Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/wI1zXzRsT8QqR5LOM4CKIhCoK7U.cer
File:                     wI1zXzRsT8QqR5LOM4CKIhCoK7U.cer (raw, json)
Hash identifier:          M/UFLFQ5cfURvOjNSUSot73xVw3DGgtPlYNdg2hhmFY=
Subject key identifier:   C0:8D:73:5F:34:6C:4F:C4:2A:47:92:CE:33:80:8A:22:10:A8:2B:B5
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856ED407092D9E3D36DF6FD0CDF89B7ACF
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/58/d97287-fd01-4a10-909e-c3f257eb20cc/1/wI1zXzRsT8QqR5LOM4CKIhCoK7U.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/58/d97287-fd01-4a10-909e-c3f257eb20cc/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 19:34:27 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 5.28.192.0/18
                          IP: 77.37.0.0/17
                          IP: 91.108.64.0/18
                          IP: 93.127.128.0/17
                          IP: 185.171.76.0/22
                          IP: 2a01:4d0::/32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6e:d4:07:09:2d:9e:3d:36:df:6f:d0:cd:f8:9b:7a:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 19:34:27 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=c08d735f346c4fc42a4792ce33808a2210a82bb5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:d8:d1:c2:4b:d8:ad:8a:3b:97:92:6f:f3:2a:
                    d4:24:92:3f:90:b2:2c:fe:c5:5a:62:fa:d2:d3:14:
                    f5:5b:8a:0a:5e:c4:87:b3:a4:ad:54:45:8e:25:f9:
                    3b:aa:8c:41:ff:79:61:dc:a5:9b:2f:a8:5e:a2:23:
                    a2:f9:f8:9e:e2:c5:88:c4:bb:2d:1f:74:b5:36:f6:
                    ed:d6:89:2e:46:c8:25:a7:4a:ef:7c:91:20:76:bd:
                    59:3d:85:42:c9:ea:cc:b6:d1:c8:24:a5:48:b3:38:
                    f5:35:ea:41:80:3f:e7:b0:88:06:5c:88:93:ad:dd:
                    09:4d:95:63:56:cc:87:b1:9f:14:d2:6e:40:ed:50:
                    ac:de:bb:e1:db:65:69:38:cb:ab:5d:09:8a:95:6d:
                    1f:d6:d7:67:da:f7:e0:a9:bb:50:2d:22:16:82:56:
                    55:21:8f:aa:41:19:32:d9:64:20:e9:9f:8e:c7:a7:
                    5b:99:8c:86:d2:e8:80:db:ca:ca:dd:12:e5:5f:39:
                    02:97:a6:65:b5:f5:32:ab:29:1a:b2:b2:f5:03:d1:
                    c3:c0:bf:33:75:71:6e:71:44:88:54:6a:27:76:67:
                    0a:65:8d:90:77:50:bb:73:89:c7:22:62:54:29:9f:
                    ba:95:63:cd:3c:d0:93:59:14:35:ce:d0:63:9d:67:
                    59:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:8D:73:5F:34:6C:4F:C4:2A:47:92:CE:33:80:8A:22:10:A8:2B:B5
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/d97287-fd01-4a10-909e-c3f257eb20cc/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/d97287-fd01-4a10-909e-c3f257eb20cc/1/wI1zXzRsT8QqR5LOM4CKIhCoK7U.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.28.192.0/18
                  77.37.0.0/17
                  91.108.64.0/18
                  93.127.128.0/17
                  185.171.76.0/22
                IPv6:
                  2a01:4d0::/32

    Signature Algorithm: sha256WithRSAEncryption
         41:90:db:2d:f3:3e:39:b7:56:de:52:28:99:a0:7c:0c:65:46:
         d6:60:c7:44:89:70:8e:e8:58:4e:43:59:ae:be:ec:db:60:d5:
         5d:ee:32:b5:0c:32:68:d6:c3:17:03:47:1b:a5:f7:33:11:20:
         78:99:6d:fd:72:f5:64:c7:5a:28:ca:c4:66:86:c0:17:e4:8d:
         65:2c:a1:f2:b1:41:50:e5:95:ee:b9:fa:96:ae:51:f9:92:b9:
         a8:79:62:b5:a7:88:1e:8c:6c:33:50:f3:46:53:67:62:48:a7:
         cc:80:1e:93:09:40:80:83:19:d7:bc:34:4e:25:b4:4a:44:8d:
         e8:c6:33:90:57:ec:fa:f2:0a:23:5c:7d:6a:db:ad:40:0e:5a:
         e6:53:b2:0e:73:f8:38:3f:58:9c:ed:0b:3b:69:27:e9:9f:21:
         38:3f:8e:3a:c9:1b:19:32:e4:22:35:6e:0e:6a:ff:9d:60:48:
         90:23:25:f8:23:c7:c6:a4:af:24:1b:56:68:67:a7:92:be:5d:
         b2:fd:f7:29:39:0f:7e:b1:7c:13:18:41:67:06:27:42:b7:d6:
         81:75:8a:56:17:b0:d9:fe:49:a3:09:e6:d5:e7:c6:96:2a:fb:
         32:f7:a1:94:42:bc:db:0e:f0:55:4a:e3:ca:e1:91:66:8d:ad:
         9a:72:dd:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----