9:32:9d:3a:2b:5e:43:d3:
                    a0:80:04:e5:1c:98:a1:1e:30:25:9d:c0:18:42:d1:
                    43:9e:84:15:71:c6:90:a3:fd:19:1e:bd:c8:f0:8b:
                    ad:a2:b5:4a:13:08:90:64:0f:a5:f0:76:b6:08:f7:
                    82:bf:60:56:bb:05:54:b1:13:c7:96:40:1d:53:a0:
                    b6:9e:55:47:ba:a0:0d:b7:48:15:e8:1b:9e:1f:17:
                    13:f6:3c:2a:72:89:c2:4f:72:c3:41:2f:3d:ff:22:
                    05:e6:17:76:08:46:99:10:57:fe:4a:b1:79:7e:30:
                    02:87:10:e3:e1:bd:a2:3d:ab:62:e6:c6:15:e6:a5:
                    f4:1c:9c:dc:f6:d1:86:50:85:d4:0d:b2:1f:b5:8e:
                    7c:6d:c6:48:df:a5:46:f5:00:86:4f:2c:c1:d2:ed:
                    96:b4:ba:bf:c0:da:8d:df:85:98:b5:35:88:a9:a4:
                    4f:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:0B:3E:4F:BF:23:6C:F1:65:1B:A7:34:DA:1B:47:F6:2F:4A:BA:44
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/327687-a356-49e1-8f8e-e4f625842d21/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/327687-a356-49e1-8f8e-e4f625842d21/1/Wws-T78jbPFlG6c02htH9i9KukQ.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.226.125.0/24
                IPv6:
                  2a11:a900::/29

    Signature Algorithm: sha256WithRSAEncryption
         6f:3a:7d:38:3d:b6:1d:54:18:0c:16:e5:de:f5:45:8e:4b:aa:
         04:6b:76:64:13:06:37:66:7f:4b:f9:47:c1:41:8b:97:52:ab:
         b2:82:25:7b:fd:73:0a:5c:aa:39:83:4c:77:c9:52:8f:f4:44:
         0d:88:ef:a8:6c:fe:28:0e:83:41:65:6e:e8:ef:dc:36:70:a6:
         95:5b:dd:92:7d:33:54:5b:b5:4d:d9:83:4b:2c:66:a5:92:62:
         1a:76:ee:38:04:46:55:13:54:4d:41:1e:f1:f5:25:0b:d0:63:
         ef:f3:16:6b:31:3e:d7:1e:86:43:e2:2f:72:79:37:40:94:f1:
         68:8c:e8:43:09:cd:cb:d8:71:be:62:24:43:4c:97:8b:8b:31:
         29:d6:1f:c9:ff:3f:69:23:1d:06:cc:15:51:e3:7a:21:a3:7a:
         80:39:25:5d:eb:e5:d4:42:46:2e:d3:94:b7:e6:a9:ee:08:ad:
         87:a4:a7:4e:f4:be:1d:5d:5e:30:64:5d:04:fd:69:01:dc:4a:
         c4:db:aa:28:d9:29:77:16:6a:bc:c1:76:df:dd:df:be:79:cc:
         1d:64:08:e1:c2:9a:b4:30:3c:27:63:57:99:cd:3b:d2:0d:3a:
         a6:4c:6d:f1:b2:10:74:a3:d7:85:56:04:71:6d:b0:a6:89:98:
         b0:94:fb:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----