Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/wot-mxwxfTUeN2I2YaOMaT4t8pE.cer
File:                     wot-mxwxfTUeN2I2YaOMaT4t8pE.cer (raw, json)
Hash identifier:          O1Ynn4UsSnnG5gZ4s5MdksuRBY1i9pK9BYDH4i3AOPY=
Subject key identifier:   C2:8B:7E:9B:1C:31:7D:35:1E:37:62:36:61:A3:8C:69:3E:2D:F2:91
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018570FB1B679DDDCB5C039B655EEEC887E2
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/ec/50f19d-306d-4789-a302-26cdf195d382/1/wot-mxwxfTUeN2I2YaOMaT4t8pE.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/ec/50f19d-306d-4789-a302-26cdf195d382/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 02 Jan 2023 05:36:22 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 62.3.14.0/24

Validation:               Failed, certificate revoked on Thu 16 Nov 2023 09:20:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:fb:1b:67:9d:dd:cb:5c:03:9b:65:5e:ee:c8:87:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 05:36:22 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=c28b7e9b1c317d351e37623661a38c693e2df291
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:d7:6b:4d:d2:e9:bd:d2:6e:55:ef:9c:e5:7c:
                    3d:29:21:6c:45:5e:34:fc:88:70:2e:e1:83:44:a7:
                    3b:d1:54:fa:2d:57:b4:f4:b9:82:e5:f3:9b:43:b4:
                    29:3b:d4:39:61:eb:fe:d0:9d:9a:c0:2e:d7:6e:9d:
                    47:4d:fc:3e:4a:2a:88:b1:af:d5:71:3b:c1:cf:9c:
                    3c:90:88:5a:6f:72:f8:8a:f7:d8:8a:24:95:13:70:
                    5b:99:f5:d7:e4:be:40:b8:95:6a:b0:7d:5d:e1:51:
                    78:79:1d:94:68:a5:7d:b7:8c:df:ff:2b:94:45:a4:
                    a8:b3:d8:a7:dc:06:ea:cd:ce:ac:84:3f:28:fc:4d:
                    7d:c3:96:e0:e0:af:f4:6f:64:2d:79:79:d8:9b:82:
                    08:52:2e:7c:84:20:ed:32:62:96:6e:8b:fd:8e:6e:
                    99:9d:c5:c6:ab:30:4b:9e:65:53:76:bf:f6:56:3f:
                    a0:6d:bf:f7:d6:87:dd:79:ac:8c:59:dc:8f:df:e7:
                    1f:70:b6:ff:e1:15:8e:c2:1f:8b:72:86:b2:3c:52:
                    e2:a7:26:a7:e6:0f:28:c0:af:2f:36:f9:ab:39:10:
                    f8:32:e8:41:83:fd:4c:8b:8d:b9:ec:53:96:0c:84:
                    4f:2d:7e:fe:3c:38:04:e9:44:c1:30:a4:b5:e0:b4:
                    f4:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:8B:7E:9B:1C:31:7D:35:1E:37:62:36:61:A3:8C:69:3E:2D:F2:91
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/50f19d-306d-4789-a302-26cdf195d382/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/50f19d-306d-4789-a302-26cdf195d382/1/wot-mxwxfTUeN2I2YaOMaT4t8pE.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.3.14.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0c:1f:e3:5d:03:1c:e4:3d:ec:36:42:03:b7:f7:25:5f:bd:12:
         55:6d:3b:35:a8:d6:15:24:2d:82:64:1c:a0:de:a5:a1:87:db:
         70:59:50:9c:d3:50:b8:65:d4:70:50:e5:8b:18:55:2c:cf:67:
         2f:1c:35:a7:f9:1f:6a:92:6a:84:b6:6c:6f:4a:0a:56:07:b8:
         b5:a6:f1:b7:38:92:6b:a4:33:bd:41:b6:f3:11:96:dc:e8:4b:
         be:61:e9:e7:33:62:9a:61:8e:c1:fd:d4:8e:01:c7:86:0a:49:
         3e:c6:49:5a:a5:35:a1:0c:57:d6:3b:2f:a1:af:cf:15:4d:21:
         9f:15:38:fc:18:3c:80:d1:4e:13:5e:ec:3b:4d:50:89:ac:15:
         94:df:b3:7e:a3:63:33:d4:e8:a6:70:33:74:0b:d0:f6:4d:f5:
         a6:7e:c0:0f:67:76:18:89:ac:79:89:47:de:df:d2:c6:db:0a:
         68:8c:31:91:6d:3f:bf:f3:22:28:2d:51:a1:79:e2:32:44:c3:
         b8:51:e3:30:9f:06:73:38:03:13:26:d5:72:12:b0:90:dd:34:
         52:fb:f3:0f:24:2b:af:e1:ad:09:63:80:6f:ef:25:ee:c1:14:
         6f:08:a2:83:b9:36:96:52:59:45:0c:cb:bd:78:7e:ac:e2:c9:
         2c:5e:29:04
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAYVw+xtnnd3LXAObZV7uyIfiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjMwMTAyMDUzNjIyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMjhiN2U5YjFjMzE3ZDM1MWUzNzYyMzY2MWEzOGM2OTNlMmRmMjkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArNdrTdLpvdJuVe+c5Xw9KSFsRV40
/IhwLuGDRKc70VT6LVe09LmC5fObQ7QpO9Q5Yev+0J2awC7Xbp1HTfw+SiqIsa/V
cTvBz5w8kIhab3L4ivfYiiSVE3BbmfXX5L5AuJVqsH1d4VF4eR2UaKV9t4zf/yuU
RaSos9in3Abqzc6shD8o/E19w5bg4K/0b2QteXnYm4IIUi58hCDtMmKWbov9jm6Z
ncXGqzBLnmVTdr/2Vj+gbb/31ofdeayMWdyP3+cfcLb/4RWOwh+LcoayPFLipyan
5g8owK8vNvmrORD4MuhBg/1Mi4257FOWDIRPLX7+PDgE6UTBMKS14LT0aQIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFMKLfpscMX01HjdiNmGjjGk+LfKRMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2VjLzUwZjE5
ZC0zMDZkLTQ3ODktYTMwMi0yNmNkZjE5NWQzODIvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWMvNTBmMTlk
LTMwNmQtNDc4OS1hMzAyLTI2Y2RmMTk1ZDM4Mi8xL3dvdC1teHd4ZlRVZU4ySTJZ
YU9NYVQ0dDhwRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQAPgMOMA0GCSqGSIb3DQEBCwUAA4IBAQAMH+Nd
AxzkPew2QgO39yVfvRJVbTs1qNYVJC2CZByg3qWhh9twWVCc01C4ZdRwUOWLGFUs
z2cvHDWn+R9qkmqEtmxvSgpWB7i1pvG3OJJrpDO9QbbzEZbc6Eu+YennM2KaYY7B
/dSOAceGCkk+xklapTWhDFfWOy+hr88VTSGfFTj8GDyA0U4TXuw7TVCJrBWU37N+
o2Mz1OimcDN0C9D2TfWmfsAPZ3YYiax5iUfe39LG2wpojDGRbT+/8yIoLVGheeIy
RMO4UeMwnwZzOAMTJtVyErCQ3TRS+/MPJCuv4a0JY4Bv7yXuwRRvCKKDuTaWUllF
DMu9eH6s4sksXikE
-----END CERTIFICATE-----