Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/V-wtXndpiXodG4BRozalYteuiZs.cer
File:                     V-wtXndpiXodG4BRozalYteuiZs.cer (raw, json)
Hash identifier:          tjdW92itMgErmXTCBcylT0qbFNKf6vBXMzvMxgSlpC8=
Subject key identifier:   57:EC:2D:5E:77:69:89:7A:1D:1B:80:51:A3:36:A5:62:D7:AE:89:9B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856BD12E7C03AABF35749CD2CA7AB5DA4C
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/9d/523d18-ee1b-4e6d-98a7-89c41f2bec16/1/V-wtXndpiXodG4BRozalYteuiZs.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/9d/523d18-ee1b-4e6d-98a7-89c41f2bec16/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 05:32:29 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 146.19.27.0/24
                          IP: 2a12:2d00::/29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6b:d1:2e:7c:03:aa:bf:35:74:9c:d2:ca:7a:b5:da:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 05:32:29 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=57ec2d5e7769897a1d1b8051a336a562d7ae899b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:14:2c:35:72:a1:80:b6:e9:e0:dd:59:36:00:
                    e4:12:ad:d0:1b:64:a6:ef:25:3b:14:c1:9d:8c:7f:
                    4d:9a:93:f8:8c:14:fe:10:34:dc:7f:c2:bf:de:ec:
                    f9:9d:c2:d2:91:8e:c1:92:76:80:3c:f2:3d:36:38:
                    07:22:de:30:e1:86:94:8c:ca:ff:ad:c6:e2:44:18:
                    6d:c2:eb:50:0a:24:8f:4c:b5:08:45:b6:6d:40:a5:
                    5e:63:c9:75:4f:cf:00:37:c5:ca:cf:f5:e6:92:38:
                    fd:1d:b7:b1:92:50:8f:eb:51:7a:c5:87:50:22:2b:
                    32:d6:2f:da:17:88:32:71:04:ba:a8:fe:c8:64:39:
                    be:b1:32:77:29:96:71:60:06:dd:85:16:64:fc:f8:
                    98:60:a9:a8:73:c9:b3:f2:79:8f:63:d1:1d:62:3f:
                    b9:af:3d:53:9c:2c:d7:58:f6:96:cf:b3:a9:44:aa:
                    44:5e:4a:76:01:70:97:ec:a1:49:3f:44:d4:2a:2d:
                    3e:8f:13:91:c0:96:8f:4a:31:09:e7:31:24:0e:b2:
                    97:e2:b4:d7:6f:5c:33:c6:24:2f:d2:02:73:2b:c1:
                    1e:0c:f0:e8:70:82:b5:6b:4d:62:65:44:d7:2b:57:
                    76:5d:39:99:07:75:3a:52:85:d9:bf:e5:43:73:65:
                    7c:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:EC:2D:5E:77:69:89:7A:1D:1B:80:51:A3:36:A5:62:D7:AE:89:9B
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/523d18-ee1b-4e6d-98a7-89c41f2bec16/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/523d18-ee1b-4e6d-98a7-89c41f2bec16/1/V-wtXndpiXodG4BRozalYteuiZs.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.19.27.0/24
                IPv6:
                  2a12:2d00::/29

    Signature Algorithm: sha256WithRSAEncryption
         02:0f:8b:88:01:71:70:ec:33:f1:9b:83:c8:88:1f:0d:cc:f5:
         8f:93:88:e5:a3:af:49:8d:9e:74:54:35:b2:37:ee:c3:ad:85:
         66:60:43:c4:9f:af:fa:8a:cc:ce:99:60:e0:45:5f:7c:20:9f:
         da:7a:8f:97:90:d7:81:2b:49:a9:df:94:a2:9d:68:6f:e5:ae:
         69:90:b7:ca:d8:6c:e5:cd:2b:fc:38:ce:58:55:d0:7d:4e:e5:
         f9:cb:ad:af:47:57:c0:4c:ed:1e:fc:75:52:9e:1a:ac:17:ab:
         89:50:63:a8:e2:80:32:a7:83:23:23:fd:ca:50:88:a0:0f:1d:
         6b:e9:18:1e:9d:7e:7d:be:1b:35:36:58:9c:99:e2:f6:5c:85:
         ac:9d:79:76:4e:d1:f6:0f:66:6e:0c:f0:81:70:18:0a:b1:0f:
         8c:ca:91:40:75:0f:f9:e2:a3:02:05:e9:38:cc:4a:04:16:b6:
         fe:cb:d7:d2:f7:38:52:76:a1:4b:70:9e:1c:e5:9d:ca:34:28:
         83:f9:47:55:e3:e7:65:67:29:bc:ee:f7:35:e8:fe:ea:9a:e0:
         9c:50:1e:db:38:e3:2d:0d:0d:56:a4:3d:97:8f:95:7d:94:50:
         53:ff:5d:3c:fb:8e:25:de:7f:56:60:20:4b:53:9b:7f:b1:6e:
         a0:ac:9d:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----