Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bw16DrXKVJWQpAa8aT3x6NLLrgQ.cer
File:                     bw16DrXKVJWQpAa8aT3x6NLLrgQ.cer (raw, json)
Hash identifier:          RnlaKhM3jXetIUNLOkuc7x9N78CRhhocUxALzdsEwck=
Subject key identifier:   6F:0D:7A:0E:B5:CA:54:95:90:A4:06:BC:69:3D:F1:E8:D2:CB:AE:04
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856D89A566EE898D14E3455CB8A9D87B48
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/31/b55c02-347b-42a8-96ae-d179053d8434/1/bw16DrXKVJWQpAa8aT3x6NLLrgQ.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/31/b55c02-347b-42a8-96ae-d179053d8434/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 13:33:35 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 185.99.20.0/24
                          IP: 2a0d:be00::/29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6d:89:a5:66:ee:89:8d:14:e3:45:5c:b8:a9:d8:7b:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 13:33:35 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=6f0d7a0eb5ca549590a406bc693df1e8d2cbae04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:22:23:7f:66:19:35:14:57:bf:ca:41:7f:8d:
                    fa:fe:8c:3b:66:2a:67:e9:25:c1:83:41:94:bc:c1:
                    cf:d1:94:48:da:10:12:e6:33:d9:d5:be:cb:87:5a:
                    5b:fd:d0:e3:d9:7f:bc:a4:9f:9f:fe:f7:11:81:6a:
                    37:08:24:6e:65:d3:90:7f:fe:34:60:9d:d8:4c:a3:
                    f7:1e:46:7c:1c:9b:a4:fe:ba:1f:5e:1d:b7:55:92:
                    01:66:dc:5e:21:30:67:51:77:c0:8a:90:58:4d:80:
                    b1:cc:98:ad:f8:59:59:31:8d:81:70:4c:e0:56:82:
                    86:ce:6d:3c:16:9e:ac:c4:cb:69:ed:e1:e4:e6:fc:
                    15:52:e9:17:ea:9a:f0:c9:47:ec:84:68:be:93:21:
                    ce:09:28:7c:1b:36:26:06:48:da:df:2b:d2:d8:f1:
                    6c:dc:31:91:d9:1d:c8:13:1f:1a:21:50:0a:96:80:
                    8b:e6:17:be:ed:6e:a2:e8:55:f2:29:0f:b0:b6:1b:
                    34:88:1e:fb:e2:bb:59:12:69:c3:d9:8f:81:f3:36:
                    d6:1d:23:dd:1b:ad:f7:f1:88:f8:d7:90:58:fc:64:
                    82:78:64:27:98:4d:f4:08:ec:50:81:4e:f9:c4:9a:
                    90:b3:62:fc:a0:95:ab:71:51:f7:ff:a2:76:6c:c0:
                    a5:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:0D:7A:0E:B5:CA:54:95:90:A4:06:BC:69:3D:F1:E8:D2:CB:AE:04
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/b55c02-347b-42a8-96ae-d179053d8434/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/b55c02-347b-42a8-96ae-d179053d8434/1/bw16DrXKVJWQpAa8aT3x6NLLrgQ.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.99.20.0/24
                IPv6:
                  2a0d:be00::/29

    Signature Algorithm: sha256WithRSAEncryption
         70:11:15:0f:9c:e2:67:45:dc:40:14:04:48:6f:c8:a4:48:70:
         2f:15:ff:54:13:05:cb:46:e2:1c:da:9c:06:49:88:fe:cf:7f:
         c2:ad:68:ba:34:6b:7b:34:df:77:c4:c7:0f:79:42:90:88:b3:
         ed:4d:91:ed:5a:e8:ed:c7:43:41:62:1c:4c:85:fc:a5:35:36:
         9e:56:76:c8:51:7f:db:e1:98:a7:74:e0:75:ba:05:8c:d6:3f:
         a3:96:26:3c:23:d7:2c:75:df:75:dd:08:f0:57:a5:9a:53:6d:
         da:76:c3:56:d2:bf:5f:d5:cb:53:aa:df:ca:c7:cb:31:77:ca:
         2f:bd:21:6c:ee:93:70:56:79:14:e9:58:73:82:bf:b4:54:f2:
         a5:54:da:66:08:b8:4f:7d:b9:0e:f2:6e:db:e0:51:18:38:66:
         d6:08:39:23:79:78:fc:dc:74:40:59:b9:42:9b:7f:15:1a:bc:
         53:c0:96:8a:46:c0:95:8e:e7:15:6d:10:ce:cf:85:34:7b:01:
         3a:a1:9d:f4:43:ab:a8:6c:11:d5:3d:c7:02:26:83:9b:df:04:
         b2:01:f6:d4:4b:bd:2b:68:2b:d6:59:76:d9:e8:3f:55:ad:73:
         34:42:f1:5f:b5:1d:02:fe:cb:c2:33:fe:ed:06:70:de:b2:26:
         38:89:a1:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----