Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/_WDb2aY-HTuOy1wLP8txokmdhr0.cer
File:                     _WDb2aY-HTuOy1wLP8txokmdhr0.cer (raw, json)
Hash identifier:          2x5O20Dl9/mnRHKi2N3gjzbdvvXEpbI5d1zg1HxKBP0=
Subject key identifier:   FD:60:DB:D9:A6:3E:1D:3B:8E:CB:5C:0B:3F:CB:71:A2:49:9D:86:BD
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856FB09CCA65C4E0C58E177A0478A20DB5
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/7f/1980c3-aec1-485b-82a0-d6e869dcd558/1/_WDb2aY-HTuOy1wLP8txokmdhr0.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/7f/1980c3-aec1-485b-82a0-d6e869dcd558/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 23:35:23 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 130.193.0.0/24

Validation:               Failed, certificate revoked on Mon 18 Sep 2023 12:52:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:b0:9c:ca:65:c4:e0:c5:8e:17:7a:04:78:a2:0d:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 23:35:23 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=fd60dbd9a63e1d3b8ecb5c0b3fcb71a2499d86bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:33:19:7a:85:fe:2b:3b:60:3e:97:c8:15:a1:
                    83:1c:c5:5b:8e:90:2f:00:c8:8c:c1:a3:8f:e9:8d:
                    26:bc:e5:b7:50:40:2a:91:36:4d:19:6d:8e:21:bd:
                    d2:e5:68:19:0f:82:f3:ec:cd:1c:3b:38:f9:24:77:
                    bb:8b:64:b8:23:6c:ea:5c:9e:d8:11:2a:12:13:60:
                    f8:f5:62:cf:c2:64:69:5e:de:75:00:82:0f:e9:d0:
                    79:d0:cd:14:99:2e:39:c1:7a:5d:24:46:a9:c4:3c:
                    f8:35:59:a7:b0:2d:b9:d8:0f:2d:48:3a:a3:2a:fa:
                    86:92:40:b2:54:cd:7d:2b:18:1e:0f:23:a4:50:9b:
                    83:d9:f4:bb:3d:1f:83:09:27:cc:86:aa:b4:01:af:
                    ae:e4:74:d7:16:8b:17:33:3c:73:38:02:87:b1:22:
                    59:b3:50:3d:40:71:50:99:e1:8e:b8:05:eb:60:44:
                    84:3b:50:45:c0:4e:91:9e:18:20:a5:5f:c2:d6:50:
                    93:97:9d:53:c5:df:58:91:fc:62:92:b9:3f:42:18:
                    a3:1c:63:df:f1:92:fb:fa:f4:42:8c:e8:95:92:fc:
                    ae:f5:54:19:68:2c:bd:31:aa:98:5a:8b:95:3a:e3:
                    fd:de:65:0c:1c:d6:85:44:4b:69:ba:e3:91:f5:12:
                    5f:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:60:DB:D9:A6:3E:1D:3B:8E:CB:5C:0B:3F:CB:71:A2:49:9D:86:BD
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/1980c3-aec1-485b-82a0-d6e869dcd558/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/1980c3-aec1-485b-82a0-d6e869dcd558/1/_WDb2aY-HTuOy1wLP8txokmdhr0.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.193.0.0/24

    Signature Algorithm: sha256WithRSAEncryption
         95:fd:02:47:dc:70:e3:77:33:b9:ec:34:91:bf:77:f6:c9:da:
         2c:76:2d:d8:44:2c:6a:d5:42:e9:dd:eb:83:2c:29:7a:b1:d5:
         e9:9e:09:0e:d3:57:7b:ec:ef:87:51:01:0c:18:8c:ca:11:e1:
         24:4b:fe:81:b6:ee:17:9e:6d:20:6c:73:cc:02:75:08:48:bd:
         df:41:f9:ac:49:e9:0b:b5:73:07:55:db:3b:d3:82:7d:35:7a:
         e1:e5:41:67:f0:95:88:47:53:cd:10:b5:b6:92:56:8c:e6:52:
         35:5f:95:d2:c4:67:be:23:97:5c:15:78:35:80:bd:dc:b5:cc:
         e9:5b:dc:69:84:e3:29:0e:85:a5:4d:72:d4:80:7c:00:e1:16:
         7e:51:01:c0:b1:0a:7f:c7:54:2e:1c:18:46:1c:29:79:d4:df:
         58:63:19:5b:35:32:07:7b:10:cb:a9:ad:a9:33:77:cd:d0:a5:
         ba:28:f9:37:c4:45:46:c7:6c:56:31:9e:8e:a9:69:00:2e:e6:
         9f:41:05:e2:57:9c:17:8f:bd:da:eb:35:98:71:41:0b:62:41:
         19:d2:2c:f3:30:e6:f6:45:e2:a1:9e:af:89:80:1f:36:76:99:
         61:d9:67:f2:d1:20:1b:9c:b8:a2:74:67:7b:3f:76:2c:70:92:
         21:6f:b1:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----