Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/VYgVPz7Gs2o_xoUNBTNyNvPO0RI.cer
File:                     VYgVPz7Gs2o_xoUNBTNyNvPO0RI.cer (raw, json)
Hash identifier:          mfZmicziFKfb3fR5sQN19RwvZhfLsqd1fv3/oO+CP/0=
Subject key identifier:   55:88:15:3F:3E:C6:B3:6A:3F:C6:85:0D:05:33:72:36:F3:CE:D1:12
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01863AF8E8FCA1F838BA7817FE4359C094F6
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/2f/6ba63c-83d2-4157-b4ff-00104e74eccd/1/VYgVPz7Gs2o_xoUNBTNyNvPO0RI.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/2f/6ba63c-83d2-4157-b4ff-00104e74eccd/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 10 Feb 2023 10:57:16 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 176.97.213.0/24
                          IP: 2a13:b500::/29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:3a:f8:e8:fc:a1:f8:38:ba:78:17:fe:43:59:c0:94:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Feb 10 10:57:16 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=5588153f3ec6b36a3fc6850d05337236f3ced112
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:f8:2a:bd:22:94:54:7c:80:3e:c2:b8:5d:53:
                    fa:6d:bf:cd:0b:e8:84:cf:ab:24:f8:d6:27:99:bb:
                    36:2c:f1:59:bb:a4:16:64:84:3c:bb:74:24:6f:6d:
                    e3:a0:d3:d5:09:15:d1:af:9e:f4:54:b7:40:9b:5b:
                    17:ac:92:72:7f:e0:a3:3b:ba:36:c0:93:04:8b:b1:
                    b4:86:fc:3e:42:20:28:86:a6:50:c9:b3:d4:68:73:
                    c0:21:73:ce:65:f0:ee:f9:af:48:a6:0b:c5:20:36:
                    46:b9:06:58:20:15:1a:d5:36:35:eb:ef:7e:52:d4:
                    87:f1:af:16:03:41:92:8a:05:2c:86:7f:17:3c:d8:
                    ba:32:4b:7d:71:18:8e:3a:00:05:45:cf:2d:cd:5d:
                    be:b5:1a:fe:aa:a4:c6:ec:92:b5:2e:54:31:3c:bd:
                    02:4d:8b:63:5a:63:7f:d3:c1:4b:40:08:1e:2e:e1:
                    70:07:41:69:a8:0d:5a:c7:42:40:d4:a5:c8:3c:c4:
                    cc:bf:29:dc:61:17:67:89:12:96:4c:60:ac:e3:8f:
                    5b:36:b6:cb:fa:45:7c:8e:cd:fc:41:1a:af:2a:82:
                    a5:25:d2:37:72:c2:43:5f:4b:45:4c:67:9f:66:a9:
                    b9:54:f0:b8:7c:7f:79:5e:bd:6e:70:e4:f2:af:fd:
                    18:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:88:15:3F:3E:C6:B3:6A:3F:C6:85:0D:05:33:72:36:F3:CE:D1:12
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/6ba63c-83d2-4157-b4ff-00104e74eccd/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/6ba63c-83d2-4157-b4ff-00104e74eccd/1/VYgVPz7Gs2o_xoUNBTNyNvPO0RI.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  176.97.213.0/24
                IPv6:
                  2a13:b500::/29

    Signature Algorithm: sha256WithRSAEncryption
         6c:46:a1:80:35:9b:0a:8b:8a:35:20:9f:ae:d8:0e:b3:aa:3f:
         46:0b:1f:d3:e6:ca:a6:2b:7f:11:ec:07:cb:34:7f:0c:cb:69:
         23:7d:6b:9f:79:48:ef:f0:cf:05:87:8e:f9:ad:5d:70:a2:f2:
         29:6e:20:1d:88:33:34:1e:c5:4c:6a:3d:4d:df:2e:35:97:fd:
         e9:bd:a6:4d:7d:36:6e:1a:7c:ff:a5:cd:9a:c3:44:b4:29:1c:
         60:cc:ad:99:6f:d2:2a:d4:8d:9f:cb:73:d6:42:9d:cf:29:f0:
         d1:fb:ce:87:56:24:6c:fd:23:3b:b7:74:05:f1:e8:da:f1:a7:
         4d:52:fb:13:d6:5b:df:23:4d:a5:6f:34:4d:e5:38:16:87:d7:
         74:22:79:b1:a9:ca:90:66:c8:71:61:23:d7:89:5d:1a:9a:2b:
         33:07:fa:40:66:77:0f:c4:23:59:fa:b5:89:96:e8:be:35:90:
         8b:da:14:42:27:9c:5d:0a:34:3b:de:5d:88:5e:8f:d6:8d:75:
         b8:86:df:37:6e:87:7c:b0:af:41:88:44:60:a0:84:d1:8a:4f:
         6d:47:10:3b:9c:29:c9:7a:9d:f1:d3:54:bc:e5:6f:7e:cb:01:
         b4:33:fc:fd:1d:e2:24:a1:9b:ac:e9:dd:09:82:2a:f5:66:cf:
         64:a3:87:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----