Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/VCHd-wfM1sHguNcQ78EH1bfByGo.cer
File:                     VCHd-wfM1sHguNcQ78EH1bfByGo.cer (raw, json)
Hash identifier:          DpalxuHso5w+nAp44Tvk5lRbKKirShFkf1jR/cf6yr8=
Subject key identifier:   54:21:DD:FB:07:CC:D6:C1:E0:B8:D7:10:EF:C1:07:D5:B7:C1:C8:6A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018581EDA6B976F9F364784A27B30DD005DA
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/cc/559298-e89e-43da-b039-36ba114b756e/1/VCHd-wfM1sHguNcQ78EH1bfByGo.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/cc/559298-e89e-43da-b039-36ba114b756e/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 05 Jan 2023 12:35:13 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    AS: 25470
                          AS: 61231
                          IP: 185.14.144.0/22
                          IP: 2a02:f9c0::/29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:81:ed:a6:b9:76:f9:f3:64:78:4a:27:b3:0d:d0:05:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  5 12:35:13 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=5421ddfb07ccd6c1e0b8d710efc107d5b7c1c86a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:ca:83:39:b1:54:c4:8b:29:4a:17:f2:72:0b:
                    07:66:7f:20:16:34:aa:cb:0a:6e:e2:c2:3e:4a:47:
                    c7:b8:81:ef:44:93:49:1e:4a:74:11:b2:0e:83:85:
                    4a:00:f1:e6:5e:fd:a5:c9:e2:16:7a:65:04:0c:4a:
                    87:be:6a:da:0d:12:ae:41:c6:10:09:c3:09:20:b1:
                    aa:da:70:8f:f3:0e:20:44:57:b7:d6:bd:a9:b6:f9:
                    9b:2b:49:7d:bf:9b:9a:b5:db:d6:51:f1:2b:88:f6:
                    d4:96:d9:1e:6f:c3:f2:04:64:dc:b6:44:eb:ef:64:
                    a3:03:00:10:b5:14:c1:62:19:e7:6a:7d:b0:67:a3:
                    75:28:3f:a0:3e:00:10:5b:a9:a7:b4:1d:32:67:98:
                    3f:83:5b:b1:41:91:3e:11:aa:bd:cd:8b:e3:f2:0b:
                    91:cc:b0:1c:a6:1e:b3:40:c3:81:4d:80:a7:7b:b1:
                    47:62:f5:ec:7c:c3:ff:76:74:c7:0b:a9:7a:43:7c:
                    cb:3f:f9:12:59:48:a7:26:12:90:08:64:da:ea:de:
                    13:63:73:e9:2e:54:ae:c2:f5:27:71:1f:fa:b4:28:
                    18:9d:6e:2c:38:46:86:34:e3:28:83:23:f0:2c:b1:
                    62:dc:3b:f8:33:7b:49:9d:d2:2a:e2:ef:18:39:f5:
                    eb:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:21:DD:FB:07:CC:D6:C1:E0:B8:D7:10:EF:C1:07:D5:B7:C1:C8:6A
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/559298-e89e-43da-b039-36ba114b756e/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/559298-e89e-43da-b039-36ba114b756e/1/VCHd-wfM1sHguNcQ78EH1bfByGo.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.14.144.0/22
                IPv6:
                  2a02:f9c0::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  25470
                  61231

    Signature Algorithm: sha256WithRSAEncryption
         14:ae:cb:d0:2b:17:ae:6c:15:e8:19:ea:59:31:25:86:46:0e:
         b6:b8:9d:62:4c:ae:c6:7c:24:4c:9b:60:6b:f8:de:bc:70:88:
         43:a6:b9:b8:9d:48:9a:1f:f4:5d:31:14:1a:c1:ac:73:b7:36:
         51:f7:45:7c:cd:95:dd:45:4e:03:46:2c:2d:5d:6d:52:be:06:
         df:f7:69:89:92:9c:26:1b:d0:28:ea:dd:82:24:b7:b8:bb:4c:
         8e:39:62:40:a0:e8:e5:ca:ab:1c:de:bc:35:d7:da:12:e9:da:
         1d:14:d8:b6:0f:64:35:e0:f6:c3:88:ba:22:67:c1:47:cf:86:
         85:f0:b5:15:19:1d:e4:71:60:04:1f:32:d8:f7:2e:1d:bf:ec:
         59:e4:fc:1c:15:93:16:8f:78:69:01:3f:b6:2a:64:ef:4f:5b:
         39:bb:2b:73:f8:39:6f:83:b8:f7:d0:f1:78:22:0a:34:7c:42:
         2f:e5:06:d5:4f:ac:e1:c0:fc:c9:60:f7:a7:0b:21:d9:37:ef:
         b4:6e:d3:d4:6b:a0:be:d8:71:04:f7:e8:13:74:13:df:a0:27:
         6f:48:a9:d1:ef:78:52:d6:42:68:15:43:cd:7c:6d:23:ce:73:
         26:4a:6c:7e:55:7d:d5:e7:87:03:29:0f:0f:d2:b5:86:9e:15:
         1b:5c:0e:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----