Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/w7GO3hDV-cmbj2i5CG0vuTzLmXg.cer
File:                     w7GO3hDV-cmbj2i5CG0vuTzLmXg.cer (raw, json)
Hash identifier:          1waH3jbGCnjSjqJGPfRIj52IbQij7lmWzQyrgbgZRKo=
Subject key identifier:   C3:B1:8E:DE:10:D5:F9:C9:9B:8F:68:B9:08:6D:2F:B9:3C:CB:99:78
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018570FB11A7D9A2710E4270A344E95AB230
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/90/51bb40-fd1c-4cf9-810c-b2d73171d1bb/1/w7GO3hDV-cmbj2i5CG0vuTzLmXg.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/90/51bb40-fd1c-4cf9-810c-b2d73171d1bb/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 02 Jan 2023 05:36:20 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 83.138.53.0/24

Validation:               Failed, certificate revoked on Thu 17 Aug 2023 06:58:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:fb:11:a7:d9:a2:71:0e:42:70:a3:44:e9:5a:b2:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 05:36:20 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=c3b18ede10d5f9c99b8f68b9086d2fb93ccb9978
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:8b:7b:4f:b2:25:e0:b7:a6:7d:4e:8a:45:a8:
                    98:e9:15:23:15:52:d0:f0:ec:0a:8c:04:da:0e:48:
                    be:80:56:93:ec:4b:13:cd:a4:fc:3d:c5:bc:62:fa:
                    0b:f6:ae:46:9f:2e:04:5a:87:13:a3:ab:3c:aa:eb:
                    44:ea:11:69:f5:8e:74:e8:51:04:cb:5d:a1:56:58:
                    7d:2b:43:18:f7:01:d5:5e:6c:db:d1:f8:7a:67:66:
                    33:6b:da:48:93:e4:53:33:00:39:64:3e:02:f9:8a:
                    86:85:1a:b5:6f:29:4d:e4:50:96:6b:f4:a7:6b:4f:
                    f6:1b:a2:53:b1:38:dc:a8:f4:35:b2:e4:ee:96:e8:
                    bf:2d:aa:55:86:3e:7c:8c:d9:07:b5:0a:d0:da:c6:
                    e1:14:60:8f:a8:d3:8d:65:02:ef:61:e6:0e:db:1a:
                    3a:63:d6:c3:82:7e:33:c8:ea:9b:64:2d:93:ce:fc:
                    be:da:70:83:72:7c:10:d2:11:3c:2d:4d:fd:0c:27:
                    2b:e7:8e:da:cd:47:c2:99:cc:f9:97:f7:fc:c9:0f:
                    52:79:54:15:8f:df:15:4e:bd:bd:99:a8:74:61:9b:
                    b1:fc:5d:a3:eb:22:3a:ec:d1:da:6b:58:f5:db:24:
                    66:21:63:7d:33:92:ad:52:7e:15:d4:9a:5d:cd:61:
                    15:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:B1:8E:DE:10:D5:F9:C9:9B:8F:68:B9:08:6D:2F:B9:3C:CB:99:78
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/51bb40-fd1c-4cf9-810c-b2d73171d1bb/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/51bb40-fd1c-4cf9-810c-b2d73171d1bb/1/w7GO3hDV-cmbj2i5CG0vuTzLmXg.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  83.138.53.0/24

    Signature Algorithm: sha256WithRSAEncryption
         65:e8:aa:d8:a0:6a:72:87:08:8f:a6:f3:38:67:03:f1:5d:fd:
         6e:b3:1d:22:fa:5a:e2:f9:ea:f4:8c:06:c4:e0:16:9a:2e:b3:
         7a:66:9a:6d:b8:a2:25:a9:f2:07:49:70:1f:8b:45:ac:0e:17:
         c3:69:2c:51:1d:68:41:c1:ed:ef:85:81:96:38:6a:60:9c:8d:
         c3:cc:f9:7f:08:0c:ff:1d:23:25:4b:d5:4e:64:d7:21:6c:47:
         43:24:2e:6c:69:73:a0:ef:14:ca:10:fc:28:2e:87:c5:97:a8:
         4e:42:00:23:6a:4e:58:8c:62:dd:3c:36:98:88:42:e3:e5:7f:
         80:d4:8e:88:e2:20:f5:83:00:53:aa:01:8c:e6:64:ed:d6:b2:
         9f:f6:ab:99:5d:b9:f1:ff:84:eb:a2:bb:5a:48:0f:90:5e:8b:
         d6:81:b1:9e:e4:9a:76:f1:62:91:f5:b2:92:db:89:db:82:36:
         bb:d3:22:18:66:7b:51:af:f7:5c:18:ca:70:48:ed:c2:bf:aa:
         7c:8f:6e:f0:c3:7f:6c:81:d8:0a:57:9d:85:2d:24:25:fd:ec:
         2c:56:0b:3b:06:d1:d5:12:3a:a3:16:f6:63:f2:2c:9c:6e:44:
         12:f4:a9:2c:7e:c1:9e:32:ad:b0:b2:d9:ba:32:9b:eb:59:d2:
         e1:19:14:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----