Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/WzZ0J1oWehM5Hxy3ZMj1xPGVgNE.cer
File:                     WzZ0J1oWehM5Hxy3ZMj1xPGVgNE.cer (raw, json)
Hash identifier:          BCX+72aoOgDpMaEo8K96UBn+cE2P37CFSCWoEBdt+wQ=
Subject key identifier:   5B:36:74:27:5A:16:7A:13:39:1F:1C:B7:64:C8:F5:C4:F1:95:80:D1
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018571D590A4897D903034286EB9F15D24E9
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/32/5531eb-dc9a-42ad-a5d6-43718f422b1f/1/WzZ0J1oWehM5Hxy3ZMj1xPGVgNE.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/32/5531eb-dc9a-42ad-a5d6-43718f422b1f/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 02 Jan 2023 09:34:59 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 185.200.200.0/22

Validation:               Failed, certificate revoked on Wed 12 Jul 2023 09:47:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:71:d5:90:a4:89:7d:90:30:34:28:6e:b9:f1:5d:24:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 09:34:59 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=5b3674275a167a13391f1cb764c8f5c4f19580d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:64:3a:2c:82:4d:20:13:00:c5:61:e7:8f:6b:
                    32:5e:59:9f:d6:a8:1c:3d:2c:41:2f:28:5d:d9:6c:
                    ac:a7:02:32:ba:0b:7b:99:8a:3c:2c:6d:9b:34:2c:
                    ee:5e:cd:80:fd:93:da:4e:a8:02:dd:0c:a9:1c:92:
                    99:34:48:5d:15:de:44:46:6c:90:95:0a:99:26:bf:
                    88:0c:59:0d:74:11:fe:94:7e:2c:01:97:b6:ac:6e:
                    f2:12:30:cf:a5:de:da:85:9b:a7:99:7c:6b:df:5f:
                    46:e7:6d:bc:7e:61:bf:39:74:e1:eb:43:bc:e5:6c:
                    18:df:76:93:a9:7f:b6:50:78:8b:94:e3:dd:79:d5:
                    7e:f8:a0:2b:db:1b:78:8f:2f:30:cf:72:42:32:b8:
                    8a:09:a7:ad:3f:38:2d:6d:f6:1a:3f:0a:f2:d2:bf:
                    fc:d8:18:35:de:ca:89:f8:4b:1b:48:b4:3e:c3:cd:
                    00:cb:04:55:ca:41:c8:94:35:f2:a6:0d:61:d7:96:
                    ee:95:2a:19:7b:ce:9e:a7:74:eb:01:60:bd:10:53:
                    6a:68:d3:ad:91:4b:2e:cf:c2:3b:9f:0c:64:f8:4a:
                    41:dc:43:cf:64:a7:6c:9b:b1:a2:34:4f:4c:05:bd:
                    eb:66:9c:85:ee:30:2d:7d:ec:2a:ac:53:2a:f7:f3:
                    bf:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:36:74:27:5A:16:7A:13:39:1F:1C:B7:64:C8:F5:C4:F1:95:80:D1
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/5531eb-dc9a-42ad-a5d6-43718f422b1f/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/5531eb-dc9a-42ad-a5d6-43718f422b1f/1/WzZ0J1oWehM5Hxy3ZMj1xPGVgNE.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.200.200.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9e:54:aa:e2:5d:a0:ec:7c:cb:69:75:0d:f9:ca:59:92:3e:23:
         9f:c6:11:30:0d:b4:3b:b1:80:48:43:a6:5a:53:b5:e0:f0:b9:
         cc:24:e7:78:12:5f:40:7e:a4:3b:bb:a6:64:a2:80:23:cf:e9:
         ab:67:d9:43:62:eb:08:d4:57:c5:e8:4a:96:9c:c4:0a:40:7a:
         bb:4c:e1:b7:14:9f:c5:69:ff:92:d5:e9:bb:ec:cb:e7:4f:c3:
         72:70:70:03:08:de:cb:08:89:bc:d9:58:1b:f6:f0:ea:45:b1:
         3a:d7:49:3e:f8:64:19:c9:a9:72:a3:66:5a:04:1a:ff:67:a0:
         43:fb:be:e8:a8:95:cd:09:e3:35:b6:42:f0:86:a8:ff:93:68:
         d4:78:0e:e5:10:ae:78:8d:58:10:f3:17:eb:75:23:62:29:69:
         c7:bf:3c:dc:01:f5:2a:29:db:4d:20:0f:e4:bc:bf:26:d9:2b:
         dc:44:01:6a:33:f0:82:4e:c6:5a:15:dd:c3:16:e4:34:04:1f:
         0e:46:84:c7:b5:ce:f1:f4:2c:ce:b4:56:b5:49:e0:cc:19:1c:
         15:eb:85:24:17:42:4a:b6:83:0b:27:c9:08:a9:99:d3:d7:17:
         44:af:65:4e:f5:be:9a:5f:b4:f9:00:c7:0f:d0:d2:2d:c4:c1:
         ac:e8:94:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----