Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3VrWGwETpSyq6b5VCMTkZcH_gPw.cer
File:                     3VrWGwETpSyq6b5VCMTkZcH_gPw.cer (raw, json)
Hash identifier:          J2SqVnvcnSfU3GirB6/ktvsT6CcJzCrK4OQkeBo+1xI=
Subject key identifier:   DD:5A:D6:1B:01:13:A5:2C:AA:E9:BE:55:08:C4:E4:65:C1:FF:80:FC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856E65B534865704DA6E97F19E3E4A0E7A
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/19/343c03-4287-4a7d-882e-3605c14b5815/1/3VrWGwETpSyq6b5VCMTkZcH_gPw.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/19/343c03-4287-4a7d-882e-3605c14b5815/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 17:33:57 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    AS: 43610
                          IP: 89.28.176.0/21

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6e:65:b5:34:86:57:04:da:6e:97:f1:9e:3e:4a:0e:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 17:33:57 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=dd5ad61b0113a52caae9be5508c4e465c1ff80fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:b5:1c:c2:b6:af:b2:20:8a:d5:74:56:9e:89:
                    1d:eb:6e:54:21:98:ab:23:0e:17:b2:b0:a2:2c:67:
                    46:79:8d:57:4a:db:f6:41:15:18:3d:9d:04:4a:4a:
                    c4:9a:05:43:58:d7:45:4f:c0:63:a6:3e:d4:c8:be:
                    ac:19:6d:0b:54:35:13:2a:15:e8:15:a9:b8:94:94:
                    68:6c:e9:64:1d:ad:b0:4b:b5:06:67:8b:99:eb:51:
                    92:c7:4b:67:dc:4a:fc:86:cc:a4:05:6f:ec:8c:2d:
                    c1:14:bc:5c:70:e5:ee:30:03:ae:6d:70:2b:a5:27:
                    32:92:a0:c3:d7:db:ea:04:68:a6:17:ce:06:1f:3b:
                    71:f7:6a:90:5f:cf:1f:ba:9f:63:a1:65:0e:66:2b:
                    43:20:a0:79:fb:d8:c5:4a:9c:e1:44:07:63:d4:a8:
                    b4:fc:fb:9a:9f:04:f1:df:a2:3c:13:3a:b3:8c:4b:
                    80:d9:b6:be:26:b1:69:ea:af:66:69:e9:9f:ff:b7:
                    33:f1:c0:c5:cc:20:7f:76:fc:55:32:28:a1:2a:99:
                    d9:e2:bd:8a:8b:71:21:95:d0:02:fa:e1:7f:c6:7a:
                    16:9c:7d:db:32:2a:3c:c9:1d:e6:93:31:91:51:89:
                    6b:1d:8e:63:a7:5c:10:36:60:3b:23:02:11:3b:a8:
                    27:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:5A:D6:1B:01:13:A5:2C:AA:E9:BE:55:08:C4:E4:65:C1:FF:80:FC
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/343c03-4287-4a7d-882e-3605c14b5815/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/343c03-4287-4a7d-882e-3605c14b5815/1/3VrWGwETpSyq6b5VCMTkZcH_gPw.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.28.176.0/21

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  43610

    Signature Algorithm: sha256WithRSAEncryption
         52:31:fa:9a:3f:ad:32:9d:34:55:96:e9:18:a2:c7:75:2b:9b:
         69:05:ef:79:25:7b:0e:98:4a:f8:da:11:5b:8f:b1:a7:0c:8d:
         32:e3:75:57:61:2b:69:b1:9e:d4:90:19:27:cc:a2:43:db:f8:
         04:d7:89:df:bc:47:08:fb:c3:91:15:25:e0:de:05:72:cc:f6:
         1e:a0:d7:d6:78:00:cd:78:e7:de:c8:b4:fe:d5:f3:90:d8:5d:
         23:ef:10:a9:81:d0:0a:a2:21:9a:9e:d8:ff:c4:38:f9:f7:8b:
         2d:20:ce:f6:ce:2d:39:a5:a1:55:91:d4:ba:78:92:9f:97:98:
         e8:87:3d:4f:f7:98:79:33:11:f7:02:1a:81:e4:b7:a7:25:f8:
         cc:ff:6b:fb:d0:6e:1a:ad:2b:d0:1e:15:33:72:17:d9:4b:94:
         3b:20:2f:08:ed:54:4d:91:fa:14:a0:5a:23:eb:63:a6:ea:e3:
         73:bb:30:c4:4b:59:2a:13:e6:7f:a4:fa:e3:5e:e7:25:b5:98:
         64:c9:ea:c0:f5:32:21:ad:23:ec:5f:7f:2f:70:8b:41:c0:68:
         26:4f:b1:5b:6e:0f:e1:8c:ad:65:29:ad:bc:8f:08:71:f9:8c:
         46:99:f8:41:90:e2:44:f7:4c:97:84:41:ab:66:e7:a1:36:8e:
         67:06:84:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----