Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5LkNshgW3wH3Dylmg_6iwKyBYdk.cer
File:                     5LkNshgW3wH3Dylmg_6iwKyBYdk.cer (raw, json)
Hash identifier:          kkEmZy36VRdgansWg3ATykd0610F/MmGWW3M91ZUv1A=
Subject key identifier:   E4:B9:0D:B2:18:16:DF:01:F7:0F:29:66:83:FE:A2:C0:AC:81:61:D9
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018571683681D4469737B14DAD54A5485159
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/5b/7642b9-caa0-43df-8205-2f18aa636bca/1/5LkNshgW3wH3Dylmg_6iwKyBYdk.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/5b/7642b9-caa0-43df-8205-2f18aa636bca/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 02 Jan 2023 07:35:33 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 87.236.144.0/24

Validation:               Failed, certificate revoked on Tue 12 Sep 2023 08:37:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:71:68:36:81:d4:46:97:37:b1:4d:ad:54:a5:48:51:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 07:35:33 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=e4b90db21816df01f70f296683fea2c0ac8161d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:f6:c0:87:d8:f6:e6:c2:66:1b:81:e4:e5:7c:
                    98:c6:d2:44:ef:06:d4:c1:33:94:32:38:1b:3b:fd:
                    e4:4c:a0:17:f5:a4:af:76:4c:12:c7:12:83:b9:d4:
                    c2:4b:ae:1b:c5:ab:7d:9a:9c:a5:c4:51:6d:c5:51:
                    73:32:4a:90:98:a9:a9:36:20:85:bc:61:d1:51:e4:
                    d4:0d:30:9a:97:d5:56:9d:b4:49:56:88:b5:e9:ce:
                    18:c3:12:63:ad:78:f4:2b:72:04:10:2d:96:d9:44:
                    d0:5e:11:c5:3e:ab:ce:4f:58:89:67:09:80:00:b4:
                    cd:3a:25:75:f9:1d:a0:af:37:3b:24:da:e9:46:e7:
                    21:b2:8d:9c:74:5f:67:8b:81:74:23:f1:90:09:31:
                    a4:5e:93:de:75:01:ed:2e:ae:66:a1:d8:0c:55:d9:
                    d2:20:0c:4d:46:67:08:13:b0:63:8f:8d:c2:14:b7:
                    81:9c:5c:88:22:16:42:49:03:aa:79:55:b6:c8:c0:
                    c3:a9:15:a2:fe:7b:cb:91:fd:2b:f6:ca:35:76:f8:
                    ab:08:d0:69:6b:b9:98:c7:c1:75:65:8c:b3:0c:eb:
                    45:d8:bd:29:94:7d:03:0a:e1:e4:d0:04:01:f8:82:
                    4b:89:8c:5a:d1:2f:2d:b0:be:85:a5:03:0e:89:da:
                    09:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:B9:0D:B2:18:16:DF:01:F7:0F:29:66:83:FE:A2:C0:AC:81:61:D9
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7642b9-caa0-43df-8205-2f18aa636bca/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7642b9-caa0-43df-8205-2f18aa636bca/1/5LkNshgW3wH3Dylmg_6iwKyBYdk.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  87.236.144.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2c:5d:73:95:5b:37:f1:8e:0c:d5:8a:60:fa:f0:03:2b:bb:b3:
         3b:2d:b9:d8:ae:cf:92:a7:d3:45:28:e2:99:1b:49:ec:0e:00:
         33:aa:28:9e:ed:5f:37:af:a8:36:9b:77:ae:89:79:2b:4f:ad:
         4f:1a:ce:6e:73:f0:0b:3d:bb:fd:5d:86:cd:b1:b4:e7:70:d2:
         8b:52:41:07:97:dc:97:25:13:64:77:cf:ea:47:a6:96:94:cd:
         76:78:48:88:48:b9:f2:6a:0c:2d:6c:d8:66:1e:3e:3a:b4:40:
         e2:e5:f6:b2:67:5f:c2:fe:19:fa:dd:e4:c9:2e:9e:18:50:3d:
         29:d8:59:08:d9:38:73:d5:ca:3f:c3:e1:c2:b4:cb:d2:65:7e:
         a9:65:4d:00:ce:55:fb:cb:8c:18:ee:57:44:a9:d3:4f:77:ca:
         a7:da:65:d0:cb:c4:2e:84:0d:af:f8:e5:26:51:8a:41:b5:37:
         92:b5:3d:27:71:03:a1:bd:af:d0:c5:29:ac:a9:51:da:2f:98:
         11:77:fe:91:b5:e5:33:9f:16:3a:26:e5:c3:f5:e7:2a:e8:50:
         4c:b4:58:a8:88:b4:f1:7d:17:9c:39:df:a7:53:85:23:6f:d1:
         6a:ff:e7:1f:19:56:26:77:16:33:0f:d3:28:aa:2c:68:48:32:
         e3:81:d5:9a
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAYVxaDaB1EaXN7FNrVSlSFFZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjMwMTAyMDczNTMzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNGI5MGRiMjE4MTZkZjAxZjcwZjI5NjY4M2ZlYTJjMGFjODE2MWQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv/bAh9j25sJmG4Hk5XyYxtJE7wbU
wTOUMjgbO/3kTKAX9aSvdkwSxxKDudTCS64bxat9mpylxFFtxVFzMkqQmKmpNiCF
vGHRUeTUDTCal9VWnbRJVoi16c4YwxJjrXj0K3IEEC2W2UTQXhHFPqvOT1iJZwmA
ALTNOiV1+R2grzc7JNrpRuchso2cdF9ni4F0I/GQCTGkXpPedQHtLq5modgMVdnS
IAxNRmcIE7Bjj43CFLeBnFyIIhZCSQOqeVW2yMDDqRWi/nvLkf0r9so1dvirCNBp
a7mYx8F1ZYyzDOtF2L0plH0DCuHk0AQB+IJLiYxa0S8tsL6FpQMOidoJCQIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFOS5DbIYFt8B9w8pZoP+osCsgWHZMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzViLzc2NDJi
OS1jYWEwLTQzZGYtODIwNS0yZjE4YWE2MzZiY2EvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWIvNzY0MmI5
LWNhYTAtNDNkZi04MjA1LTJmMThhYTYzNmJjYS8xLzVMa05zaGdXM3dIM0R5bG1n
XzZpd0t5Qllkay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQAV+yQMA0GCSqGSIb3DQEBCwUAA4IBAQAsXXOV
WzfxjgzVimD68AMru7M7LbnYrs+Sp9NFKOKZG0nsDgAzqiie7V83r6g2m3euiXkr
T61PGs5uc/ALPbv9XYbNsbTncNKLUkEHl9yXJRNkd8/qR6aWlM12eEiISLnyagwt
bNhmHj46tEDi5fayZ1/C/hn63eTJLp4YUD0p2FkI2Thz1co/w+HCtMvSZX6pZU0A
zlX7y4wY7ldEqdNPd8qn2mXQy8QuhA2v+OUmUYpBtTeStT0ncQOhva/QxSmsqVHa
L5gRd/6RteUznxY6JuXD9ecq6FBMtFioiLTxfRecOd+nU4Ujb9Fq/+cfGVYmdxYz
D9MoqixoSDLjgdWa
-----END CERTIFICATE-----