Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/wDKXYl-F1dwY8Ey3s-1SjHYNld4.cer
File:                     wDKXYl-F1dwY8Ey3s-1SjHYNld4.cer (raw, json)
Hash identifier:          25m2W/IkITsUHtR5PI422zrpP+GXynvMosUbrTMIoXM=
Subject key identifier:   C0:32:97:62:5F:85:D5:DC:18:F0:4C:B7:B3:ED:52:8C:76:0D:95:DE
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856EFBC7842D083508A42B1830864034AA
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/5c/949baa-8d2d-42a6-aa07-5e1eff0cfe0f/1/wDKXYl-F1dwY8Ey3s-1SjHYNld4.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/5c/949baa-8d2d-42a6-aa07-5e1eff0cfe0f/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 20:17:52 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 212.23.204.0/24

Validation:               Failed, certificate revoked on Mon 18 Dec 2023 00:31:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6e:fb:c7:84:2d:08:35:08:a4:2b:18:30:86:40:34:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 20:17:52 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=c03297625f85d5dc18f04cb7b3ed528c760d95de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:04:2d:a4:1d:14:13:f7:36:d9:9d:e3:87:63:
                    ad:32:05:7a:ba:b0:eb:2d:e8:f3:9b:4c:78:1c:ab:
                    45:87:16:8d:a1:55:f7:27:0d:46:2e:39:7b:d3:09:
                    95:0a:be:49:f5:97:6f:80:ac:d4:2d:8c:92:dd:c9:
                    9f:46:58:07:b2:27:fe:58:61:38:87:f4:cf:37:b8:
                    e9:b1:42:93:f8:cd:a7:08:8d:ae:3e:f6:62:4c:91:
                    80:55:17:e3:a8:4f:f8:22:0b:69:11:df:58:b1:9f:
                    c0:30:f6:7b:a0:7a:3a:6e:59:77:fa:a5:2f:81:6c:
                    b0:76:48:35:d0:07:77:11:71:51:fc:cf:64:26:a1:
                    b4:69:61:2e:ad:6f:30:5c:ba:e3:41:d8:2f:f8:21:
                    31:88:07:8c:83:c7:f1:f5:e3:76:73:f8:89:37:65:
                    68:92:3a:53:1a:50:81:f5:ea:02:55:a2:c8:08:bf:
                    43:07:52:73:e1:33:a8:de:a2:c9:a2:fd:e1:32:5f:
                    1b:55:8d:3b:e3:53:48:14:2b:be:1a:b6:fc:a0:46:
                    d7:05:3a:64:d1:3e:9f:53:9c:05:c5:da:ea:8d:c8:
                    3e:f6:59:d2:4e:eb:a3:0d:d6:2f:d2:47:d9:55:06:
                    39:c1:d5:f0:45:4e:76:56:97:99:03:6f:69:e3:74:
                    87:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:32:97:62:5F:85:D5:DC:18:F0:4C:B7:B3:ED:52:8C:76:0D:95:DE
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/949baa-8d2d-42a6-aa07-5e1eff0cfe0f/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/949baa-8d2d-42a6-aa07-5e1eff0cfe0f/1/wDKXYl-F1dwY8Ey3s-1SjHYNld4.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.23.204.0/24

    Signature Algorithm: sha256WithRSAEncryption
         40:1e:73:87:da:94:d1:31:30:dc:81:d7:d8:3a:4b:e7:73:a4:
         69:51:c0:18:bc:cd:46:97:bb:12:bf:f1:06:23:66:9e:bb:b1:
         21:34:fb:2a:b7:89:71:8c:52:13:b2:9a:a7:dd:0f:85:96:c4:
         c4:66:fb:9e:2e:36:50:66:31:a1:e6:bf:cf:8d:57:e0:d7:e3:
         1f:bf:70:36:99:33:c4:f2:28:28:c3:a0:73:73:62:c6:fe:77:
         0d:a3:83:96:92:d2:0f:10:f3:32:0a:c1:60:c8:e0:27:b2:89:
         c1:29:3b:ee:76:42:84:89:01:77:85:da:83:ad:d5:e1:9e:4d:
         02:a2:b6:d7:00:72:31:3f:40:4a:23:97:e3:d5:5b:f9:71:f9:
         f8:1b:8d:df:ab:ea:5b:41:39:38:e8:53:da:7e:1a:88:f5:51:
         b6:6a:6d:19:cd:e1:ad:80:39:45:45:69:46:01:3f:49:43:08:
         c4:f5:67:7a:e2:4a:52:ae:3d:ad:02:1a:58:de:ec:b2:0a:46:
         02:dc:d2:1e:25:02:d9:2a:8e:ec:c0:5c:9b:01:27:63:ff:e4:
         13:b9:2d:f0:d2:63:53:7b:5f:d3:ff:42:5e:c8:f3:74:da:8a:
         98:00:a4:d2:fc:80:d1:63:60:30:a8:50:e6:f3:98:4c:6a:f2:
         0a:22:d9:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----