Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/vrOaWHXGodP6l8TStoF58OeHIaU.cer
File:                     vrOaWHXGodP6l8TStoF58OeHIaU.cer (raw, json)
Hash identifier:          odCk+P4CsWwo5l741bLH65Nq9F0bTFBa7bASVnlBe9w=
Subject key identifier:   BE:B3:9A:58:75:C6:A1:D3:FA:97:C4:D2:B6:81:79:F0:E7:87:21:A5
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0185DDB897106D55ED83CF9CC37D75F0ADC9
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/9c/56e7f6-6f26-4f45-9902-ee8308f4e5d4/1/vrOaWHXGodP6l8TStoF58OeHIaU.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/9c/56e7f6-6f26-4f45-9902-ee8308f4e5d4/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 23 Jan 2023 08:22:20 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    AS: 56974

Validation:               Failed, certificate revoked on Fri 07 Jul 2023 06:34:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:dd:b8:97:10:6d:55:ed:83:cf:9c:c3:7d:75:f0:ad:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan 23 08:22:20 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=beb39a5875c6a1d3fa97c4d2b68179f0e78721a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:b8:2a:ac:14:3d:cb:77:45:83:ae:7d:f3:ed:
                    8e:c9:13:c6:bf:21:dc:7c:06:83:a7:2f:ea:b6:51:
                    1e:85:8e:3c:a0:d9:b0:34:00:35:0a:80:4e:3b:5a:
                    23:73:9f:21:bb:66:72:7b:b7:9e:31:3d:9e:e6:4c:
                    92:ba:f7:9d:80:86:d7:87:44:75:13:31:48:0a:9e:
                    69:55:93:43:4c:98:bb:37:08:9e:a0:7e:ec:b6:81:
                    d6:cd:7e:0d:00:a6:95:c1:d7:86:df:b4:de:c4:45:
                    51:be:5a:0b:b7:99:9d:84:11:34:70:f1:52:6e:b4:
                    82:6e:8a:f0:90:a7:ae:5e:9c:0d:55:b9:b7:35:e5:
                    de:52:6f:5c:a7:c4:ce:8b:5c:a4:52:9f:a4:78:e7:
                    46:a7:c4:c0:62:60:01:60:07:cc:a0:62:82:36:cc:
                    08:1c:fc:cb:e9:57:0e:54:af:52:94:17:c4:86:00:
                    55:fa:c4:2b:8c:3c:b1:7d:6d:a7:c3:e6:cf:83:93:
                    d9:7f:2e:96:18:52:81:54:55:bb:77:ef:b8:4b:a3:
                    5f:36:e6:c8:fd:09:51:07:50:a6:4a:ff:26:8a:ab:
                    9f:88:8b:d7:22:cc:2e:ba:17:ae:3a:96:dd:84:63:
                    e7:32:c7:9b:9f:bb:df:0f:17:4f:dd:07:f2:2f:cc:
                    8e:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:B3:9A:58:75:C6:A1:D3:FA:97:C4:D2:B6:81:79:F0:E7:87:21:A5
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/56e7f6-6f26-4f45-9902-ee8308f4e5d4/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/56e7f6-6f26-4f45-9902-ee8308f4e5d4/1/vrOaWHXGodP6l8TStoF58OeHIaU.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  56974

    Signature Algorithm: sha256WithRSAEncryption
         74:b4:c3:8c:b0:b9:a3:e7:a3:da:50:33:6c:36:c1:e6:1a:fb:
         1a:0a:3a:72:fe:26:1a:51:27:75:c9:98:73:18:47:43:a1:ef:
         f9:24:0d:c4:a7:7c:74:8b:59:e4:35:ab:a6:d2:b3:6c:ad:5e:
         7c:a1:57:ab:95:65:24:2b:e6:1e:aa:c8:38:47:2c:aa:0b:7e:
         b7:b2:f9:80:bf:30:76:70:92:0e:58:75:68:19:5e:72:e7:7e:
         78:1a:35:b9:c4:a1:c9:f2:a2:7e:a3:7f:99:ed:df:81:10:83:
         5e:ca:a6:06:be:73:b3:57:2a:a3:d7:97:27:1b:5e:9d:36:d5:
         0f:4f:79:f8:d9:52:4a:8e:93:60:d7:c8:01:62:7b:7d:99:a6:
         8a:fc:f6:18:e3:cf:b8:52:fe:17:b9:23:92:8b:d3:1a:80:34:
         5e:13:28:c9:d8:20:8f:fe:0a:7d:ca:83:35:8f:d2:bc:d7:8f:
         33:23:3f:24:c4:54:ca:f4:60:56:93:23:18:43:ce:6f:9c:ee:
         bc:d1:c3:7c:c4:9a:85:be:b2:0e:54:f1:fe:88:c0:67:66:d1:
         c2:e6:5d:58:ca:6d:ef:8d:28:96:29:2c:d7:1d:20:b6:d5:bf:
         8a:2f:c9:c5:6b:90:63:f9:f6:4c:26:63:ee:bf:2b:5e:97:69:
         ae:a2:c3:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----