Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/vSUqrgD6MliMOGYvM1gtIdJr7y0.cer
File:                     vSUqrgD6MliMOGYvM1gtIdJr7y0.cer (raw, json)
Hash identifier:          f2APo8nngxiTZxatAOE2wfpOB2d6Kwg8bp+zLesgkmg=
Subject key identifier:   BD:25:2A:AE:00:FA:32:58:8C:38:66:2F:33:58:2D:21:D2:6B:EF:2D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856CAD3EF460559635F81FEEB21895C2FF
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/dc/dccdac-c8ce-4e70-a46c-608ca808b920/1/vSUqrgD6MliMOGYvM1gtIdJr7y0.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/dc/dccdac-c8ce-4e70-a46c-608ca808b920/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 09:32:51 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 146.19.144.0/24

Validation:               Failed, certificate revoked on Mon 18 Dec 2023 11:54:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6c:ad:3e:f4:60:55:96:35:f8:1f:ee:b2:18:95:c2:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 09:32:51 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=bd252aae00fa32588c38662f33582d21d26bef2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:c2:3c:9c:75:47:8c:32:42:d9:b9:27:5a:ec:
                    4a:e5:84:12:a7:9e:cd:7d:c9:d4:3b:56:2f:bf:9c:
                    f7:bf:dc:2f:96:f7:14:69:ba:d7:3d:7a:ae:7d:90:
                    d7:b4:4b:ea:d7:40:ca:15:03:89:74:1c:d2:dc:e6:
                    c9:e5:11:11:e2:ff:ff:18:79:9f:23:45:9a:a0:26:
                    1f:98:c4:b2:7a:70:da:41:a1:43:73:b4:8a:e3:bf:
                    35:21:54:f8:21:57:12:3f:15:79:5e:1e:ed:3d:fd:
                    f9:89:2a:68:8a:3a:86:49:ce:bc:a8:f8:47:dc:38:
                    37:95:a4:2c:88:96:e4:0d:6d:6c:8d:39:c3:45:10:
                    89:c6:df:31:f3:fd:e1:14:e0:1f:47:58:5f:42:d6:
                    a2:cd:57:35:cc:0f:14:7e:54:2b:b1:dc:82:2c:0c:
                    c5:62:01:cf:53:3b:5f:59:ff:19:6b:5e:94:00:45:
                    b1:45:77:cc:51:88:c0:5c:87:53:26:a5:02:57:81:
                    5b:06:07:a2:d3:64:b4:b1:e7:18:f3:68:7e:24:9d:
                    12:7e:ec:7e:4f:2b:ed:8d:9e:14:f9:dd:4f:38:42:
                    72:87:bc:1d:5f:19:1b:80:1c:40:3b:3d:56:84:bc:
                    9f:6c:b0:45:5b:f7:d7:d5:6f:0c:c0:99:55:19:7d:
                    db:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:25:2A:AE:00:FA:32:58:8C:38:66:2F:33:58:2D:21:D2:6B:EF:2D
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/dccdac-c8ce-4e70-a46c-608ca808b920/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/dccdac-c8ce-4e70-a46c-608ca808b920/1/vSUqrgD6MliMOGYvM1gtIdJr7y0.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.19.144.0/24

    Signature Algorithm: sha256WithRSAEncryption
         05:b8:a1:87:22:10:9d:e5:de:26:d4:95:43:be:0f:e7:0c:5b:
         48:12:50:96:57:aa:1d:24:be:ca:db:5d:3a:48:f0:4d:f9:f3:
         fa:01:88:d2:1b:41:40:d9:13:f5:40:7c:30:3a:61:c8:e2:cb:
         d1:54:64:a0:9a:00:bf:e9:cd:87:4b:43:02:d6:79:71:58:3c:
         ab:2d:67:61:1c:80:c8:e1:ba:c1:11:e2:16:f0:ed:ac:e1:dc:
         42:a4:94:be:53:d3:2e:d0:91:99:c2:e8:92:9b:85:0f:d5:98:
         83:67:4e:f0:4c:4b:93:48:45:73:21:96:9f:20:d3:7b:9d:ee:
         84:e4:9e:33:a0:09:10:cf:5d:9b:8d:b7:74:8a:f7:e2:7b:83:
         a8:f8:29:07:58:de:ac:55:c0:f0:1b:4e:3b:3d:db:f8:2f:c8:
         b6:b0:89:4a:1b:dd:bd:9d:c5:1f:07:ff:b8:a0:19:5f:ca:e2:
         4b:dd:66:5b:17:74:42:de:eb:d1:76:6b:c2:2b:6f:30:fc:6e:
         b7:d6:1c:6b:bb:47:45:f6:4f:89:26:06:23:9a:05:f2:82:7e:
         0d:a4:81:24:31:e6:d7:83:eb:f9:4a:5b:5f:72:f9:73:3e:b7:
         5c:af:a3:8c:f2:61:11:77:de:b9:b8:a9:e6:29:0c:49:28:4e:
         58:f8:8b:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----