Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/DspVtaYd7gybSXSWHGXGyV_EcqA.cer
File:                     DspVtaYd7gybSXSWHGXGyV_EcqA.cer (raw, json)
Hash identifier:          Lr4hZKVcIxgmCjVvwYNKJEpxGsPkp2pUj51HHLp6e/I=
Subject key identifier:   0E:CA:55:B5:A6:1D:EE:0C:9B:49:74:96:1C:65:C6:C9:5F:C4:72:A0
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01884E838B167EBB559811ACC7DB961610C4
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/b4/c7eb8f-c212-4648-af95-5b25be6a7187/1/DspVtaYd7gybSXSWHGXGyV_EcqA.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/b4/c7eb8f-c212-4648-af95-5b25be6a7187/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 24 May 2023 16:07:03 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 45.10.128.0 -- 45.10.130.255

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:4e:83:8b:16:7e:bb:55:98:11:ac:c7:db:96:16:10:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: May 24 16:07:03 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=0eca55b5a61dee0c9b4974961c65c6c95fc472a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:29:01:72:45:d6:3e:ac:77:fe:be:5d:4a:5c:
                    a7:c7:72:64:51:66:3e:0d:7b:38:fa:18:5f:b8:8b:
                    fb:a2:69:6c:69:bf:dd:cb:fd:76:e9:8f:f2:bc:33:
                    f6:ca:3a:0e:7c:06:c2:e4:32:88:29:19:60:2f:1a:
                    37:7a:e6:99:0d:21:c5:b7:53:8e:85:a7:9d:98:1c:
                    0d:17:fe:e0:8b:53:0e:67:73:93:dc:4a:39:9c:7f:
                    c7:a9:d3:d9:f0:a4:9d:43:20:7d:14:31:be:76:78:
                    91:b0:6a:8c:22:be:b4:c5:e4:4c:f2:45:7b:2e:1c:
                    a8:e6:79:82:9e:29:f8:7b:40:ba:3e:55:9d:4e:53:
                    87:65:80:83:38:ce:20:bb:c6:36:a3:33:21:6f:7e:
                    c1:f4:07:29:29:5b:ab:48:3d:b8:5b:68:ff:ad:d8:
                    c2:97:c0:4a:5c:14:bd:e0:90:51:39:17:8c:51:e3:
                    64:85:89:1e:5f:a4:be:ec:7b:37:a5:2b:68:11:79:
                    e2:0b:71:09:c2:c4:cc:9e:0a:c5:3c:e3:89:2a:0b:
                    93:5d:31:99:e5:ae:5c:9f:fa:09:48:ff:d1:e9:bc:
                    72:7f:81:bf:b2:66:28:e8:97:e7:13:3e:c6:30:5d:
                    f3:a7:5a:2b:fd:48:65:c6:ad:e4:46:8f:d4:8f:6b:
                    d3:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:CA:55:B5:A6:1D:EE:0C:9B:49:74:96:1C:65:C6:C9:5F:C4:72:A0
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/c7eb8f-c212-4648-af95-5b25be6a7187/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/c7eb8f-c212-4648-af95-5b25be6a7187/1/DspVtaYd7gybSXSWHGXGyV_EcqA.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.10.128.0-45.10.130.255

    Signature Algorithm: sha256WithRSAEncryption
         72:d8:65:f4:29:0e:40:c8:a9:53:a8:74:73:69:6c:44:fd:19:
         f1:c6:42:4a:5c:e0:31:a9:17:93:30:40:22:e0:07:cd:fc:ed:
         c7:04:5e:ef:c9:b8:7b:d6:72:e2:ed:2b:e7:95:e7:42:fe:3a:
         9f:60:5b:65:35:be:9a:ec:40:3c:24:ee:23:92:b5:c5:ef:f1:
         df:1c:2a:48:e3:79:c5:16:02:0b:cc:a1:f4:53:5f:c0:33:01:
         07:cb:04:77:19:ef:bb:ec:63:b2:94:e5:21:8b:49:51:b1:e5:
         29:9e:c1:0d:de:53:7d:4d:ee:c4:28:d1:27:eb:f5:27:8e:f6:
         65:ed:6c:7a:1d:39:3f:31:57:e0:e2:45:5b:b9:ef:da:26:74:
         f5:47:a1:e5:59:0d:98:7c:c8:5d:a0:13:6f:1b:2b:88:7b:48:
         a7:d6:6e:b1:11:4b:b8:f3:53:09:3e:5d:90:7a:fe:0c:a1:20:
         92:bb:e9:80:27:61:ae:78:46:b7:6b:2f:c3:b0:db:8d:97:6f:
         f9:76:74:05:7b:69:a7:8c:f2:87:f3:8b:0b:b7:25:d8:75:f6:
         88:ee:3a:ee:f7:bf:66:15:4d:c2:bd:3a:f1:a1:11:0b:34:0b:
         ee:ca:5e:f5:84:75:2a:98:a2:89:6b:47:12:65:4e:b2:eb:3f:
         e9:8f:92:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----