Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/W7ZlC2zRe6syoi-NJLiNAPsToS4.cer
File:                     W7ZlC2zRe6syoi-NJLiNAPsToS4.cer (raw, json)
Hash identifier:          FfKcLpvzzHc0DXobmthygDnTGgRqtqhGB7jZ42rKCEY=
Subject key identifier:   5B:B6:65:0B:6C:D1:7B:AB:32:A2:2F:8D:24:B8:8D:00:FB:13:A1:2E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0189654A4F05A2752F2DF843A9F14AFAFB04
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/e4/e085e4-ec02-41dd-8204-24c2311f6a49/1/W7ZlC2zRe6syoi-NJLiNAPsToS4.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/e4/e085e4-ec02-41dd-8204-24c2311f6a49/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 17 Jul 2023 19:18:36 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 176.116.12.0/24
                          IP: 2a11:e440::/29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:65:4a:4f:05:a2:75:2f:2d:f8:43:a9:f1:4a:fa:fb:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jul 17 19:18:36 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=5bb6650b6cd17bab32a22f8d24b88d00fb13a12e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:55:cb:48:3a:2c:d6:67:f3:7c:5e:9a:af:12:
                    22:c5:9c:7d:47:70:86:e0:50:39:31:e8:04:8f:6d:
                    5e:10:0e:19:55:40:de:24:93:ff:15:71:8e:11:63:
                    9e:ae:6d:0e:5e:cb:99:7c:c5:7a:f2:9a:a4:d6:f1:
                    64:7a:88:c5:01:27:7e:a7:f8:a7:ad:d4:56:15:4a:
                    88:75:a6:54:71:42:72:95:08:e3:3a:d5:e1:ac:74:
                    9f:d3:f8:13:f9:3a:3a:2c:aa:dc:14:84:c4:29:af:
                    e9:b0:2b:a2:04:2f:d5:8c:f3:8f:ba:88:a1:e3:02:
                    7b:9a:8d:ae:12:ff:39:2e:7a:a0:28:c4:7c:3d:fd:
                    28:73:4d:1e:0a:eb:bf:33:dd:4c:db:9a:7c:57:2f:
                    c8:63:f3:10:c2:df:a9:54:67:77:0b:e0:2b:02:88:
                    1c:52:9d:d9:ba:82:f8:cd:1b:d9:51:da:b6:52:a4:
                    1e:be:de:d1:87:f5:cf:2a:bd:99:c0:1b:d5:95:3e:
                    f6:1c:00:c7:a9:73:fd:c7:bf:bf:73:cc:e7:d1:3c:
                    86:ed:fa:14:6e:77:db:7a:d7:87:7d:11:fd:37:96:
                    4f:1a:d0:e5:b6:dd:bc:4c:a8:8b:3e:1b:d2:6d:c6:
                    8c:31:d1:82:74:e2:5a:4d:94:eb:0a:10:3d:0c:94:
                    05:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:B6:65:0B:6C:D1:7B:AB:32:A2:2F:8D:24:B8:8D:00:FB:13:A1:2E
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/e085e4-ec02-41dd-8204-24c2311f6a49/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/e085e4-ec02-41dd-8204-24c2311f6a49/1/W7ZlC2zRe6syoi-NJLiNAPsToS4.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  176.116.12.0/24
                IPv6:
                  2a11:e440::/29

    Signature Algorithm: sha256WithRSAEncryption
         25:69:81:e6:0c:ef:49:11:3d:9b:55:ac:5a:44:46:05:da:18:
         f2:22:20:bc:8e:61:95:3a:be:4c:ed:8b:54:7d:06:04:2a:3f:
         46:be:54:53:13:22:21:8a:e2:09:1c:db:b3:44:02:bf:8d:d6:
         c1:9a:77:dc:22:b5:6a:8c:40:34:d5:b0:b4:ae:7a:d6:5d:ea:
         34:6d:2b:4d:7e:44:b7:76:9c:8c:04:92:1d:a2:06:4c:81:95:
         99:54:3a:6d:6c:9a:f8:22:ea:bc:a9:17:0f:33:b0:80:c3:5b:
         81:8d:24:3d:4f:af:4b:e3:8f:f7:c8:18:e0:4a:a6:d0:2e:c2:
         a2:74:77:f4:2c:bc:92:72:d2:11:2b:46:88:62:2e:70:4f:9f:
         1d:bf:ef:52:93:9f:dc:67:87:a6:4b:24:2d:13:82:41:44:f5:
         69:3b:11:be:f0:af:5c:3d:66:da:d0:21:68:8c:a1:c1:8a:11:
         6e:14:70:5d:ef:46:63:49:75:35:09:87:11:28:e2:2e:7b:65:
         0f:5d:ac:59:6c:85:40:a0:5f:a8:4c:b7:56:bc:ed:31:be:ba:
         a1:fd:54:3d:18:35:f2:54:3d:45:0c:d8:f8:b4:56:df:3f:a3:
         bc:3f:e7:9b:b9:51:8c:be:99:f3:ab:4a:f0:2b:ec:0a:d9:e4:
         f2:76:7c:86
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgISAYllSk8FonUvLfhDqfFK+vsEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjMwNzE3MTkxODM2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1YmI2NjUwYjZjZDE3YmFiMzJhMjJmOGQyNGI4OGQwMGZiMTNhMTJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsFXLSDos1mfzfF6arxIixZx9R3CG
4FA5MegEj21eEA4ZVUDeJJP/FXGOEWOerm0OXsuZfMV68pqk1vFkeojFASd+p/in
rdRWFUqIdaZUcUJylQjjOtXhrHSf0/gT+To6LKrcFITEKa/psCuiBC/VjPOPuoih
4wJ7mo2uEv85LnqgKMR8Pf0oc00eCuu/M91M25p8Vy/IY/MQwt+pVGd3C+ArAogc
Up3ZuoL4zRvZUdq2UqQevt7Rh/XPKr2ZwBvVlT72HADHqXP9x7+/c8zn0TyG7foU
bnfbeteHfRH9N5ZPGtDltt28TKiLPhvSbcaMMdGCdOJaTZTrChA9DJQFXwIDAQAB
o4ICkzCCAo8wHQYDVR0OBBYEFFu2ZQts0XurMqIvjSS4jQD7E6EuMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2U0L2UwODVl
NC1lYzAyLTQxZGQtODIwNC0yNGMyMzExZjZhNDkvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTQvZTA4NWU0
LWVjMDItNDFkZC04MjA0LTI0YzIzMTFmNmE0OS8xL1c3WmxDMnpSZTZzeW9pLU5K
TGlOQVBzVG9TNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQAsHQMMA0EAgACMAcDBQMqEeRAMA0GCSqGSIb3
DQEBCwUAA4IBAQAlaYHmDO9JET2bVaxaREYF2hjyIiC8jmGVOr5M7YtUfQYEKj9G
vlRTEyIhiuIJHNuzRAK/jdbBmnfcIrVqjEA01bC0rnrWXeo0bStNfkS3dpyMBJId
ogZMgZWZVDptbJr4Iuq8qRcPM7CAw1uBjSQ9T69L44/3yBjgSqbQLsKidHf0LLyS
ctIRK0aIYi5wT58dv+9Sk5/cZ4emSyQtE4JBRPVpOxG+8K9cPWba0CFojKHBihFu
FHBd70ZjSXU1CYcRKOIue2UPXaxZbIVAoF+oTLdWvO0xvrqh/VQ9GDXyVD1FDNj4
tFbfP6O8P+ebuVGMvpnzq0rwK+wK2eTydnyG
-----END CERTIFICATE-----