Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/WpGE7EIEkB5t4kQ2DQrUF0A2Iss.cer
File:                     WpGE7EIEkB5t4kQ2DQrUF0A2Iss.cer (raw, json)
Hash identifier:          V80WsQ5NtyopvjOf9gfF+ds21+H6SNhuoqibwp632F4=
Subject key identifier:   5A:91:84:EC:42:04:90:1E:6D:E2:44:36:0D:0A:D4:17:40:36:22:CB
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856E654C4D71F429B6FC99AAA3E03F4825
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/2a/95c3d1-d7fa-49eb-8db6-e2608343a6c4/1/WpGE7EIEkB5t4kQ2DQrUF0A2Iss.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/2a/95c3d1-d7fa-49eb-8db6-e2608343a6c4/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 17:33:30 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 185.215.96.0/22
                          IP: 2a0b:a840::/32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6e:65:4c:4d:71:f4:29:b6:fc:99:aa:a3:e0:3f:48:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 17:33:30 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=5a9184ec4204901e6de244360d0ad417403622cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:3f:65:0d:69:bf:e7:94:da:b5:2e:bb:dd:de:
                    fb:62:c5:c8:86:27:72:77:41:eb:d7:40:7e:04:b0:
                    a4:77:cd:98:3f:00:d1:a5:d0:28:c2:69:9d:5f:4d:
                    d2:7e:90:e0:86:29:25:17:cb:a9:51:ea:f9:5d:8e:
                    06:9b:61:e4:e1:2e:60:ac:03:65:f7:ea:ff:23:3e:
                    ca:eb:79:d4:23:3b:7e:8f:52:47:f0:ed:cd:a4:1c:
                    b1:b5:e3:37:7d:3e:02:d4:51:c2:7c:8f:cb:84:5a:
                    1e:a8:80:d3:9c:34:13:b3:57:c6:2d:a0:2d:1d:07:
                    ff:ef:03:0f:a9:cf:7b:b1:1c:4d:c1:f8:0c:20:24:
                    0f:ad:fa:3e:31:f5:26:9d:7a:67:e3:e8:56:43:bb:
                    1a:f5:ff:6b:bc:18:e9:35:d6:0f:cd:ff:4e:1b:ee:
                    74:c6:d2:74:a5:0a:4d:33:4e:31:a0:72:2d:97:eb:
                    ae:1c:5f:cb:78:8a:3e:db:d0:e1:4b:b9:da:76:07:
                    02:fe:0d:3f:b3:20:94:22:03:81:d4:10:95:d5:60:
                    3a:99:cc:db:17:80:77:3b:34:67:72:23:74:f5:42:
                    b6:1b:c7:db:18:5a:39:cc:fb:e3:34:c0:e6:3a:77:
                    85:1c:80:87:44:00:4c:61:6c:d8:cc:a9:34:2f:b4:
                    ea:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:91:84:EC:42:04:90:1E:6D:E2:44:36:0D:0A:D4:17:40:36:22:CB
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/95c3d1-d7fa-49eb-8db6-e2608343a6c4/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/95c3d1-d7fa-49eb-8db6-e2608343a6c4/1/WpGE7EIEkB5t4kQ2DQrUF0A2Iss.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.215.96.0/22
                IPv6:
                  2a0b:a840::/32

    Signature Algorithm: sha256WithRSAEncryption
         29:df:eb:dd:6d:dd:1d:16:97:1c:db:91:20:84:f2:f3:6e:7f:
         d1:27:b0:b1:a1:4c:ac:ab:1b:64:5d:fb:75:3f:75:bc:b5:8c:
         e7:af:f3:15:e4:94:b7:c1:96:93:b5:52:2d:e0:03:aa:2b:b9:
         9f:57:c6:e8:68:72:fb:8b:55:52:fd:90:8f:44:8f:e0:ae:f4:
         06:6d:51:1e:36:d9:16:a7:cb:d7:18:36:8b:f3:55:49:a1:92:
         5a:9f:31:14:81:77:24:65:aa:0b:dc:d8:30:22:76:b1:89:76:
         b4:d4:0e:dc:02:4e:34:97:36:21:30:70:70:19:44:3a:90:62:
         6d:86:94:b0:39:2e:ae:4d:27:c5:ea:34:c2:51:6e:23:55:03:
         e1:fd:43:11:54:c0:89:a2:b5:1e:59:83:6f:5f:67:62:1e:e1:
         cb:a4:f1:da:95:51:d5:e2:87:5e:34:f2:83:d0:3d:d7:ce:60:
         98:43:39:f1:4f:6d:e6:b3:6b:83:c3:1f:71:e4:3b:cf:ec:ca:
         fd:e5:85:b8:26:d5:cc:13:cc:6a:aa:4f:c8:e2:c9:15:9c:94:
         22:35:0c:5e:59:59:8d:cc:b2:90:e6:5f:84:d3:6c:49:ac:c1:
         bd:45:59:38:34:9a:80:bf:04:02:f3:84:7d:37:f7:1a:a3:c5:
         7e:d7:e7:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----