Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/wxE19IuFJC0169YLms7vCY7JWl4.cer
File:                     wxE19IuFJC0169YLms7vCY7JWl4.cer (raw, json)
Hash identifier:          NxXDyZ1Zz2PCZLCbYcG1rrfaWNqG9BP1Gre1VCUUJBc=
Subject key identifier:   C3:11:35:F4:8B:85:24:2D:35:EB:D6:0B:9A:CE:EF:09:8E:C9:5A:5E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01857089FC3607944DE094B379BE8B3A7B6E
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/70/9138c6-9bf4-4807-9d85-06e9c05e90e1/1/wxE19IuFJC0169YLms7vCY7JWl4.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/70/9138c6-9bf4-4807-9d85-06e9c05e90e1/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 02 Jan 2023 03:32:49 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 193.201.12.0/24
                          IP: 2a11:2240::/29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:89:fc:36:07:94:4d:e0:94:b3:79:be:8b:3a:7b:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 03:32:49 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=c31135f48b85242d35ebd60b9aceef098ec95a5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:39:82:ba:ae:29:61:20:e7:28:d3:0d:db:a5:
                    ff:45:a5:73:5a:d9:30:5d:1b:d3:23:c0:9b:3d:8c:
                    10:b1:9e:bf:93:38:7b:3f:3c:85:19:ef:1a:b1:53:
                    b8:db:f1:41:72:12:56:8e:28:d6:2c:a2:28:8b:17:
                    23:89:da:a5:50:6c:6f:8b:2f:0d:86:ee:8b:83:59:
                    9c:15:83:7a:87:48:8b:18:6f:c3:6f:87:13:89:ff:
                    6f:55:f0:56:5b:b3:8b:fc:ed:1e:a9:40:42:11:1e:
                    92:f9:3f:08:83:37:57:21:ec:c4:e2:91:f6:ad:c9:
                    e2:ad:ca:cf:8d:ea:ec:c6:88:ba:30:69:1e:08:48:
                    59:71:ac:2d:f3:bd:9a:65:23:a1:23:00:d3:11:40:
                    bf:4b:03:76:73:4e:3a:b6:3c:e4:a2:b7:01:61:4b:
                    79:6c:32:b3:00:3c:1a:32:cd:33:b3:15:14:49:10:
                    2b:85:c5:01:06:4d:89:97:55:a5:74:fb:ba:51:87:
                    47:22:c8:3b:b9:81:32:8a:06:a2:b4:2f:d0:6e:2b:
                    ac:d0:2a:54:ef:20:bf:f9:e3:0a:a9:a0:e9:c3:5f:
                    c0:f3:3e:42:cc:22:45:d5:61:bd:da:73:fd:1c:05:
                    7d:8d:79:b9:4f:57:13:12:c4:61:21:59:8c:e5:21:
                    7d:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:11:35:F4:8B:85:24:2D:35:EB:D6:0B:9A:CE:EF:09:8E:C9:5A:5E
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/9138c6-9bf4-4807-9d85-06e9c05e90e1/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/9138c6-9bf4-4807-9d85-06e9c05e90e1/1/wxE19IuFJC0169YLms7vCY7JWl4.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.201.12.0/24
                IPv6:
                  2a11:2240::/29

    Signature Algorithm: sha256WithRSAEncryption
         71:67:f6:dd:d1:2e:62:44:98:7b:e4:65:10:ab:f1:fa:9d:f6:
         9d:9e:a3:f4:67:85:e2:d3:9e:40:be:5e:2b:44:db:cc:4b:dd:
         08:ca:78:15:f9:e8:47:3e:24:70:65:1d:d1:9a:71:c0:f5:3b:
         94:34:49:8f:58:1c:d5:d8:12:c2:bf:c3:0a:4d:04:22:bf:ac:
         c1:e2:26:67:70:e6:1d:ee:7f:c3:6a:01:16:7a:57:22:b0:98:
         9d:fd:9b:c0:6c:77:10:56:14:99:02:b9:6c:9b:77:e2:f6:ce:
         69:16:e6:0f:5d:66:da:f5:1f:7f:8d:d7:b1:3b:e8:1b:1c:47:
         42:a2:48:f7:9b:1e:ce:15:c0:73:33:ab:e0:16:41:69:97:d8:
         9f:0c:69:17:8f:60:b1:53:34:bf:26:c4:39:9b:93:26:c6:10:
         8f:5f:df:1c:f5:29:28:1f:22:eb:d2:40:b7:94:81:10:7f:23:
         f2:35:62:5d:47:56:94:e5:42:fb:9e:81:22:d4:7a:9c:51:4a:
         38:32:b2:67:dc:36:75:7f:da:61:17:f3:67:b9:b2:29:d4:cc:
         40:ea:e9:41:fb:ac:7b:53:07:b0:60:29:a2:92:8f:5d:3b:24:
         4b:02:ce:b7:38:53:88:cf:2a:68:b0:d5:20:6e:d8:a9:71:8c:
         0e:9b:e8:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----