Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/rwaU4BE-Z4kwdHrWrwsjPbhFPaE.cer
File:                     rwaU4BE-Z4kwdHrWrwsjPbhFPaE.cer (raw, json)
Hash identifier:          cTBS3zbj0bp+s50+JvvbDqeCsDtaEROhi5HgOVJXz1Q=
Subject key identifier:   AF:06:94:E0:11:3E:67:89:30:74:7A:D6:AF:0B:23:3D:B8:45:3D:A1
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856ED2D244EC813EF075A63C4DA0440EE5
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/6d/65c33b-005b-408e-892d-a606efb66408/1/rwaU4BE-Z4kwdHrWrwsjPbhFPaE.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/6d/65c33b-005b-408e-892d-a606efb66408/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 19:33:08 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 37.77.147.0/24
                          IP: 2a11:6900::/29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6e:d2:d2:44:ec:81:3e:f0:75:a6:3c:4d:a0:44:0e:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 19:33:08 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=af0694e0113e678930747ad6af0b233db8453da1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:8e:4d:ff:8e:7d:4c:75:25:5e:4d:02:5c:1b:
                    8d:de:4e:0a:bd:d3:9d:56:e4:85:25:42:e2:84:cf:
                    8d:50:19:a8:b4:79:b0:ce:63:11:e5:d9:9c:2d:03:
                    2d:46:4f:c3:2e:43:0b:c2:ec:2b:f4:70:e3:75:8d:
                    fd:0f:43:c9:1b:06:35:ef:39:46:3a:86:b4:3c:d8:
                    ce:85:15:19:45:d5:42:52:c6:29:1a:0b:04:61:17:
                    e2:ca:78:92:e5:7d:35:7d:1e:44:6b:4c:e2:61:75:
                    1c:0c:23:32:2a:a0:bb:7c:48:46:d4:44:fa:bb:d1:
                    d0:95:9e:02:82:35:06:cd:dc:06:4b:68:a5:46:d6:
                    75:fe:cb:dd:d8:99:5e:d9:36:74:1e:a1:ab:63:e7:
                    aa:ab:01:22:bc:f3:e5:60:05:2f:1c:5d:8a:a3:ff:
                    a4:b0:71:7f:99:fd:89:8c:d8:80:76:95:3b:7e:b0:
                    45:bf:e4:e2:a1:92:a7:e9:4c:cf:0e:e3:d4:ff:e2:
                    41:9f:f3:df:91:b0:5e:eb:ad:16:8f:34:67:48:96:
                    41:51:e2:74:c5:b7:21:f5:cc:af:6d:ab:03:32:a9:
                    88:51:b9:41:6e:a4:6f:74:99:75:1f:3d:29:c1:0b:
                    11:6c:2e:27:c0:c7:d4:62:3a:43:6b:59:e2:5f:f7:
                    fd:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:06:94:E0:11:3E:67:89:30:74:7A:D6:AF:0B:23:3D:B8:45:3D:A1
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/65c33b-005b-408e-892d-a606efb66408/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/65c33b-005b-408e-892d-a606efb66408/1/rwaU4BE-Z4kwdHrWrwsjPbhFPaE.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  37.77.147.0/24
                IPv6:
                  2a11:6900::/29

    Signature Algorithm: sha256WithRSAEncryption
         30:4b:ad:44:ae:8c:ce:41:d4:2c:26:d8:dc:84:21:be:fa:be:
         24:b6:5f:cd:7e:3b:de:0a:c6:69:99:0d:f9:a8:db:62:54:ad:
         45:d7:55:9d:fb:5f:a8:81:41:9b:ac:8b:3d:a8:17:fb:18:ad:
         a8:4d:11:50:72:0d:c4:06:5c:31:d1:1a:b1:09:13:54:05:bf:
         4c:ca:00:9b:0d:31:f2:d9:af:b5:79:6b:cf:5a:fa:a3:3e:01:
         bf:ab:fc:3f:4e:72:1e:d8:41:da:da:82:87:8d:c7:56:22:f8:
         c0:ad:d7:d0:35:86:4e:6b:15:6e:ca:a6:c6:18:d7:0c:b0:2f:
         98:4e:9e:e8:33:ee:82:7f:dc:d3:18:c4:6e:70:a7:0b:6a:87:
         1e:36:78:d1:57:11:76:52:88:c1:3b:09:8c:04:7c:f3:d0:1d:
         25:9b:d2:a1:81:d8:cb:83:9f:75:b8:6f:ab:89:75:29:87:75:
         4d:4c:09:ae:04:cb:0c:e9:b1:d9:c7:a7:af:25:bf:8a:3c:2a:
         93:3d:ce:ee:5e:e9:32:ed:d8:99:4b:8a:99:8e:f7:96:6a:1a:
         4a:77:f9:cc:a3:9c:10:77:20:b4:42:97:76:7a:8d:db:3b:fa:
         ea:35:23:bb:a1:3a:5e:55:86:e1:71:c5:67:f9:a0:44:b4:83:
         e6:47:09:00
-----BEGIN CERTIFICATE-----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